Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1urvsqrqtT7pyVuoGyc2dkQ-wso.roa
File: 1urvsqrqtT7pyVuoGyc2dkQ-wso.roa (raw, json)
Hash identifier: Qh14J5bAtLw3OKt0YWe4XGxBIzxMFqK3Y8MM/bE7B3s=
Subject key identifier: D6:EA:EF:B2:AA:EA:B5:3E:E9:C9:5B:A8:1B:27:36:76:44:3E:C2:CA
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2FEA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1urvsqrqtT7pyVuoGyc2dkQ-wso.roa
Signing time: Mon 26 Aug 2024 05:28:58 +0000
ROA not before: Mon 26 Aug 2024 05:28:58 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:53:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12266 (0x2fea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:28:58 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D6EAEFB2AAEAB53EE9C95BA81B273676443EC2CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:80:e0:61:ca:99:39:21:bb:f6:54:2a:38:9c:
d8:77:68:31:9a:2f:75:ef:c8:53:ab:40:f8:77:6f:
cb:df:0b:26:f7:79:99:55:20:01:a3:1f:37:18:c8:
02:81:65:89:34:52:a0:fb:23:07:30:4f:e7:c6:a1:
3c:5a:44:c8:f5:74:54:2d:b0:d1:bb:02:b8:56:6c:
d1:dc:05:cf:05:17:93:dc:db:0d:55:27:f9:d9:f8:
dd:77:2e:4a:6d:ba:ab:ce:9a:f8:26:53:45:2b:3c:
dd:b1:41:07:c8:37:17:15:a6:79:be:88:0a:69:f6:
97:c7:88:0a:ad:1f:52:15:f2:b6:0b:a7:eb:2f:5c:
7a:bc:ad:42:6d:d5:73:3e:06:2c:66:cd:c0:04:a6:
e3:0d:a8:db:dd:da:c9:91:72:c3:04:46:40:3d:22:
d5:66:67:06:60:9d:e0:3c:34:29:86:01:bb:a8:01:
4f:ef:fd:93:e8:d6:78:c2:16:9f:03:fc:50:a4:5f:
67:ec:20:76:62:f5:df:16:76:85:55:c7:c6:33:24:
a9:a7:43:e1:94:e3:9c:e9:b3:12:e5:8b:b4:8e:0e:
bc:bb:f7:eb:37:d5:c5:e2:3d:2d:ee:f7:4c:3d:ba:
c4:1c:6e:31:20:20:fc:f7:47:14:b0:41:5b:70:68:
8b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:EA:EF:B2:AA:EA:B5:3E:E9:C9:5B:A8:1B:27:36:76:44:3E:C2:CA
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1urvsqrqtT7pyVuoGyc2dkQ-wso.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.101.0/24
Signature Algorithm: sha256WithRSAEncryption
77:8a:59:11:09:76:96:8a:79:94:82:44:0b:49:a1:26:eb:4d:
44:85:96:fc:6f:29:da:48:0d:92:2a:a7:ff:88:83:71:ad:9a:
32:ac:95:98:e0:90:96:31:85:ba:b2:a1:60:30:38:4c:2d:a0:
62:50:4b:99:d1:02:be:df:b5:77:89:1c:df:8e:ea:8e:7b:8f:
60:ba:71:12:56:38:1a:4a:37:20:b0:70:6c:a1:2c:12:4d:0d:
29:c3:f2:46:3a:14:27:ae:da:ef:68:00:6f:f8:17:ac:00:49:
c9:56:52:55:3c:99:61:25:59:a4:bc:25:ce:bf:57:43:98:64:
e4:4d:31:59:d0:6a:d9:e9:1b:fd:bc:12:91:5c:75:6e:9b:a0:
26:53:a3:94:2b:44:05:4f:5c:b5:87:b5:d8:93:72:84:49:f5:
f8:8b:78:11:07:25:5e:b7:e4:c6:ba:06:70:5f:ed:62:68:bb:
3a:8e:47:c3:71:71:1b:69:7b:d6:70:c7:5c:16:95:d9:09:51:
28:8a:bd:68:c4:82:32:1a:b0:4b:50:f5:b8:b6:b5:38:cf:cc:
ad:e8:e0:4b:56:31:22:18:d2:6a:bd:e3:9d:84:09:ad:21:c5:
48:a4:d3:3e:02:d3:94:df:fb:87:f2:af:ca:cd:40:50:a7:51:
25:65:40:be
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICL+owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw
NTI4NThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ2RUFFRkIyQUFFQUI1
M0VFOUM5NUJBODFCMjczNjc2NDQzRUMyQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvgOBhypk5Ibv2VCo4nNh3aDGaL3XvyFOrQPh3b8vfCyb3eZlV
IAGjHzcYyAKBZYk0UqD7IwcwT+fGoTxaRMj1dFQtsNG7ArhWbNHcBc8FF5Pc2w1V
J/nZ+N13LkptuqvOmvgmU0UrPN2xQQfINxcVpnm+iApp9pfHiAqtH1IV8rYLp+sv
XHq8rUJt1XM+BixmzcAEpuMNqNvd2smRcsMERkA9ItVmZwZgneA8NCmGAbuoAU/v
/ZPo1njCFp8D/FCkX2fsIHZi9d8WdoVVx8YzJKmnQ+GU45zpsxLli7SODry79+s3
1cXiPS3u90w9usQcbjEgIPz3RxSwQVtwaIuPAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU1urvsqrqtT7pyVuoGyc2dkQ+wsowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzF1cnZzcXJxdFQ3cHlWdW9H
eWMyZGtRLXdzby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq
AWUwDQYJKoZIhvcNAQELBQADggEBAHeKWREJdpaKeZSCRAtJoSbrTUSFlvxvKdpI
DZIqp/+Ig3GtmjKslZjgkJYxhbqyoWAwOEwtoGJQS5nRAr7ftXeJHN+O6o57j2C6
cRJWOBpKNyCwcGyhLBJNDSnD8kY6FCeu2u9oAG/4F6wASclWUlU8mWElWaS8Jc6/
V0OYZORNMVnQatnpG/28EpFcdW6boCZTo5QrRAVPXLWHtdiTcoRJ9fiLeBEHJV63
5Ma6BnBf7WJouzqOR8NxcRtpe9Zwx1wWldkJUSiKvWjEgjIasEtQ9bi2tTjPzK3o
4EtWMSIY0mq9452ECa0hxUik0z4C05Tf+4fyr8rNQFCnUSVlQL4=
-----END CERTIFICATE-----
Generated at Tue Apr 22 14:59:15 2025 by rpki-client