Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/g58j6GgTR6llv3Jaa2DnM51FEkY.roa
File: g58j6GgTR6llv3Jaa2DnM51FEkY.roa (raw, json)
Hash identifier: KdaG4xsExzuqghnIQGfGJjpSedwE1V0SOtDgt89eeuk=
Subject key identifier: 83:9F:23:E8:68:13:47:A9:65:BF:72:5A:6B:60:E7:33:9D:45:12:46
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/g58j6GgTR6llv3Jaa2DnM51FEkY.roa
Signing time: Thu 15 Sep 2022 02:56:05 +0000
ROA not before: Thu 15 Sep 2022 02:56:05 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.176.152.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8100 (0x1fa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:56:05 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=839F23E8681347A965BF725A6B60E7339D451246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:da:7c:71:b8:af:e7:93:39:5a:2f:a8:3c:8e:
f9:cd:98:cb:7b:49:12:b2:4a:92:8d:c7:08:14:02:
30:a6:75:45:91:b9:64:20:bd:d9:33:f3:81:20:7d:
04:5a:03:0e:44:cf:35:c2:65:e4:7d:ef:33:e6:d0:
7f:7f:9d:17:a4:41:47:85:cc:db:1b:46:2d:41:04:
c8:86:e6:17:a6:f0:54:ff:b3:b1:49:54:f7:fb:0d:
22:db:4f:4c:ec:4f:be:74:00:81:5e:d9:d7:33:ac:
1f:4a:a4:74:13:63:85:55:9d:0a:08:3e:9c:8b:4b:
16:45:07:07:96:97:04:f7:6c:ea:78:ce:d7:48:33:
18:0d:98:1d:c3:fe:8b:b6:01:b0:1f:c2:5c:b1:a4:
35:07:69:82:70:22:ae:da:6e:c1:12:8c:5a:69:b1:
da:01:14:d5:d1:cf:d6:ab:7e:b6:c2:b7:be:8a:a2:
07:2f:fd:cf:ca:6c:a8:7d:9e:96:d5:ea:60:b7:e7:
37:2a:13:94:56:ff:cf:80:73:e8:ed:13:24:07:21:
8f:dd:6c:7a:2f:56:ea:92:5d:b3:be:27:86:84:26:
ca:1f:31:18:57:1b:15:21:0b:67:70:a5:d3:e4:ff:
b5:e4:39:0f:db:a2:d7:ad:5a:a7:a9:d6:3e:9f:bd:
af:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9F:23:E8:68:13:47:A9:65:BF:72:5A:6B:60:E7:33:9D:45:12:46
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/g58j6GgTR6llv3Jaa2DnM51FEkY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.152.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:90:75:82:69:e1:27:2f:d3:e1:f0:0b:31:13:45:67:9d:c2:
6e:99:bd:05:cf:80:fa:2b:04:99:e3:87:c5:46:8a:13:5c:72:
85:8e:fe:84:0a:77:be:07:71:37:df:03:eb:16:2b:a0:55:50:
61:6f:bd:cf:42:c0:30:b7:3a:8e:0b:ea:cb:34:86:e8:ca:49:
a1:b8:88:44:38:19:45:c3:08:f0:6e:ea:f1:34:d1:79:e0:0b:
b9:63:84:5b:56:99:e9:50:2d:62:c8:11:32:83:00:83:38:49:
6b:da:dc:c9:dd:5a:43:bc:15:1b:7f:9a:68:39:1d:ae:cf:a0:
6e:6e:7d:e8:2f:19:34:66:02:15:70:91:a4:69:61:27:14:1b:
6c:2b:7a:c4:0a:7c:05:09:bc:90:d1:57:41:74:f2:dc:d2:c8:
e9:75:44:6b:f6:f4:b4:b4:24:f3:f0:73:f4:63:1b:e6:20:bf:
2c:80:d5:7e:f4:a4:a3:d5:0f:b8:f8:53:af:e5:50:5b:af:88:
cc:af:dd:dc:f6:e8:9a:8b:fb:44:6c:92:92:29:90:35:0f:40:
1d:2e:a9:5b:8d:94:f6:d6:bf:71:3d:d9:2c:f2:35:71:d0:3a:
9c:53:c4:60:e5:e9:72:97:d6:fe:90:3d:e0:4e:45:ef:3e:00:
3b:2a:00:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:37 2023 by rpki-client on console-fra.rpki-client.org