Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hq3mrMdpGBxg_NX-tWkO2MQySk0.roa
File: hq3mrMdpGBxg_NX-tWkO2MQySk0.roa (raw, json)
Hash identifier: 7WEh2J17HJDw2uFAQa+Mb4SKKl30M3c/fSdUlM0+Wsk=
Subject key identifier: 86:AD:E6:AC:C7:69:18:1C:60:FC:D5:FE:B5:69:0E:D8:C4:32:4A:4D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2051
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hq3mrMdpGBxg_NX-tWkO2MQySk0.roa
Signing time: Fri 25 Nov 2022 04:38:34 +0000
ROA not before: Fri 25 Nov 2022 04:38:34 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.114.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8273 (0x2051)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:34 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=86ADE6ACC769181C60FCD5FEB5690ED8C4324A4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f2:27:f0:c2:24:55:5a:2d:8e:3d:e6:ea:ef:
be:ed:37:7a:80:f5:d3:10:1b:93:2a:f3:88:6e:43:
ec:d2:07:77:ea:05:70:25:17:61:70:63:a4:07:c7:
60:a3:86:eb:c9:31:a8:7b:7c:6f:5c:51:90:07:82:
ca:d7:d3:71:2a:d2:9d:04:df:80:99:d0:04:53:3b:
bc:95:74:bc:82:80:24:cc:3f:89:f6:a5:4b:29:43:
1c:86:af:de:14:05:2a:c2:d8:89:3a:d6:81:c0:44:
a1:7c:00:79:8d:43:1d:97:be:89:5d:31:03:b6:7f:
6f:9c:fd:9c:52:c7:1b:26:b1:36:06:0c:2a:46:6c:
53:b5:d8:23:ea:39:26:0b:94:41:d8:7b:e1:1a:65:
6e:47:4c:7d:ea:85:7d:5c:a9:24:49:75:29:4e:63:
6b:18:37:e0:07:45:35:de:fb:af:34:fd:0c:dd:ac:
6f:6c:88:87:34:25:ea:cc:0d:7b:7d:18:b3:52:2d:
b5:f3:0a:35:fb:cd:c1:6e:b9:1d:f5:61:34:05:c4:
6e:fd:82:7a:39:56:cf:38:e9:ed:56:32:0a:dc:b0:
5d:c0:04:00:52:7f:74:88:8f:d0:63:78:39:37:1a:
30:aa:46:38:bc:39:e3:bb:45:ee:f5:6f:57:f3:66:
a0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AD:E6:AC:C7:69:18:1C:60:FC:D5:FE:B5:69:0E:D8:C4:32:4A:4D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hq3mrMdpGBxg_NX-tWkO2MQySk0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.114.0/23
Signature Algorithm: sha256WithRSAEncryption
74:ed:4e:6b:4d:1a:3a:41:f5:16:61:51:bf:b2:7a:ae:f0:72:
1a:47:19:c4:ee:2f:a0:5d:ed:80:dd:f2:3f:88:4a:fe:45:da:
24:09:d6:c2:d9:dd:47:ff:b1:10:e6:08:6d:8e:34:ed:94:01:
a3:4e:8c:f0:cd:77:86:14:f7:fc:8f:75:60:ef:d8:55:aa:c3:
5b:67:fe:92:a5:29:35:10:ef:e2:f9:06:ce:75:1b:17:10:5f:
89:ac:56:70:31:93:49:3e:0a:ec:58:d2:f2:f7:33:39:84:cf:
23:dc:71:c1:a4:93:03:74:91:e2:b8:b8:7f:3e:ac:6e:34:a9:
d3:eb:1c:77:a0:73:7d:8b:e3:d0:98:c2:a4:3a:7d:57:e9:49:
c7:fb:01:ca:48:c2:3a:db:2e:bf:8d:4b:e4:f8:f4:c0:4b:33:
8a:b9:4f:46:20:24:8f:cf:39:67:77:92:3c:25:dc:f8:97:29:
bb:e2:37:0d:0b:a9:46:d2:12:ab:4e:88:35:89:42:54:bc:65:
dd:f7:c4:7b:25:44:24:9d:81:3a:53:49:eb:3d:b9:2f:e3:2f:
35:30:67:f5:53:59:47:e6:da:18:14:ee:be:17:2c:ad:00:b2:
86:65:e0:ff:b6:35:af:b2:5e:8b:f5:d3:c6:4a:8e:08:bc:40:
47:e3:62:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:32 2023 by rpki-client on console-ams.rpki-client.org