Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pSCqMFR30cbQlmqItnpwQgqXrCQ.roa
File: pSCqMFR30cbQlmqItnpwQgqXrCQ.roa (raw, json)
Hash identifier: 9Plc8aPz0ORqt3eEviw/rbEg6ywBt67YW+4YvlwsAhE=
Subject key identifier: A5:20:AA:30:54:77:D1:C6:D0:96:6A:88:B6:7A:70:42:0A:97:AC:24
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21E8
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pSCqMFR30cbQlmqItnpwQgqXrCQ.roa
Signing time: Fri 25 Nov 2022 04:40:32 +0000
ROA not before: Fri 25 Nov 2022 04:40:32 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.108.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8680 (0x21e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:32 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A520AA305477D1C6D0966A88B67A70420A97AC24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a9:e0:f6:22:5c:1a:65:ea:5c:bc:6b:e7:94:
e0:76:34:a7:d0:3a:0d:12:54:2b:ec:0d:81:4f:60:
7d:aa:fe:0e:4b:5e:28:f5:4c:54:5e:5b:77:44:97:
1a:a0:30:2c:3c:3e:fc:76:d2:fc:16:6b:64:b2:6c:
8a:be:f9:0e:5a:ff:15:1b:f0:f4:a7:aa:48:e5:5b:
fe:d5:50:3d:93:bb:98:d1:98:9d:07:a7:1b:1d:71:
79:f3:79:ec:44:95:74:9c:cd:7e:5e:f3:33:90:bc:
c6:5a:f0:81:26:69:0b:2a:6c:3f:f7:5c:88:f9:9f:
1d:53:1a:63:b5:59:b4:bc:0b:5e:0c:f4:f1:dd:cb:
66:15:f2:cb:37:39:e5:cf:c5:19:f8:6d:2d:19:28:
6a:d0:ca:cb:b1:3f:fe:fd:90:a3:a4:f0:6d:73:1f:
11:83:16:de:66:61:4e:c4:7e:78:a1:32:42:9d:73:
0e:f3:7c:d4:db:3e:89:66:58:7d:ac:b5:10:14:a8:
5e:e6:d6:b0:16:83:c9:02:69:e7:6d:bb:a1:27:a3:
2f:bd:d7:d0:2b:e8:31:e8:84:d5:d7:f7:da:93:8a:
32:32:cc:7a:d4:18:40:f5:39:c0:b2:ae:74:c0:e5:
65:ac:58:cb:7e:44:17:c8:6d:f1:9a:0c:da:7c:85:
04:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:20:AA:30:54:77:D1:C6:D0:96:6A:88:B6:7A:70:42:0A:97:AC:24
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pSCqMFR30cbQlmqItnpwQgqXrCQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.108.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:9c:01:b0:22:56:f0:43:d7:b8:35:c9:12:49:43:81:15:0c:
f1:cc:3d:86:3c:cc:de:c1:a4:7f:2c:6c:5b:52:0b:3a:61:33:
d8:82:72:72:fe:40:17:55:81:c8:0c:6d:b6:0e:b0:20:46:ef:
a9:f8:60:86:9f:09:61:a8:f4:88:ca:42:35:0d:be:f0:04:b6:
a0:6b:9e:ef:b6:5e:9d:42:0f:17:2d:11:b9:4c:13:d4:9d:d5:
11:3f:ef:da:4e:1b:ad:6b:be:8d:ea:34:b5:13:97:95:44:ba:
2e:bb:71:cf:d7:4c:12:0c:7b:e3:8d:73:cc:6c:0f:a5:7a:39:
7a:78:65:ef:79:1f:d2:76:39:d0:91:3c:b4:38:c2:19:45:c5:
60:e8:2c:f9:7c:6a:7a:e9:29:36:f4:e2:50:48:4b:b4:75:90:
a4:d9:f7:f9:be:51:95:5f:c7:d7:19:5e:bd:d2:32:9b:df:57:
bb:d4:b1:e2:af:f1:b2:b1:e6:3f:6c:2a:68:a8:cf:85:8d:0d:
11:f1:35:83:f6:b8:24:df:37:92:9e:1f:0a:a7:72:29:42:19:
30:09:16:45:19:5b:48:48:91:fd:51:27:9c:bd:e3:94:ae:12:
b3:66:8e:35:74:d4:68:55:ed:9a:ca:6a:16:1a:82:c1:e8:2f:
92:f9:5d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:10 2023 by rpki-client on console-fra.rpki-client.org