Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gnvE2LW8nd1M2dmk1Ws6ZmH9BxE.roa
File: gnvE2LW8nd1M2dmk1Ws6ZmH9BxE.roa (raw, json)
Hash identifier: mlZFT9Aa2KG7wKn7qREbC10mfcb9ilXG5PlKfVRlAuY=
Subject key identifier: 82:7B:C4:D8:B5:BC:9D:DD:4C:D9:D9:A4:D5:6B:3A:66:61:FD:07:11
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2317
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gnvE2LW8nd1M2dmk1Ws6ZmH9BxE.roa
Signing time: Fri 25 Nov 2022 04:42:02 +0000
ROA not before: Fri 25 Nov 2022 04:42:02 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.244.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8983 (0x2317)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:42:02 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=827BC4D8B5BC9DDD4CD9D9A4D56B3A6661FD0711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e8:40:52:89:30:01:07:9c:15:7d:1f:97:77:
19:d1:f5:4b:be:34:c5:96:9a:61:16:04:61:fa:32:
8d:4d:67:1b:eb:b0:f5:5d:72:9b:8a:aa:e2:ea:17:
9c:64:8d:22:50:27:0f:75:43:62:47:bf:e3:c2:8f:
1d:2a:1f:22:2b:93:b1:c0:73:c0:60:8a:e9:6e:51:
17:e9:25:ea:15:aa:ba:45:50:30:27:7e:b0:e6:a5:
55:3b:ff:43:a2:80:63:e0:92:6a:6a:b4:f4:f2:c5:
b0:b6:4e:ac:03:3a:03:e4:0d:57:4d:be:0e:95:24:
f9:3d:35:63:b6:24:70:63:f3:05:61:23:b6:4c:0d:
8c:16:e1:5a:0e:87:bf:f6:f1:d5:14:04:48:b3:b0:
44:9b:81:84:4f:d5:5f:9e:84:2a:76:fb:4c:36:2d:
aa:a5:5e:32:58:4f:3c:de:69:4b:96:bb:b2:31:18:
20:5f:98:5b:a8:16:bc:c0:35:3e:bf:0f:58:ef:eb:
7d:f7:33:51:4f:85:4c:56:53:c0:0e:b2:e9:2a:0f:
eb:b6:98:07:f8:a6:50:15:2d:4a:c3:b7:91:57:d9:
e9:d3:db:fc:37:7b:10:ca:b4:45:fd:8b:f7:e4:a4:
1c:c1:4c:b6:57:2c:3e:fd:15:2c:c9:0b:c4:3a:d5:
af:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7B:C4:D8:B5:BC:9D:DD:4C:D9:D9:A4:D5:6B:3A:66:61:FD:07:11
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gnvE2LW8nd1M2dmk1Ws6ZmH9BxE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.244.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:91:05:01:d1:43:fa:9f:58:dd:3a:ae:06:c2:82:f7:53:1a:
b5:f5:cc:9f:9b:c1:94:ea:0b:57:c6:e2:5c:27:e9:9f:11:c5:
c9:69:49:51:41:ac:f2:58:67:9d:b7:2b:39:e2:43:7a:41:ca:
dc:87:5d:e0:d0:58:f8:84:00:ea:52:28:62:46:88:8f:7c:85:
d2:fb:2d:0a:32:00:2b:28:27:80:dd:69:c7:e6:cc:11:80:c8:
04:6b:d0:0b:29:71:58:e3:ea:07:a0:e6:80:fd:b5:ef:0a:5a:
a2:97:42:63:cf:a9:05:fc:42:09:4e:2e:a3:e0:72:d7:a7:24:
d5:a1:b4:ce:04:88:10:b5:ef:52:50:40:cd:d4:8f:d3:8b:ad:
a7:9b:4c:ca:f7:05:63:77:e3:42:2a:a7:42:e9:36:2b:a6:6b:
9a:0c:f2:4a:46:6a:c7:82:66:61:09:5d:fb:d7:67:59:f5:c0:
b8:e5:2b:99:f3:0f:00:83:92:76:3c:a0:8f:99:8d:2b:ae:9c:
9a:8f:c6:af:28:29:9d:f1:04:5c:d9:30:9e:b4:69:3a:97:f8:
22:b1:5b:68:2e:4f:96:9f:44:e7:85:db:c5:68:87:9c:2c:47:
72:c6:24:c6:f7:59:7e:54:a3:17:f0:3f:1d:a2:ed:4d:cd:e0:
c8:d6:0b:91
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIxcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQyMDJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDgyN0JDNEQ4QjVCQzlE
REQ0Q0Q5RDlBNEQ1NkIzQTY2NjFGRDA3MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCo6EBSiTABB5wVfR+XdxnR9Uu+NMWWmmEWBGH6Mo1NZxvrsPVd
cpuKquLqF5xkjSJQJw91Q2JHv+PCjx0qHyIrk7HAc8BgiuluURfpJeoVqrpFUDAn
frDmpVU7/0OigGPgkmpqtPTyxbC2TqwDOgPkDVdNvg6VJPk9NWO2JHBj8wVhI7ZM
DYwW4VoOh7/28dUUBEizsESbgYRP1V+ehCp2+0w2LaqlXjJYTzzeaUuWu7IxGCBf
mFuoFrzANT6/D1jv6333M1FPhUxWU8AOsukqD+u2mAf4plAVLUrDt5FX2enT2/w3
exDKtEX9i/fkpBzBTLZXLD79FSzJC8Q61a85AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUgnvE2LW8nd1M2dmk1Ws6ZmH9BxEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2dudkUyTFc4bmQxTTJkbWsx
V3M2Wm1IOUJ4RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
sfQwDQYJKoZIhvcNAQELBQADggEBAI+RBQHRQ/qfWN06rgbCgvdTGrX1zJ+bwZTq
C1fG4lwn6Z8RxclpSVFBrPJYZ523KzniQ3pBytyHXeDQWPiEAOpSKGJGiI98hdL7
LQoyACsoJ4DdacfmzBGAyARr0AspcVjj6geg5oD9te8KWqKXQmPPqQX8QglOLqPg
ctenJNWhtM4EiBC171JQQM3Uj9OLraebTMr3BWN340Iqp0LpNiuma5oM8kpGaseC
ZmEJXfvXZ1n1wLjlK5nzDwCDknY8oI+ZjSuunJqPxq8oKZ3xBFzZMJ60aTqX+CKx
W2guT5afROeF28Voh5wsR3LGJMb3WX5UoxfwPx2i7U3N4MjWC5E=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:32 2023 by rpki-client on console-ams.rpki-client.org