Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jaN4TMKfIrdcJMmG55f-xDcE20Y.roa
File: jaN4TMKfIrdcJMmG55f-xDcE20Y.roa (raw, json)
Hash identifier: n6JgphtxVPBAZP7GDGkFRGmAVGrXsTWCluc41K9rbbo=
Subject key identifier: 8D:A3:78:4C:C2:9F:22:B7:5C:24:C9:86:E7:97:FE:C4:37:04:DB:46
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 209C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jaN4TMKfIrdcJMmG55f-xDcE20Y.roa
Signing time: Fri 25 Nov 2022 04:38:55 +0000
ROA not before: Fri 25 Nov 2022 04:38:55 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.176.48.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8348 (0x209c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:55 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8DA3784CC29F22B75C24C986E797FEC43704DB46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:48:5b:50:2d:46:62:25:a6:4d:80:83:17:f4:
3d:53:f7:40:a2:87:41:39:c6:a8:e7:db:bf:4a:fd:
6c:c2:f5:db:0e:f6:5a:3f:26:8c:e9:2f:b0:c5:a4:
da:36:b0:2c:1d:22:71:5e:bd:32:41:fe:89:e5:f2:
58:66:2d:52:f1:a3:fd:a4:67:a2:37:8c:91:72:35:
f1:fb:72:80:27:b3:9d:73:a1:0b:a1:b5:91:ff:4c:
60:0d:3e:84:6d:15:c4:44:b9:8f:3a:57:0d:51:15:
4d:48:d2:95:89:37:2a:1d:ef:c2:f0:38:8e:15:05:
3a:f4:cc:07:61:9a:bb:02:eb:42:06:52:6b:87:4f:
35:c9:49:f8:f8:04:4b:93:0d:59:6e:f1:19:78:ff:
d5:95:67:3f:a5:ab:2d:86:97:8c:97:ff:11:ac:c8:
97:8d:be:1e:75:85:95:56:30:42:f8:28:5c:27:65:
f3:6f:0d:df:35:11:c4:77:34:b5:e6:1b:0e:3a:2b:
d5:2e:30:c7:32:ce:49:22:a1:e9:c8:95:d2:ae:44:
c3:f5:e6:07:0c:3f:5a:ca:62:2e:53:cb:4f:43:40:
9c:2b:c7:04:c8:23:54:cb:04:4d:51:c5:41:dd:71:
53:47:fe:1b:95:64:2d:11:c9:21:e3:f0:1a:b4:f0:
96:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A3:78:4C:C2:9F:22:B7:5C:24:C9:86:E7:97:FE:C4:37:04:DB:46
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jaN4TMKfIrdcJMmG55f-xDcE20Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.48.0/21
Signature Algorithm: sha256WithRSAEncryption
97:14:23:d5:f5:dd:f2:dd:c2:2a:97:7c:10:8b:b0:58:4e:39:
6e:43:cb:00:da:b9:85:84:62:29:dd:c4:35:75:12:f2:cb:29:
06:af:63:29:91:dd:f6:17:c6:f7:7f:69:48:b3:b3:81:bf:da:
59:58:03:7e:fe:c3:03:f1:0b:26:68:32:14:c1:33:2d:3c:5f:
8c:37:e0:f8:2b:d4:8b:28:33:1d:52:4e:5c:ab:cb:c2:33:a0:
b6:a3:1a:81:a1:f6:67:d3:8b:48:c5:d9:76:6c:be:19:6e:bf:
7b:9b:c6:36:5f:b2:80:f5:82:42:06:88:00:55:39:94:f1:8e:
c9:4b:95:ef:42:f7:b3:bf:6b:bd:1b:38:64:08:e0:7d:23:62:
6e:aa:fa:64:f8:4b:c1:8f:fd:b5:6d:b1:ee:31:e6:8c:17:6f:
50:91:26:00:e9:2a:30:d6:9c:7f:b6:36:58:46:ce:21:08:f9:
ad:3a:88:98:81:15:cf:c4:16:3f:b1:07:0d:51:40:a5:6d:79:
28:fc:10:63:1a:06:3c:7a:f7:73:58:3b:dc:84:35:b4:fb:7d:
48:c2:04:ec:96:02:c5:6a:87:32:ce:af:e5:55:5c:af:13:72:
ea:f2:87:55:15:2f:96:73:09:09:5d:e1:f8:c9:4b:91:a0:1b:
ee:ce:cc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:32 2023 by rpki-client on console-ams.rpki-client.org