Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3UvxzVm5RpzdQ-1eZ0FKYWU3sAA.roa
File: 3UvxzVm5RpzdQ-1eZ0FKYWU3sAA.roa (raw, json)
Hash identifier: 9L6tVrGbM36uSIdRuH7y98dTMQkPY72P7Er5wXqP3tI=
Subject key identifier: DD:4B:F1:CD:59:B9:46:9C:DD:43:ED:5E:67:41:4A:61:65:37:B0:00
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 30F3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3UvxzVm5RpzdQ-1eZ0FKYWU3sAA.roa
Signing time: Mon 26 Aug 2024 05:29:58 +0000
ROA not before: Mon 26 Aug 2024 05:29:58 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.194.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:52:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12531 (0x30f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:29:58 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=DD4BF1CD59B9469CDD43ED5E67414A616537B000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bb:28:0d:fd:e0:46:1f:66:ed:16:37:f2:20:
06:fe:4f:db:da:7e:85:45:52:c7:1b:0f:94:b1:df:
dd:6a:34:c4:24:c4:d3:32:a8:44:19:d2:2f:7c:cf:
9d:33:8d:14:45:bb:54:d3:59:d3:d8:c0:2e:ab:dd:
86:e4:3e:20:f8:c7:30:ba:c7:89:14:61:7d:a4:86:
67:88:58:86:5a:38:1c:57:9d:16:41:94:4c:15:3b:
96:87:9e:66:11:ca:cd:ab:81:e1:68:49:f2:6d:aa:
ff:4b:88:b6:e1:bc:01:89:67:e5:5f:e0:83:49:21:
87:44:4d:77:ab:69:4b:9d:17:2c:78:c7:f7:03:b3:
82:ae:f4:8e:57:c8:34:5b:b9:8b:c3:f8:74:48:00:
20:70:42:3a:59:2b:fd:29:22:c2:9e:dd:cd:fd:37:
0a:2f:ec:86:d8:a5:b3:34:ac:4c:55:a2:05:40:f0:
90:77:f3:43:1d:4d:4f:44:50:2a:2b:83:d4:ec:95:
ae:71:6e:70:1f:25:25:0b:34:8b:1f:3c:34:dd:df:
ea:8d:0d:93:af:92:97:5d:17:f7:7a:20:80:3d:54:
2f:0a:82:a7:3b:3f:7f:c0:ca:e8:20:aa:ec:34:e3:
57:38:f3:d4:3f:2b:e9:01:18:73:a2:b1:ee:91:04:
c1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4B:F1:CD:59:B9:46:9C:DD:43:ED:5E:67:41:4A:61:65:37:B0:00
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3UvxzVm5RpzdQ-1eZ0FKYWU3sAA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.252.0/24
Signature Algorithm: sha256WithRSAEncryption
91:0e:5e:f9:d0:0a:4c:c0:e5:e3:92:a8:1b:f9:19:9f:df:51:
df:2b:f7:ac:ad:c5:7f:27:0f:b6:04:40:a0:7e:f4:c3:72:3d:
b0:21:3f:ef:33:59:f1:45:55:45:25:9b:f4:48:a9:db:b9:60:
36:4d:0a:86:c0:ea:c5:bd:a1:13:b8:32:42:c5:37:9b:33:39:
f3:3e:f1:1c:6e:41:d7:a1:08:03:dc:42:af:92:06:90:a4:43:
a6:5f:47:c3:31:a4:14:25:7f:6b:8f:d6:5d:55:a2:80:bb:82:
c7:d0:35:25:25:e7:ce:84:fc:85:bf:85:96:34:0f:d4:15:20:
32:d8:1a:d1:70:50:6c:47:42:1f:1d:ef:8e:92:88:02:4c:f7:
d4:25:8b:cc:46:70:d8:12:26:03:b5:8f:5c:68:cd:3e:30:03:
3d:12:db:f8:bb:5f:7c:af:86:55:3d:b7:34:a1:eb:17:b8:72:
df:ba:7f:ac:df:43:92:51:25:ac:23:c5:7a:d0:a5:c0:ef:dd:
45:ef:41:47:ea:4d:db:49:1c:9f:f3:f8:eb:fb:72:61:82:e8:
82:62:72:28:9b:a8:a2:b0:69:bc:a9:34:98:9c:8a:dc:92:be:
b1:ad:7d:a0:9c:99:ac:62:0b:52:af:1f:14:99:f9:c9:18:e5:
f5:ae:a8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:39:04 2025 by rpki-client