Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/r5HzhpPmdtVRm3aD1z7dJw3F5JQ.roa
File: r5HzhpPmdtVRm3aD1z7dJw3F5JQ.roa (raw, json)
Hash identifier: 9/dXpJT8Vba0CUwPjWQRf2uL/KJhwL27tyST5X9W0X4=
Subject key identifier: AF:91:F3:86:93:E6:76:D5:51:9B:76:83:D7:3E:DD:27:0D:C5:E4:94
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/r5HzhpPmdtVRm3aD1z7dJw3F5JQ.roa
Signing time: Thu 15 Sep 2022 02:44:53 +0000
ROA not before: Thu 15 Sep 2022 02:44:53 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.176.16.0/20 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:44:53 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AF91F38693E676D5519B7683D73EDD270DC5E494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6f:8f:17:e1:ad:86:39:af:32:18:6b:1d:1a:
d4:a7:4b:fb:30:f8:4a:da:a9:7d:bd:c9:b4:fd:4c:
34:ef:c2:21:a5:2d:36:8b:95:f3:ba:87:93:30:b6:
c2:16:b1:82:98:02:cf:4c:85:fb:c9:25:f8:a0:8f:
41:fc:f0:88:6d:5d:a8:5c:5b:8b:64:ae:6e:6d:90:
41:e3:eb:9e:08:db:9f:70:26:b7:05:cd:fe:38:c2:
3d:f8:b5:62:79:b7:17:24:b3:22:f3:bd:40:3a:0f:
f9:3c:6d:8d:fc:0d:e0:6a:27:46:ff:30:c2:e4:e5:
db:ab:50:9d:7d:e4:fb:e8:80:77:60:30:f5:8c:04:
b3:4b:9d:f4:e7:bf:d4:b0:fa:a9:45:0f:ec:43:fb:
30:02:4f:aa:64:cc:4d:b3:1d:76:81:43:1d:ab:8a:
be:48:e5:b2:5a:4a:bc:1d:f7:df:bc:39:67:0e:d4:
e8:94:35:43:c9:34:bc:29:62:85:d2:79:5b:d7:76:
0d:c8:f5:70:3d:30:2b:79:b1:0e:bd:74:55:cf:81:
83:d8:5d:4a:b0:88:71:f5:eb:dc:39:5b:50:1a:eb:
b4:7c:ce:d0:59:ba:f9:e6:74:af:63:81:c2:d6:d1:
5f:8e:79:1f:39:c5:f5:bf:f5:06:5a:49:c1:be:42:
d6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:91:F3:86:93:E6:76:D5:51:9B:76:83:D7:3E:DD:27:0D:C5:E4:94
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/r5HzhpPmdtVRm3aD1z7dJw3F5JQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.16.0/20
Signature Algorithm: sha256WithRSAEncryption
57:c8:2a:a3:55:03:28:b5:04:c3:34:fe:ac:a6:70:61:f7:4c:
51:2d:a7:b6:c1:f9:59:fe:61:81:26:3f:a5:f6:72:6d:47:91:
38:18:27:74:44:0f:58:ef:87:c2:18:5c:dd:4f:b2:ca:f7:63:
dd:70:65:7b:a1:65:49:dd:ce:77:8c:05:ed:1d:0e:36:27:14:
6c:86:65:3a:19:31:27:26:35:f0:6a:45:8b:18:5a:14:49:d4:
07:f8:87:bf:e9:f4:19:a0:a0:7b:e9:9a:35:47:aa:7e:ad:48:
a5:9b:d7:be:db:cd:c9:16:be:58:12:e1:9f:7f:06:3b:28:66:
d5:f1:b8:57:5d:9b:89:3b:fd:17:54:8d:f3:c5:e0:93:1b:89:
f5:7d:45:7a:28:57:55:02:c6:f2:4e:55:27:c7:18:f9:89:1e:
23:7c:88:06:92:57:26:73:ea:04:f6:d8:fe:eb:ba:cf:cf:f1:
5b:ec:a9:ac:62:97:fa:d4:f4:29:10:d7:6a:4f:49:fb:7f:36:
ee:06:99:fb:10:72:20:94:7e:e8:a4:7a:63:dd:b6:9a:4d:6e:
59:57:5a:c6:75:e2:92:0d:15:12:ec:2a:62:53:74:9e:65:4c:
ac:e3:b7:6e:36:2e:24:69:67:5f:4d:52:25:75:1f:cd:1e:c6:
a9:eb:ba:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:40 2023 by rpki-client on console-fra.rpki-client.org