Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/47qSs-ar8e9ZE9KEAQsIMgPbNqE.roa
File: 47qSs-ar8e9ZE9KEAQsIMgPbNqE.roa (raw, json)
Hash identifier: 4Al3Karo7yc8IE+WswXAXTmtCMe76EEdAP1kbLYSnS4=
Subject key identifier: E3:BA:92:B3:E6:AB:F1:EF:59:13:D2:84:01:0B:08:32:03:DB:36:A1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 314B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/47qSs-ar8e9ZE9KEAQsIMgPbNqE.roa
Signing time: Mon 26 Aug 2024 05:30:19 +0000
ROA not before: Mon 26 Aug 2024 05:30:19 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.194.80.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:52:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12619 (0x314b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:30:19 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E3BA92B3E6ABF1EF5913D284010B083203DB36A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bc:4d:37:cf:a3:e0:f9:94:fc:59:9a:2d:72:
1d:1d:85:61:4f:a0:78:ee:dd:66:26:4a:fd:25:24:
f3:1c:02:2d:bb:0a:10:f6:f9:69:b3:ce:1b:73:4f:
86:9d:66:82:3d:73:24:04:67:cc:fb:d8:9a:8e:11:
b4:10:19:f4:c1:c5:3e:0d:5c:6a:48:6b:19:a4:bd:
d2:51:a6:43:95:5d:90:67:18:6f:1b:77:83:f8:52:
f0:50:f0:59:58:4c:92:62:20:6b:4e:cb:fd:cd:f1:
b1:02:e4:0f:93:56:01:63:95:43:e1:0c:51:68:9d:
cf:55:32:8c:f3:a7:19:34:06:6f:4d:07:a3:61:3e:
72:2a:d7:0c:04:73:3b:94:13:fc:b7:8c:93:47:86:
55:73:3b:41:f2:dd:9d:b6:0d:c6:df:66:83:a0:bd:
b0:e9:cb:41:34:82:3c:57:18:a1:e6:56:ae:71:94:
c0:35:ef:a2:cd:86:dc:c5:c2:bc:a9:db:1b:3c:bf:
37:47:17:10:83:93:03:41:96:14:f2:61:e1:a0:4b:
1c:5b:ef:81:0f:74:33:d6:19:9a:20:ac:df:d9:32:
84:3c:e9:f5:a8:8e:cb:e8:98:f1:af:18:cb:7a:55:
7c:ce:ff:75:6a:1b:00:1e:89:b8:9a:07:dd:bc:84:
c7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:BA:92:B3:E6:AB:F1:EF:59:13:D2:84:01:0B:08:32:03:DB:36:A1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/47qSs-ar8e9ZE9KEAQsIMgPbNqE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.80.0/21
Signature Algorithm: sha256WithRSAEncryption
22:fb:fc:af:86:ff:c9:aa:39:d3:47:86:d8:7d:80:9a:18:b0:
28:84:0d:34:71:2f:70:41:02:5d:07:b8:27:0c:23:bf:17:ff:
0f:ca:eb:11:1e:4a:fa:34:97:b0:82:98:c7:cc:4a:f2:fe:07:
7c:a8:06:b3:14:de:53:ed:6b:6f:a7:47:be:9e:80:a6:63:bd:
17:78:2d:a5:ef:c4:d6:3c:de:79:55:bc:28:95:d0:81:75:81:
47:92:e1:22:7c:59:72:19:b5:5a:d3:77:ca:77:e6:95:c3:e7:
3a:ca:47:83:d2:5a:70:03:97:cf:33:90:11:58:75:07:83:a3:
25:fe:d4:8b:2d:d0:56:3c:41:af:a7:34:f1:23:81:77:74:1b:
5c:79:bb:68:c5:cc:9a:b7:4f:db:8c:1e:5e:80:23:4d:61:1a:
9d:7d:49:3f:26:a6:d8:4e:10:e4:74:7e:aa:9a:13:80:14:ff:
48:71:41:6f:79:53:62:7f:09:81:f3:9c:fc:f4:8c:da:d3:ce:
5c:ef:e0:82:c1:d3:5c:0d:56:5b:66:d1:27:75:b2:14:2d:10:
83:96:7e:2e:58:02:dd:92:40:c2:6e:46:e2:0e:4d:8e:1a:f3:
1b:0b:3d:f8:35:d4:be:56:66:71:bb:64:36:51:0a:af:6d:bb:
19:0d:21:c9
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICMUswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw
NTMwMTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEUzQkE5MkIzRTZBQkYx
RUY1OTEzRDI4NDAxMEIwODMyMDNEQjM2QTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIvE03z6Pg+ZT8WZotch0dhWFPoHju3WYmSv0lJPMcAi27ChD2
+WmzzhtzT4adZoI9cyQEZ8z72JqOEbQQGfTBxT4NXGpIaxmkvdJRpkOVXZBnGG8b
d4P4UvBQ8FlYTJJiIGtOy/3N8bEC5A+TVgFjlUPhDFFonc9VMozzpxk0Bm9NB6Nh
PnIq1wwEczuUE/y3jJNHhlVzO0Hy3Z22DcbfZoOgvbDpy0E0gjxXGKHmVq5xlMA1
76LNhtzFwryp2xs8vzdHFxCDkwNBlhTyYeGgSxxb74EPdDPWGZogrN/ZMoQ86fWo
jsvomPGvGMt6VXzO/3VqGwAeibiaB928hMcLAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU47qSs+ar8e9ZE9KEAQsIMgPbNqEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzQ3cVNzLWFyOGU5WkU5S0VB
UXNJTWdQYk5xRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wlAwDQYJKoZIhvcNAQELBQADggEBACL7/K+G/8mqOdNHhth9gJoYsCiEDTRxL3BB
Al0HuCcMI78X/w/K6xEeSvo0l7CCmMfMSvL+B3yoBrMU3lPta2+nR76egKZjvRd4
LaXvxNY83nlVvCiV0IF1gUeS4SJ8WXIZtVrTd8p35pXD5zrKR4PSWnADl88zkBFY
dQeDoyX+1Ist0FY8Qa+nNPEjgXd0G1x5u2jFzJq3T9uMHl6AI01hGp19ST8mpthO
EOR0fqqaE4AU/0hxQW95U2J/CYHznPz0jNrTzlzv4ILB01wNVltm0Sd1shQtEIOW
fi5YAt2SQMJuRuIOTY4a8xsLPfg11L5WZnG7ZDZRCq9tuxkNIck=
-----END CERTIFICATE-----
Generated at Wed Apr 23 04:53:25 2025 by rpki-client