Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hO0jzxJxnOq0jIJpYQHicMaQr-g.roa
File: hO0jzxJxnOq0jIJpYQHicMaQr-g.roa (raw, json)
Hash identifier: uMLGiIs3Qlp+qfH7zDVXPgqvxbACtS2qSF5yk6XsssA=
Subject key identifier: 84:ED:23:CF:12:71:9C:EA:B4:8C:82:69:61:01:E2:70:C6:90:AF:E8
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2211
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hO0jzxJxnOq0jIJpYQHicMaQr-g.roa
Signing time: Fri 25 Nov 2022 04:40:43 +0000
ROA not before: Fri 25 Nov 2022 04:40:43 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 180.177.0.0/16 maxlen: 16
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8721 (0x2211)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:43 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=84ED23CF12719CEAB48C82696101E270C690AFE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:de:13:93:58:71:37:89:69:87:89:b9:17:7c:
57:81:11:30:78:bd:d7:97:64:4b:c3:38:fa:7b:74:
62:1b:4e:5d:e6:fd:64:4d:e4:60:c1:e1:8e:a0:f9:
1c:74:4e:93:38:a3:7e:d9:d3:81:64:15:3c:5e:05:
df:cc:9c:49:bd:e8:7c:8d:84:d2:ac:93:0d:56:41:
fa:2d:cc:51:16:3f:97:39:3e:9c:fb:c9:f6:99:e9:
9e:da:da:41:a8:af:6e:9d:ba:39:89:5a:e6:04:98:
46:9f:42:f7:fe:e6:0e:8e:d4:86:62:18:70:8b:84:
e6:76:af:28:27:26:28:5f:8c:7a:7c:af:a0:c1:eb:
55:b7:7d:6b:35:ff:31:f9:cc:1b:40:7a:6f:c8:d9:
d9:cc:1a:c3:07:a5:cf:08:15:58:0a:99:05:08:9c:
6f:c9:99:31:58:04:a4:c9:a7:14:34:6d:7b:9b:fd:
53:f1:32:59:3a:e5:16:79:4e:78:ef:e7:aa:dc:a2:
7b:bd:ca:98:62:b4:df:b2:6e:58:b3:ed:70:16:65:
b7:cf:a2:be:d8:4a:3f:85:39:b3:d6:7d:92:7d:43:
aa:45:a8:90:fa:aa:50:6f:6c:4b:72:ae:5d:cc:8e:
ee:5c:98:2a:aa:8f:6c:66:35:d2:17:89:46:b5:4a:
5e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:ED:23:CF:12:71:9C:EA:B4:8C:82:69:61:01:E2:70:C6:90:AF:E8
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hO0jzxJxnOq0jIJpYQHicMaQr-g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5c:29:98:98:29:6a:30:0c:7a:c6:e3:01:34:72:03:01:cf:ed:
52:27:42:e8:a7:82:c8:77:1d:93:f1:b6:40:b0:47:51:f0:07:
40:63:ae:6c:7a:be:ac:0f:6d:81:44:b5:3f:0b:2f:fc:70:d3:
3f:2a:39:09:d5:22:43:f8:a9:5f:c3:77:07:7e:34:a8:38:3d:
17:e7:7a:66:27:59:cc:2d:c3:b8:9a:3e:ae:d6:a2:1a:3f:52:
44:be:96:fc:ef:9f:c0:f0:10:6f:62:69:6e:36:de:4d:bd:75:
0b:69:b8:8b:aa:7a:89:be:e0:ea:04:21:85:ef:c8:35:fa:ae:
4f:8a:dd:0b:1a:09:d3:a2:53:45:65:d3:a5:3b:04:96:f7:df:
a2:a3:1e:2a:bf:57:16:04:17:0b:e1:98:e1:0d:67:89:da:7c:
91:47:15:c0:69:3d:d4:78:6f:ee:d4:50:3f:10:35:bf:06:10:
fb:76:f9:73:9a:1d:1b:e6:97:17:f4:85:c4:ef:4e:6f:7d:24:
72:5e:e3:3a:f1:c6:d5:b3:eb:37:08:ae:1d:1b:09:39:ae:59:
37:89:32:8b:bd:8c:06:03:2e:c9:64:ea:b1:79:cb:cc:5d:25:
84:66:bb:90:49:f8:b5:44:30:e7:7c:a8:a2:ad:84:d2:4a:06:
20:d9:f2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:32 2023 by rpki-client on console-ams.rpki-client.org