Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nw-PSeQxlKbKkAAA8Cc18bLSgyE.roa
File: nw-PSeQxlKbKkAAA8Cc18bLSgyE.roa (raw, json)
Hash identifier: aomGTWs1K13kR9ms0glZ8fuM60DBzSIOiGp5PsKWlL8=
Subject key identifier: 9F:0F:8F:49:E4:31:94:A6:CA:90:00:00:F0:27:35:F1:B2:D2:83:21
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 212C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nw-PSeQxlKbKkAAA8Cc18bLSgyE.roa
Signing time: Fri 25 Nov 2022 04:39:35 +0000
ROA not before: Fri 25 Nov 2022 04:39:35 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.176.248.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8492 (0x212c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:35 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9F0F8F49E43194A6CA900000F02735F1B2D28321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:82:68:9d:f5:48:d8:cf:28:01:0e:57:63:d4:
31:0a:42:4d:5f:6f:db:11:3a:84:ed:83:18:9f:6e:
ab:95:3d:8f:c2:5a:6e:b5:e6:dc:d8:05:9d:6e:34:
5f:11:29:64:37:da:5c:8e:85:85:a7:93:8e:39:d0:
2d:69:39:a0:7b:12:fc:17:9b:be:d0:1b:23:77:0c:
a9:6f:67:26:87:7b:81:d9:1b:4c:7d:3f:06:ff:4a:
9c:fd:ca:3c:d8:7f:83:de:a0:12:50:e5:74:a2:2e:
cf:e3:8b:e7:30:ca:89:d5:20:fb:b5:95:f4:0e:7f:
c0:a4:36:9b:82:90:5d:5a:05:30:05:67:2a:b4:54:
03:c7:a9:fe:9f:fc:6f:95:fc:a1:41:d8:26:e6:4e:
bf:55:62:c1:4b:ec:bb:4a:d5:42:8d:e3:b0:9b:72:
81:bf:e8:93:6c:3f:b5:98:ae:72:13:10:0f:89:7c:
50:61:e1:64:58:7e:e1:31:78:67:f9:22:9d:4a:30:
83:e5:d7:a7:78:8b:4b:3b:39:b3:d8:1c:fa:18:9e:
88:e0:2e:88:b8:b2:b2:f6:ce:fc:79:e2:26:a6:a1:
0c:58:17:98:72:fd:14:59:05:04:d8:41:5d:4e:c3:
4f:7d:98:3d:4a:b7:5b:a8:9b:7d:59:96:07:2b:96:
5e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0F:8F:49:E4:31:94:A6:CA:90:00:00:F0:27:35:F1:B2:D2:83:21
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nw-PSeQxlKbKkAAA8Cc18bLSgyE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.248.0/21
Signature Algorithm: sha256WithRSAEncryption
72:d4:a2:32:20:74:60:e7:f8:84:ab:b3:7a:c6:9f:f7:19:e4:
48:94:fa:0d:5c:17:73:b7:ab:9a:4d:b6:3d:32:08:02:c5:cb:
cb:57:a3:51:e5:74:1c:e3:00:8e:52:6b:42:c5:c0:9f:ed:c4:
dc:6f:2e:8f:24:7b:65:b2:67:fd:68:e6:a9:57:92:53:9c:b4:
28:74:00:74:85:86:9c:31:1d:45:6c:0c:48:30:f9:5a:91:25:
02:45:32:98:9e:be:3d:18:76:30:32:64:ec:ff:07:c7:8b:f4:
b8:09:47:7b:41:0c:06:bd:0a:30:a5:93:97:a7:12:d8:b2:50:
a3:73:82:fd:e1:49:09:97:65:75:69:63:8e:3f:99:42:6e:e8:
2b:3b:ec:98:f2:29:d2:20:44:a8:78:24:2a:8f:1d:d9:4f:8d:
fc:cb:54:15:d0:08:29:d7:50:56:3c:dc:20:38:2c:97:6d:ab:
b2:72:9c:b5:4d:da:99:f2:70:ab:eb:fe:cd:ac:63:a1:4f:7a:
fe:41:cd:5f:3b:d5:f9:42:23:c1:9b:c7:c5:b6:dd:53:4f:62:
b3:60:ea:9c:c3:6e:bf:bf:13:67:5b:31:d0:46:5d:37:92:67:
67:3b:11:64:63:68:8c:25:f0:52:57:2e:af:40:a5:89:4d:1f:
ee:a1:a4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:34 2023 by rpki-client on console-ams.rpki-client.org