Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mG0j_GfPMwwmmCvVorTNpDaCKIM.roa
File: mG0j_GfPMwwmmCvVorTNpDaCKIM.roa (raw, json)
Hash identifier: Nhak0GfrRKyvRURsW72w2/Oj9PKQ9qehcrat4BWGKNE=
Subject key identifier: 98:6D:23:FC:67:CF:33:0C:26:98:2B:D5:A2:B4:CD:A4:36:82:28:83
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 20A9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mG0j_GfPMwwmmCvVorTNpDaCKIM.roa
Signing time: Fri 25 Nov 2022 04:38:58 +0000
ROA not before: Fri 25 Nov 2022 04:38:58 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.176.176.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8361 (0x20a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:58 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=986D23FC67CF330C26982BD5A2B4CDA436822883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:45:dd:2a:a1:01:fa:0d:1f:da:e4:b5:88:74:
cb:e0:84:68:50:61:9e:af:9e:35:8f:15:85:ed:71:
5d:a5:89:78:ab:22:91:7c:3a:41:94:88:ed:2e:58:
16:1e:da:b8:b3:fa:46:5c:7e:be:6a:45:3b:a2:2d:
07:bf:45:af:84:2c:74:92:6f:0c:40:07:e0:cf:d9:
78:2c:7d:ab:c2:16:45:6a:80:93:c7:41:41:4a:58:
8a:1b:a3:b7:16:ad:f4:7a:05:05:ba:c0:dc:3a:23:
ad:f0:26:c0:de:f0:c5:84:78:07:5a:a1:e3:0f:03:
70:4b:33:1f:15:b8:3c:07:5a:19:88:3a:5b:e6:8f:
c6:e7:9a:70:7a:a8:14:02:29:c0:50:99:a4:ea:40:
ea:f5:dc:d1:42:3f:a0:ef:93:4e:a3:c3:df:be:32:
ff:ad:3a:a5:ec:5d:4f:9f:9e:23:6e:ee:0b:01:ae:
52:aa:fb:11:75:3f:47:33:25:ce:b8:f0:f3:25:dd:
f3:10:e0:93:11:50:40:1d:1b:05:d9:db:b1:39:00:
1e:85:b4:8e:18:e3:14:be:d5:a2:51:8c:37:0a:6f:
43:2e:44:bf:2f:45:f6:2b:be:eb:4d:24:e8:b3:ba:
41:57:25:02:d1:3c:35:11:ea:7c:b0:c8:48:ba:be:
86:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6D:23:FC:67:CF:33:0C:26:98:2B:D5:A2:B4:CD:A4:36:82:28:83
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mG0j_GfPMwwmmCvVorTNpDaCKIM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.176.0/21
Signature Algorithm: sha256WithRSAEncryption
35:8d:52:74:d6:b1:53:02:91:be:c3:9a:c5:aa:c1:b7:6d:79:
ff:79:84:ce:68:bb:62:6b:2f:43:e7:89:1b:c8:03:db:07:4e:
ec:c4:54:e3:51:1c:fc:97:e2:37:7a:c1:be:b8:48:dd:90:02:
59:3e:49:2c:50:c4:e4:d7:17:0f:d4:0d:2e:79:81:81:4b:21:
0a:d0:3b:cc:86:ba:71:1f:77:fe:c8:95:28:ab:63:27:58:72:
7f:de:d8:16:c3:cf:9c:39:62:18:b8:04:29:0d:7f:b1:13:de:
1b:d5:35:9c:7a:ec:71:4f:1b:9e:e6:5e:5f:e6:5d:d4:05:5e:
27:bb:c8:0f:06:2d:e4:e6:6a:03:a5:ae:85:0b:ee:ac:53:a0:
6c:17:5a:03:cc:78:e2:4b:22:7e:f3:24:96:b3:5e:b6:2c:73:
96:68:d6:f3:59:1f:31:08:f3:6c:9d:a4:9f:94:e7:42:3c:48:
ee:59:a7:d8:72:0e:35:c6:ba:ca:92:98:cf:6e:f6:4a:c0:d8:
02:ab:23:d9:d7:cc:cb:98:cc:89:52:dd:5b:b0:83:bc:a2:e9:
15:5c:83:d0:02:62:12:59:16:d2:64:3d:86:79:d9:f4:2e:fb:
0d:f4:f2:e6:ea:e9:d9:26:f9:3b:7f:22:60:c4:12:01:9d:61:
7d:9c:af:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:33 2023 by rpki-client on console-ams.rpki-client.org