Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/21dMhKc9PUjn8Wg6M0t_wfnwXwI.roa
File: 21dMhKc9PUjn8Wg6M0t_wfnwXwI.roa (raw, json)
Hash identifier: vAnwGLMQNfU6bX9HXfv/V5MVGBKTS3qpsfscYmwKmPc=
Subject key identifier: DB:57:4C:84:A7:3D:3D:48:E7:F1:68:3A:33:4B:7F:C1:F9:F0:5F:02
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 30E1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/21dMhKc9PUjn8Wg6M0t_wfnwXwI.roa
Signing time: Mon 26 Aug 2024 05:29:55 +0000
ROA not before: Mon 26 Aug 2024 05:29:55 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 123.195.128.0/18 maxlen: 18
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:52:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12513 (0x30e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:29:55 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=DB574C84A73D3D48E7F1683A334B7FC1F9F05F02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ca:1c:ac:75:fc:4b:db:4d:00:d1:35:9c:96:
96:15:5a:18:5c:a0:1b:c2:03:3e:1b:90:71:14:3b:
b8:d0:c7:97:dc:eb:05:5f:a9:b7:83:89:5f:5e:d6:
7b:19:ec:6f:e4:eb:cd:fd:bd:36:db:e4:42:fe:a5:
cb:9f:67:a3:6d:46:e6:aa:31:60:85:32:dc:e6:f5:
db:99:56:09:b9:db:eb:8b:5d:f4:4c:81:e1:85:df:
60:de:c3:b8:81:d2:c0:2b:97:3b:6c:66:e7:cc:c1:
ee:d3:e0:1f:8f:36:1d:ba:d2:22:81:84:a5:2f:b6:
8f:32:0b:b4:18:8e:f3:e9:5b:f6:21:e2:19:76:3e:
4b:6b:cb:5c:e3:5c:75:7b:d3:4f:95:a5:d8:19:09:
06:15:08:54:68:68:4f:43:8a:0d:f6:10:4c:bb:35:
a1:86:3e:db:67:e0:2c:77:bc:94:ca:80:51:ac:1b:
66:a3:ce:49:9f:3e:10:ed:8f:1f:f2:36:b2:73:a2:
d9:96:fb:05:2c:71:5c:bb:00:87:b3:95:e0:52:39:
e2:2a:9e:a4:e8:f4:91:89:f5:32:88:43:0c:23:64:
19:0d:7e:4a:69:4b:24:d9:81:ef:e7:f5:80:44:46:
3b:60:cb:05:33:1e:7f:86:fc:a7:6a:b7:bc:a7:d6:
d6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:57:4C:84:A7:3D:3D:48:E7:F1:68:3A:33:4B:7F:C1:F9:F0:5F:02
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/21dMhKc9PUjn8Wg6M0t_wfnwXwI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.128.0/18
Signature Algorithm: sha256WithRSAEncryption
86:cf:a3:02:e0:a5:f1:e1:3e:c2:b4:99:c1:2b:2b:0e:e9:a2:
e8:9d:48:39:c6:6a:81:6d:93:0c:66:d6:d6:5b:e0:03:9a:0f:
4b:6a:3e:de:95:8a:ba:b6:69:4f:8a:f4:a2:21:d7:50:36:2f:
65:b2:49:80:f6:30:bd:51:33:d9:06:f9:db:dc:1c:13:d8:d6:
0c:23:21:ef:a2:8c:ec:2c:1b:8a:5d:80:fb:c3:73:64:0d:1e:
3f:01:8e:af:ec:fd:7a:fb:42:ff:af:03:45:a8:22:34:2a:80:
3e:d4:91:b8:1e:64:00:d9:a5:5e:94:c2:3e:2e:01:7f:50:04:
24:52:be:bc:47:a6:c7:cf:e7:b2:f4:4d:d5:f7:72:fe:9a:99:
d7:7c:ad:6b:22:a8:ad:24:52:59:8e:a8:39:ce:74:2b:50:e4:
06:e5:86:dc:ae:6e:de:d6:64:23:cf:fb:2c:1a:e7:cf:61:4c:
41:2e:bc:29:9a:d4:3c:25:2e:cb:f7:89:8e:ef:b9:49:af:ea:
74:ad:b8:68:7c:c2:86:45:44:ca:f7:b4:62:64:0d:7b:47:8f:
51:5b:de:ee:98:10:79:8a:8f:5e:78:db:52:65:75:cc:fc:0f:
27:ed:03:57:be:98:a8:1b:b2:8a:ad:a9:fe:9a:ec:b7:f9:3c:
16:20:e1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:59:25 2025 by rpki-client