Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ccPvJxTnzitPZ1HL8oHpthq2Z_M.roa
File: ccPvJxTnzitPZ1HL8oHpthq2Z_M.roa (raw, json)
Hash identifier: t2gYMo/yJYn7iGZjTdThXp4GGEmJGNF8bvnPcsBt5ek=
Subject key identifier: 71:C3:EF:27:14:E7:CE:2B:4F:67:51:CB:F2:81:E9:B6:1A:B6:67:F3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21B1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ccPvJxTnzitPZ1HL8oHpthq2Z_M.roa
Signing time: Fri 25 Nov 2022 04:40:12 +0000
ROA not before: Fri 25 Nov 2022 04:40:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.176.76.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8625 (0x21b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:12 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=71C3EF2714E7CE2B4F6751CBF281E9B61AB667F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2e:f6:f8:6a:ee:17:4d:38:9f:41:0a:24:03:
1b:9c:90:56:89:84:8c:a8:6b:e8:a9:13:02:f0:23:
21:4b:c5:1b:aa:50:9e:fa:05:1f:a9:9c:a5:f5:60:
75:f8:76:18:6c:a7:bb:61:8b:68:95:08:e8:9d:80:
3d:48:a8:61:86:98:fb:4b:26:e1:18:f2:aa:d7:dc:
27:ae:5d:28:96:91:6e:ae:b6:bc:77:6b:3f:72:be:
29:d0:3a:31:51:ec:b7:ff:f1:cc:7e:39:9b:85:8c:
e7:2f:cb:7d:72:dd:1f:89:53:37:38:2a:6b:b4:7a:
e8:85:4e:30:04:3a:33:7a:e8:9e:0c:fb:a1:b0:26:
8e:23:60:a1:0e:fa:83:0a:c9:fc:21:90:56:97:55:
fa:1c:5c:d7:88:80:4c:37:90:20:f3:79:5f:ca:74:
3f:c1:fc:66:3a:ce:ce:2d:c2:d1:28:2a:2d:44:3b:
10:2c:f9:14:38:ee:2c:33:f0:75:b6:46:5d:d8:5d:
ab:d0:b0:3f:df:87:d2:20:d4:22:3c:30:b1:66:61:
e0:fe:f8:ec:6d:74:1a:87:83:af:da:3f:bd:78:b5:
13:b1:ce:ec:71:6d:a4:7f:88:8b:2a:61:27:67:3c:
b3:fc:d5:a2:cd:48:78:e2:4e:ea:9e:eb:49:69:b3:
df:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C3:EF:27:14:E7:CE:2B:4F:67:51:CB:F2:81:E9:B6:1A:B6:67:F3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ccPvJxTnzitPZ1HL8oHpthq2Z_M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.76.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:44:3e:32:0f:6f:c8:0f:1f:48:29:cd:f3:9b:ff:c3:ca:31:
13:08:e1:fb:bf:37:c6:0f:ee:cc:5c:7c:7f:dd:89:f8:31:0e:
a3:f5:06:aa:12:a3:47:23:5f:f1:e9:92:a9:46:59:20:56:63:
16:78:c0:40:e0:79:ab:53:7c:10:66:0b:27:be:5e:d6:46:69:
9d:e2:8c:73:37:6f:14:9d:57:e5:00:cb:49:d3:a0:6c:40:69:
e2:84:60:1b:8c:df:50:5f:58:67:8b:92:3e:b0:48:05:aa:e5:
d7:9e:7a:7f:55:01:c4:31:01:90:4f:36:6e:75:9c:dc:c6:50:
c0:1a:07:82:33:80:4e:3e:b0:e5:4f:24:fa:f8:6b:48:b0:9c:
26:77:0d:ec:c2:4e:a8:05:33:34:ce:03:13:3f:aa:57:68:e8:
ce:36:67:78:15:c8:c5:54:3c:a1:40:fb:8e:67:51:76:17:d3:
36:4a:aa:17:62:c2:12:55:fe:17:9e:17:27:c4:21:4c:2b:63:
6f:6c:41:b7:23:b1:ee:16:44:91:2b:70:b9:a2:ec:3f:34:1e:
3e:e7:69:b6:fe:2b:57:c5:46:e9:a4:cc:a2:52:32:58:78:1f:
5a:32:29:4d:fa:06:f0:47:ba:37:9c:e6:2a:ab:ef:40:af:ef:
e0:f5:cb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:07 2023 by rpki-client on console-fra.rpki-client.org