Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8Pa-7CbK6xZ02WtiF4VopXd5QkU.roa
File: 8Pa-7CbK6xZ02WtiF4VopXd5QkU.roa (raw, json)
Hash identifier: curhGahBB+HcB2PCFvKv9cTL6Z/cGZ5n4RkKT1Ytk+Y=
Subject key identifier: F0:F6:BE:EC:26:CA:EB:16:74:D9:6B:62:17:85:68:A5:77:79:42:45
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 310F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8Pa-7CbK6xZ02WtiF4VopXd5QkU.roa
Signing time: Mon 26 Aug 2024 05:30:04 +0000
ROA not before: Mon 26 Aug 2024 05:30:04 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.194.32.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:51:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12559 (0x310f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:30:04 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F0F6BEEC26CAEB1674D96B62178568A577794245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a7:37:71:d3:0d:3e:d9:45:f1:73:72:2a:64:
70:4d:64:65:85:87:c7:14:c8:40:a7:a2:21:d4:d2:
5f:b6:e6:71:fd:ab:dd:35:2e:f3:6f:54:d1:3d:92:
a1:58:ad:7f:40:76:fc:b2:51:50:43:f5:70:2e:c6:
48:66:69:a7:80:25:2c:a6:57:2e:36:37:3a:90:9d:
32:87:65:d8:e4:5c:6e:3a:4e:5d:21:6e:0b:77:3f:
98:af:d3:53:49:40:89:97:f2:6e:84:c7:ec:2c:f7:
1a:39:33:96:e7:9b:fd:7a:1c:7f:e2:07:b6:99:05:
84:28:17:4b:18:4b:54:aa:50:b9:b8:3a:94:ef:61:
50:e0:99:00:2e:4f:b5:68:df:e3:34:a1:a2:09:6f:
cb:7d:14:bd:7e:8d:98:34:d6:a0:cf:89:7d:fd:bd:
09:cb:c6:61:f9:ed:a6:a5:da:ff:41:3a:04:c2:f1:
45:4c:6c:bc:10:50:2d:94:e4:cd:6b:fa:79:59:de:
b3:20:5f:57:44:b9:ae:4c:04:bf:6b:87:38:ae:df:
db:7a:28:a4:55:e0:b6:bd:40:10:64:6b:f1:d1:07:
19:7b:d8:18:19:0e:8c:dd:c7:41:57:25:16:fa:98:
6e:09:ed:32:85:0a:a3:12:40:30:41:1b:ee:32:4e:
6a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F6:BE:EC:26:CA:EB:16:74:D9:6B:62:17:85:68:A5:77:79:42:45
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8Pa-7CbK6xZ02WtiF4VopXd5QkU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.32.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:38:44:b8:75:ab:b5:75:1f:7c:e5:a4:45:4f:7f:67:33:e6:
f4:79:3f:8c:fb:56:82:de:d2:9a:50:c2:20:9d:fe:a6:2e:47:
d1:2d:8e:08:c8:8a:e5:60:e9:38:d2:b5:8f:1f:4b:4a:ee:36:
58:19:21:66:64:0d:c1:ce:ce:d8:56:39:91:30:ea:00:c3:62:
09:85:40:d0:07:75:f2:6a:09:32:c7:22:6f:e2:74:f6:94:d9:
ce:e3:46:29:75:08:be:fe:6c:f2:06:16:79:ed:30:7b:11:44:
2c:07:3d:f0:9b:b3:4f:56:e1:24:98:b1:26:f9:c6:ec:f5:64:
f8:e0:70:4b:45:74:a4:f8:92:27:41:1e:2e:2c:c9:78:77:5b:
42:6b:ac:c3:b9:e3:43:36:a8:c1:76:29:c6:07:28:1f:06:75:
13:f8:1f:23:16:6a:55:b8:8d:75:8f:c4:bf:80:76:a1:02:a3:
74:5a:8a:6f:93:07:bf:98:f4:a7:e1:17:d4:21:ce:f8:18:3b:
f1:a2:a9:c3:60:f9:3e:cc:11:a1:aa:f5:67:0a:eb:1a:b8:57:
ed:66:54:76:1c:dc:fb:44:05:b2:9f:3b:c9:d8:4d:b8:87:70:
c7:96:13:ff:cc:44:9f:85:f3:2f:f7:53:a8:92:fe:33:f6:6e:
69:b7:a2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 00:39:00 2025 by rpki-client