Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-t2cgQ6lsrVsFpI3ijIA8QYDvLY.roa
File: -t2cgQ6lsrVsFpI3ijIA8QYDvLY.roa (raw, json)
Hash identifier: VW7CSG5DaRzBwkl+ydxr/QH8p32IoKfbL751xO7J9hQ=
Subject key identifier: FA:DD:9C:81:0E:A5:B2:B5:6C:16:92:37:8A:32:00:F1:06:03:BC:B6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3088
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-t2cgQ6lsrVsFpI3ijIA8QYDvLY.roa
Signing time: Mon 26 Aug 2024 05:29:32 +0000
ROA not before: Mon 26 Aug 2024 05:29:32 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.193.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:51:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12424 (0x3088)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:29:32 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=FADD9C810EA5B2B56C1692378A3200F10603BCB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:10:e6:52:3a:e7:73:d6:ab:2d:c6:f5:ac:86:
b6:ad:a5:52:22:da:82:fc:f4:2d:98:e7:a1:e9:f9:
53:ae:07:89:85:84:d0:30:a6:4c:6d:3f:d9:de:a7:
84:6e:84:3f:02:42:65:60:39:16:46:7f:96:22:5f:
c0:0e:6a:8b:7a:ed:bf:ff:99:64:df:e7:ab:73:05:
66:c3:da:9e:78:e6:07:93:fa:d1:3a:d8:49:81:b7:
30:9d:1d:1a:9e:28:9e:f5:69:a4:7f:5e:49:62:84:
22:98:db:cc:e4:41:36:16:79:17:f1:7b:6d:dc:ce:
b2:ca:fe:75:16:bd:37:ff:d8:77:b5:c3:a3:ba:42:
8a:03:1a:9a:67:a2:5d:67:96:44:5d:ce:99:b1:3b:
c2:2e:bf:a3:b6:5d:06:6f:c0:91:c2:e5:39:92:a7:
24:ab:fd:f4:bf:28:5e:a9:3a:de:46:14:70:61:8a:
40:5b:a3:da:5a:5d:2d:fe:04:a6:2a:19:a9:62:2c:
94:d6:7a:33:9e:85:80:e5:11:b4:d9:6f:25:7c:82:
a7:1d:00:f4:79:17:2e:63:55:86:e1:77:30:19:55:
68:dd:04:c8:ac:d0:3c:fd:f9:1f:a3:d7:bd:80:bc:
52:6a:6f:05:5d:42:ba:c5:f6:71:9d:a2:04:be:c5:
76:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DD:9C:81:0E:A5:B2:B5:6C:16:92:37:8A:32:00:F1:06:03:BC:B6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-t2cgQ6lsrVsFpI3ijIA8QYDvLY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.107.0/24
Signature Algorithm: sha256WithRSAEncryption
44:92:95:36:ce:24:86:03:ed:d4:6e:95:0f:20:48:c5:fe:4f:
34:1c:23:d2:83:16:ed:ba:23:5a:93:50:1e:53:9a:7b:c4:d9:
b1:1b:d3:28:36:d1:68:ab:79:e7:7f:44:50:8e:7d:b4:ae:0f:
6f:02:8e:b0:c6:12:1b:cb:dd:99:06:75:4f:05:c6:dc:d3:87:
42:b4:92:a0:02:55:a9:da:57:2e:b4:7a:74:fc:e7:de:c0:64:
72:b2:87:c2:d5:18:89:53:62:6d:f0:0a:a9:f8:f2:63:8f:f4:
c6:b6:f2:f3:af:a2:d7:9a:d0:73:1d:1a:9f:a3:e2:c5:04:39:
57:89:98:44:8f:82:a1:d8:4c:0c:e6:1a:b9:7c:18:75:2e:48:
44:be:82:6c:d1:9f:51:76:0b:66:58:e4:0d:41:7e:e4:96:17:
65:f9:e0:ae:7a:5d:c7:8a:13:c8:27:42:99:c8:33:ab:56:4e:
2c:1f:b1:e9:c9:86:4a:e1:80:4b:be:b0:21:09:fa:41:04:f7:
2a:f9:ef:30:b2:f9:e4:0e:19:bf:96:50:03:cf:c5:74:66:04:
45:e3:97:f7:e1:a5:d7:8e:b4:58:41:37:2f:4b:f5:84:67:c2:
97:26:51:35:c1:48:21:74:cf:b8:82:26:4c:5e:60:92:bf:08:
16:99:87:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:14:05 2025 by rpki-client