Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7akbr1w1JOxcCqkyGksPcg1PXgk.roa
File: 7akbr1w1JOxcCqkyGksPcg1PXgk.roa (raw, json)
Hash identifier: clgYxACCMt/AUGZyxOADbcMDHsTjC0AwRkbAfRNUVU0=
Subject key identifier: ED:A9:1B:AF:5C:35:24:EC:5C:0A:A9:32:1A:4B:0F:72:0D:4F:5E:09
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 30DD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7akbr1w1JOxcCqkyGksPcg1PXgk.roa
Signing time: Mon 26 Aug 2024 05:29:54 +0000
ROA not before: Mon 26 Aug 2024 05:29:54 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 180.176.0.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:52:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12509 (0x30dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:29:54 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=EDA91BAF5C3524EC5C0AA9321A4B0F720D4F5E09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:90:6e:6c:ce:8d:96:a2:5f:8f:56:49:12:48:
86:0a:d8:55:a3:2e:36:1d:97:d5:1c:ea:ff:70:f1:
3f:f5:b2:4d:a4:c0:16:1d:bc:d8:a6:bd:5f:61:77:
ed:f9:ad:de:3a:3c:d9:13:8e:53:e9:12:e6:49:ae:
2a:fd:24:1f:d8:9c:87:41:aa:ae:14:9e:bc:32:dd:
65:e4:64:01:4e:d5:ee:27:03:82:58:88:54:fe:a2:
4f:42:49:9a:38:a9:39:5f:18:b7:fc:c9:49:fd:bb:
e2:fa:7f:84:53:df:fa:11:33:e6:14:36:40:22:50:
dd:b8:7a:5d:76:3e:9c:8d:e2:a8:1f:14:96:c1:69:
0e:ac:e8:d6:5b:a7:38:2f:20:62:51:ec:ec:d4:49:
03:83:cf:61:10:b0:5d:2c:9f:94:85:17:86:bd:df:
02:49:bb:b7:79:5e:18:1a:7f:0d:9f:fa:90:3a:94:
49:db:33:77:87:d4:05:a3:d8:97:19:c3:64:17:0e:
3e:5d:68:4c:1e:52:7a:df:12:e9:7e:01:72:45:14:
37:5a:c5:f3:14:8b:71:23:9f:5b:c3:21:1b:1e:de:
63:c0:7c:14:5c:21:cc:34:13:49:55:28:9f:3f:ec:
c1:40:eb:28:22:64:02:a3:b0:ef:d1:0d:31:fa:ff:
68:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A9:1B:AF:5C:35:24:EC:5C:0A:A9:32:1A:4B:0F:72:0D:4F:5E:09
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7akbr1w1JOxcCqkyGksPcg1PXgk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.0.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:d2:21:0c:c2:81:7d:66:75:17:b0:28:10:e8:05:ac:a9:aa:
76:89:79:52:4c:f0:c0:5a:dc:94:26:8c:67:1d:c8:ea:14:8d:
ac:61:30:54:5b:82:67:45:01:ac:5f:5d:cb:e5:d6:34:f5:6d:
bd:98:25:dd:49:7a:b3:be:fc:ae:8c:c9:b2:51:34:a3:2e:67:
e2:69:df:ee:7e:62:86:63:bf:a7:ca:26:4c:41:7a:a0:53:8f:
5d:98:bf:e5:f4:45:ef:ac:ac:5d:c3:e4:41:2d:2c:fb:1b:a6:
e5:be:a9:a6:ec:4d:51:38:05:a8:d3:dd:79:93:56:19:82:30:
85:df:f6:55:08:bb:6a:67:a4:b7:25:26:30:71:37:34:fd:da:
b8:9e:bf:c3:27:ff:a5:72:96:1f:dd:d0:cd:08:c8:1d:cb:c7:
35:bd:50:6d:a8:2f:c5:a2:ab:8e:c8:b0:e8:80:e4:53:f1:d9:
4a:b2:33:f9:ab:85:e4:05:ca:31:f5:41:a8:89:3d:5b:10:77:
db:77:6b:37:d7:10:b7:78:01:1b:fc:37:f9:35:8a:50:c1:5b:
78:68:fa:65:68:28:04:65:6a:66:67:2f:d7:7e:f9:99:9b:3e:
da:7b:a8:c1:d1:d0:d4:a0:18:7b:84:51:85:07:f9:04:0d:39:
0e:32:af:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:53:14 2025 by rpki-client