Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/85WPk-0n7xn-YPBEws3ysqSznqE.roa
File: 85WPk-0n7xn-YPBEws3ysqSznqE.roa (raw, json)
Hash identifier: 9laV51ExXe4D34FHgTw5ypWxJNAl0VVIaze5D+tqZMY=
Subject key identifier: F3:95:8F:93:ED:27:EF:19:FE:60:F0:44:C2:CD:F2:B2:A4:B3:9E:A1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 304A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/85WPk-0n7xn-YPBEws3ysqSznqE.roa
Signing time: Mon 26 Aug 2024 05:29:19 +0000
ROA not before: Mon 26 Aug 2024 05:29:19 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.193.176.0/20 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:51:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12362 (0x304a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:29:19 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F3958F93ED27EF19FE60F044C2CDF2B2A4B39EA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:27:92:b4:60:34:4a:19:88:bb:40:ed:71:60:
29:21:1f:29:61:4f:65:81:97:bb:79:cc:ed:6b:a3:
77:aa:b7:e4:8e:79:64:0b:5e:2b:59:b2:33:e7:00:
48:9f:df:7b:94:51:ed:0a:d9:38:06:d9:f5:04:2e:
76:74:4c:49:56:c2:1f:46:96:88:e9:6c:2f:3c:8b:
a4:73:f4:ea:ee:63:82:10:1e:c9:d8:f9:32:62:df:
27:9c:27:bd:9c:26:1b:e0:1e:29:9c:bc:a4:23:c8:
6b:3e:1a:1a:5a:b9:68:a5:68:20:a1:f5:66:89:cb:
70:63:96:c6:67:ae:95:9f:60:4c:3f:35:fc:34:7c:
95:5c:9d:63:a4:4f:a3:1e:30:ae:da:22:6c:71:ae:
8f:59:1d:2e:b7:3c:1b:a1:bc:a7:da:7a:62:61:30:
48:af:89:f2:be:c3:5f:32:fd:2b:cb:e8:45:f6:32:
1a:ce:8c:f2:fc:a3:4d:83:4b:ad:a0:eb:7d:b8:58:
e4:02:cc:b1:90:45:9b:66:33:04:5f:e8:9c:44:44:
84:ab:84:3e:8e:99:ff:de:79:46:af:a5:ec:56:81:
af:d9:35:af:ec:64:f5:98:4a:33:06:a6:ce:2d:92:
9b:35:ad:e5:53:a3:ce:cd:fc:01:6f:9f:de:06:62:
2a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:95:8F:93:ED:27:EF:19:FE:60:F0:44:C2:CD:F2:B2:A4:B3:9E:A1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/85WPk-0n7xn-YPBEws3ysqSznqE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.176.0/20
Signature Algorithm: sha256WithRSAEncryption
06:0d:f8:51:26:98:65:8d:ed:96:dd:e9:2e:3e:6d:60:62:de:
cc:e4:6b:35:5d:b4:2c:43:f6:c7:84:63:22:fa:62:fa:39:2c:
a0:40:d8:a9:22:12:9f:a9:b0:6c:13:98:4d:5f:b1:23:47:7c:
68:3b:3f:de:cb:22:84:fd:3a:03:33:01:91:4a:5a:3d:e8:be:
e7:5d:56:e0:0d:2f:40:20:b2:50:8c:2f:6e:1b:6b:e8:6f:e3:
a0:8a:82:4e:78:1c:64:52:3c:f5:cb:e5:83:84:1d:9e:df:51:
4a:0f:6f:52:66:b1:83:e6:23:a6:36:ef:26:bb:5f:0d:ff:4f:
fc:2d:30:16:0c:3b:97:ae:d8:98:a9:ee:14:99:55:d8:65:ab:
ae:11:b4:29:12:8a:bd:ef:6c:05:05:73:df:60:e5:a5:0a:0f:
b8:0c:e8:85:f1:2b:95:28:b5:e4:f7:28:82:8d:42:67:eb:ce:
24:70:eb:c2:e8:90:17:88:51:01:72:b7:04:c0:26:e5:7b:d2:
74:b3:a3:68:e6:9b:2e:df:e6:45:77:92:ac:b4:86:66:7a:31:
56:e5:2a:2e:0b:21:b9:1c:b2:64:03:a2:6d:d1:2e:ed:a9:b4:
ec:ce:81:4e:fc:30:4d:72:6c:7c:87:4f:cc:b3:8a:4e:b6:16:
f1:10:f0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 00:22:27 2025 by rpki-client