Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6M-nFo1jynTsJhXq_-IvxykHz7U.roa
File: 6M-nFo1jynTsJhXq_-IvxykHz7U.roa (raw, json)
Hash identifier: uuJY+No1lrAz4DpfD246jxjHF1G1IvXu+SHOZf/4U0M=
Subject key identifier: E8:CF:A7:16:8D:63:CA:74:EC:26:15:EA:FF:E2:2F:C7:29:07:CF:B5
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 30BE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6M-nFo1jynTsJhXq_-IvxykHz7U.roa
Signing time: Mon 26 Aug 2024 05:29:47 +0000
ROA not before: Mon 26 Aug 2024 05:29:47 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.194.200.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:51:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12478 (0x30be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:29:47 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E8CFA7168D63CA74EC2615EAFFE22FC72907CFB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:15:43:d7:89:98:a7:af:3e:7b:9c:24:52:c7:
94:7f:8c:94:30:41:5a:59:8d:53:92:6d:53:1c:92:
d3:5b:37:ef:b0:e2:d3:35:b5:15:7a:84:3d:b3:1b:
8d:f5:34:bc:58:92:89:89:63:d9:53:3c:45:9f:cc:
50:ce:fd:12:78:02:10:a3:28:e7:0f:c9:bc:ba:f6:
17:68:a6:22:ed:1b:35:94:51:cb:68:01:0b:f9:ec:
81:b6:6a:38:51:be:10:0b:75:6d:1c:4f:ba:31:43:
f3:05:76:04:b0:9a:c5:68:56:11:f0:85:0c:1c:e6:
7d:27:34:ff:27:46:cb:55:9f:c7:75:84:6d:b6:e4:
c8:13:7a:21:ab:c4:35:d2:35:3d:c8:83:88:e0:f0:
1e:29:45:d8:ce:b9:5d:74:6e:72:d2:53:4e:85:ea:
5b:1b:5d:0f:2a:93:ac:01:e9:c5:82:f3:81:00:22:
e1:53:f4:5e:a5:80:c8:8d:eb:06:9d:72:b6:61:f2:
d7:b7:3c:4b:ca:14:b0:30:b0:90:84:fe:66:a8:34:
87:00:4e:18:b7:7e:cc:55:5d:21:06:45:57:64:23:
24:21:ca:cb:62:d7:3a:49:3f:74:81:29:5d:d0:f6:
c8:83:27:57:8d:cc:1d:4a:32:46:46:70:e3:f9:ab:
7a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CF:A7:16:8D:63:CA:74:EC:26:15:EA:FF:E2:2F:C7:29:07:CF:B5
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6M-nFo1jynTsJhXq_-IvxykHz7U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.200.0/21
Signature Algorithm: sha256WithRSAEncryption
1a:07:a8:b8:74:6b:c2:e1:c3:a0:97:57:68:4f:5a:74:38:5d:
f1:a7:d2:f8:eb:2b:2c:68:f3:41:71:7f:30:55:0e:61:a0:d4:
e2:8e:1f:71:d0:c0:fb:2d:7a:60:8a:12:b3:82:38:2f:82:08:
32:df:67:87:3e:f7:16:ed:08:ff:2a:f8:1d:4a:ce:8a:39:11:
9c:4a:ee:89:59:ab:2c:15:f9:6a:ce:0b:34:f5:d8:d1:94:30:
86:f4:b4:07:ae:85:55:86:7f:fe:97:c9:04:a6:b5:73:f8:ca:
2d:a7:69:cb:1c:18:ef:88:74:0e:c4:d4:94:b6:63:ba:ff:a3:
5f:d1:29:42:75:34:d8:06:17:c6:6d:14:b8:3c:80:a3:76:5e:
e2:0a:b8:d0:af:a7:21:dd:e6:c7:37:4b:5c:f4:09:15:68:65:
83:ce:7c:7c:c1:98:49:e8:78:14:45:ce:30:92:d5:b6:66:88:
73:57:c1:8a:91:a5:88:99:77:1c:82:55:16:9c:0d:36:3e:b0:
41:51:5f:5d:13:25:ed:9e:b3:92:89:90:81:96:61:c7:78:5a:
a4:73:19:3f:16:4b:86:a4:a1:28:d0:8e:d7:4f:ce:78:1f:f4:
a1:03:14:9b:91:f2:cf:94:52:c7:2a:3e:0b:58:f1:06:b1:25:
e9:67:d5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:30:00 2025 by rpki-client