Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iAbnZH29-nZheBjP1TyubLKjVEw.roa
File: iAbnZH29-nZheBjP1TyubLKjVEw.roa (raw, json)
Hash identifier: ztmGGda6HKTIwqeRIi+WTEu/TjWXfz4DzANqYZv+5j0=
Subject key identifier: 88:06:E7:64:7D:BD:FA:76:61:78:18:CF:D5:3C:AE:6C:B2:A3:54:4C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2081
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iAbnZH29-nZheBjP1TyubLKjVEw.roa
Signing time: Fri 25 Nov 2022 04:38:48 +0000
ROA not before: Fri 25 Nov 2022 04:38:48 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.64.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8321 (0x2081)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:48 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8806E7647DBDFA76617818CFD53CAE6CB2A3544C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d3:73:f6:f2:1f:8c:34:f1:80:8a:ad:a1:f6:
df:85:45:8a:c8:e5:52:a8:87:24:24:26:60:8a:80:
03:fb:02:fd:37:dd:c6:88:21:8e:ba:79:28:60:e7:
e0:66:f2:02:98:81:6d:c3:5a:9e:ff:19:80:f8:c0:
b7:45:72:9c:d0:4b:60:c7:8b:c9:f0:45:4b:f7:70:
fe:ae:e9:62:86:fa:21:94:12:bc:fe:d4:c9:13:e4:
31:5f:da:92:26:ce:f9:c5:cd:d4:d1:b7:35:a6:99:
d2:68:07:1c:ea:95:2e:b4:86:2c:9a:cc:df:20:c1:
34:e9:46:56:6d:d0:62:27:ff:82:07:3f:f0:f7:77:
a5:77:17:7c:ac:97:1b:63:e1:1f:a6:3b:84:85:71:
1a:43:c9:18:4d:bb:fb:a2:29:eb:a7:4d:be:71:49:
e7:3c:c0:b8:77:8a:77:ba:d5:01:df:b2:4f:eb:ac:
00:d0:b8:f6:b4:0d:a8:24:51:d6:5c:ef:05:d7:81:
ed:67:30:ef:21:85:48:0f:54:bb:63:6e:69:32:6f:
47:07:26:a6:18:f8:1f:3a:94:4f:7d:0c:4c:77:fb:
45:64:9e:0e:a2:af:3b:56:be:ba:eb:7c:09:02:8f:
1e:0c:4a:5c:47:ea:17:10:4b:8e:0f:6d:e8:8e:18:
89:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:06:E7:64:7D:BD:FA:76:61:78:18:CF:D5:3C:AE:6C:B2:A3:54:4C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iAbnZH29-nZheBjP1TyubLKjVEw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.64.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:eb:77:03:10:93:8b:ab:69:2b:2c:24:ff:ff:0a:2d:4d:c3:
a0:87:6b:ad:6c:b9:f9:09:a2:5c:56:9f:d3:89:2d:94:3a:44:
34:92:f1:a3:4d:a4:bb:fa:38:22:68:b6:74:98:05:dc:95:5e:
fe:71:9c:b3:96:12:7d:e2:64:23:6c:f8:c6:68:86:39:dc:8b:
94:b0:0c:b1:4a:60:09:3d:74:b4:24:e5:32:ca:22:bb:35:1f:
53:03:d8:a0:57:4d:89:63:cb:20:f8:0f:39:fc:d0:2d:95:cb:
77:a8:da:b0:07:1b:6d:30:bc:d4:ec:e3:a9:95:c9:be:03:dd:
8d:8d:53:1a:7b:31:f2:f0:62:32:54:60:ba:e4:1f:7d:9d:0f:
c8:38:79:3e:49:b2:ab:4d:3e:78:e1:e2:c7:7c:34:ad:1c:ee:
51:37:66:3b:74:a8:8d:60:d3:e0:bd:3d:fa:67:fd:f8:c4:ee:
07:df:46:61:50:d2:a9:58:9b:01:72:30:6f:83:55:ac:3e:86:
d9:f0:ec:6c:81:ab:95:4a:29:73:b3:71:12:5f:9d:b9:2f:c7:
6e:59:c3:8f:15:09:b5:3d:b9:bb:c9:cb:90:af:c3:88:3a:8d:
1e:7a:61:b4:e0:6c:6f:e0:f8:04:59:25:25:2c:ab:d4:ea:56:
85:e1:27:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:32 2023 by rpki-client on console-ams.rpki-client.org