Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-pLnk_zAeJwxS0AUOJ0DrxRFzVY.roa
File: -pLnk_zAeJwxS0AUOJ0DrxRFzVY.roa (raw, json)
Hash identifier: cYh0YECQsJcEu0sNq42pKWsRENUNZyy+bQ46iMIe9E0=
Subject key identifier: FA:92:E7:93:FC:C0:78:9C:31:4B:40:14:38:9D:03:AF:14:45:CD:56
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2F99
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-pLnk_zAeJwxS0AUOJ0DrxRFzVY.roa
Signing time: Mon 26 Aug 2024 05:28:39 +0000
ROA not before: Mon 26 Aug 2024 05:28:39 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.195.144.0/20 maxlen: 20
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:52:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12185 (0x2f99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:28:39 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=FA92E793FCC0789C314B4014389D03AF1445CD56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:44:a9:96:0d:a7:6b:30:c7:fa:d1:6d:b1:10:
41:46:2d:55:81:77:75:62:c4:9c:18:5f:10:97:ba:
16:98:3b:e9:e3:62:ae:48:ed:d2:63:f7:c1:46:e3:
ed:34:f4:d5:e0:64:9f:67:37:00:b6:e8:4b:01:60:
4f:aa:c1:49:06:be:fe:f6:bf:f8:c4:08:8c:68:e8:
8e:12:3a:63:d3:3f:46:53:fe:eb:f2:c0:1a:49:8c:
6d:5e:a0:29:9d:38:b6:88:d7:43:e3:d9:38:75:f1:
9e:94:a8:51:d6:06:61:34:69:82:0c:f0:1d:f7:c6:
f1:9a:d5:dd:87:86:f1:8b:a0:5d:72:a1:a9:80:7e:
56:97:e2:0e:2a:48:3f:ce:40:c3:49:13:8f:d2:e0:
b0:c8:56:91:7c:8a:76:9e:24:49:29:23:93:ea:0b:
56:91:94:3b:7e:4a:b6:d3:d3:bc:17:bb:84:cd:bb:
3b:b0:00:32:3e:2a:78:3c:a2:76:35:18:4f:25:f8:
05:dd:ff:96:2e:dd:87:dc:35:63:83:35:42:1b:4b:
f8:e2:63:0b:a1:72:7b:04:40:fd:63:0c:41:ad:f7:
6c:39:87:d8:f5:4d:e0:d3:99:17:be:35:92:51:71:
f4:a8:dd:64:fa:a3:63:b2:ee:12:4a:61:a5:58:63:
be:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:92:E7:93:FC:C0:78:9C:31:4B:40:14:38:9D:03:AF:14:45:CD:56
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-pLnk_zAeJwxS0AUOJ0DrxRFzVY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.144.0/20
Signature Algorithm: sha256WithRSAEncryption
aa:f8:7b:b7:86:64:75:6c:c8:c3:55:7f:47:4a:4e:96:b6:ec:
d3:72:8f:a4:08:7c:98:fa:80:8f:90:77:7c:33:2f:4d:69:75:
0a:08:bc:f5:91:79:de:5d:a7:87:a9:7d:5f:51:a6:e0:8e:14:
8f:13:ec:c6:42:7f:7b:f4:dc:83:51:9d:26:5f:7e:de:50:b3:
57:68:7a:61:55:0e:ba:c7:78:5b:14:90:fe:3d:a9:68:91:de:
bd:99:3c:46:71:b7:bc:05:6f:5d:35:a1:f0:83:86:7b:47:a3:
31:7d:f0:bf:fc:a9:e1:48:b0:48:b9:6e:12:84:b9:64:88:f6:
df:58:17:ea:96:d2:07:31:11:02:62:06:b6:46:9a:d9:0f:b4:
ce:e3:84:6f:f4:94:b4:30:7e:93:c0:23:89:23:8a:72:9a:ff:
94:73:91:4d:be:21:dd:3d:97:21:d6:47:6d:4d:4d:e9:59:1c:
76:85:f0:5f:60:ad:73:12:3e:2b:0f:52:4f:dc:64:62:08:03:
12:34:72:51:97:31:8e:8c:ab:9f:13:89:69:7a:c0:a7:21:f2:
32:24:09:c4:c6:ef:05:04:af:ba:95:23:29:60:ac:fd:5f:e6:
25:74:aa:b3:15:a1:41:5f:5e:cd:81:5b:10:2c:00:40:3a:8a:
e1:f6:c7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:44:02 2025 by rpki-client