Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8V6OM09eNiSyENkh4_pdqfqSkHY.roa
File: 8V6OM09eNiSyENkh4_pdqfqSkHY.roa (raw, json)
Hash identifier: +7+k9RMnwJ2TBQaBBggCf7aovpKCVcvtHgWiCv7Mhnc=
Subject key identifier: F1:5E:8E:33:4F:5E:36:24:B2:10:D9:21:E3:FA:5D:A9:FA:92:90:76
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3101
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8V6OM09eNiSyENkh4_pdqfqSkHY.roa
Signing time: Mon 26 Aug 2024 05:30:01 +0000
ROA not before: Mon 26 Aug 2024 05:30:01 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.195.224.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:51:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12545 (0x3101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:30:01 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F15E8E334F5E3624B210D921E3FA5DA9FA929076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b6:89:bd:e3:a0:01:ed:89:48:8b:f1:06:d7:
04:dc:7b:0b:b6:7d:52:ec:6b:87:6d:96:30:ff:6f:
ca:ed:b4:7f:75:3b:18:fc:45:7a:3d:c7:9d:01:d9:
a3:c6:d4:29:3d:99:78:6e:d0:ee:74:8d:a1:91:e9:
a0:19:8b:de:83:e4:ef:0b:18:9d:3c:4b:e1:3d:14:
bd:48:36:08:36:f5:78:4f:d4:28:4b:20:a3:88:72:
a3:1d:83:4c:7d:f6:6c:af:5f:47:2e:33:6e:c6:b7:
8c:a3:fa:dd:c7:ea:9d:b9:7a:3c:96:2d:2f:b9:2b:
6a:cf:b1:71:2f:0b:e3:6e:f4:80:e8:ab:c6:f9:b0:
22:b7:c8:08:09:bf:cf:2a:16:24:5d:68:9a:32:ae:
68:86:69:77:53:af:d9:90:05:cd:72:69:f1:56:1c:
15:2a:f4:ba:c2:82:af:2f:08:3d:9a:91:4c:7c:a6:
96:b4:1b:d5:89:f4:a3:87:9b:0c:48:63:27:0b:89:
af:b4:f3:85:84:99:10:6b:5e:df:08:66:f6:f3:91:
9d:8a:70:58:22:3e:e6:dc:48:63:fd:12:98:e0:7f:
ca:9a:19:49:5e:12:34:0c:00:35:39:d7:bd:2c:94:
e5:93:cf:cd:bd:ce:f0:f7:e9:1b:a3:8a:6e:32:57:
44:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:5E:8E:33:4F:5E:36:24:B2:10:D9:21:E3:FA:5D:A9:FA:92:90:76
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8V6OM09eNiSyENkh4_pdqfqSkHY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.224.0/22
Signature Algorithm: sha256WithRSAEncryption
85:db:13:24:a1:30:aa:19:ec:57:82:b9:54:83:d6:92:ca:96:
b8:4a:b0:87:74:1d:e2:72:11:13:d6:71:b6:19:a6:aa:93:88:
51:c5:63:d8:9a:41:fd:cd:bb:83:97:93:2a:e5:b6:22:e1:fe:
de:cd:0e:f9:a8:15:55:5b:db:40:50:10:db:2f:e7:61:76:87:
58:ac:04:3d:6d:f8:c0:1b:43:56:d3:04:07:f7:57:3f:78:6e:
62:9e:bd:05:7b:61:5d:b1:0c:eb:bc:54:42:8e:a1:d8:cb:0d:
c7:99:6e:f4:8b:7f:68:f9:76:23:9f:7e:19:fc:9c:d6:da:50:
98:f4:d3:d7:a0:db:9c:b7:f0:d2:a6:7c:85:5f:63:92:51:80:
8e:3a:73:70:07:73:5c:7e:22:ee:4d:a3:9c:86:5d:c2:ed:93:
48:53:b5:86:99:75:6b:dd:0a:ec:8c:33:49:09:f5:f1:32:70:
e1:c7:54:da:c2:c6:5a:b7:45:bf:55:83:bd:3b:56:70:b9:f2:
03:e6:9d:9f:94:9b:af:71:6a:02:b0:0f:1c:23:12:a7:44:86:
0f:58:0c:e2:38:e4:a1:da:c1:86:6a:03:21:71:a3:3d:38:0c:
3e:73:8b:2d:f4:46:7f:17:1c:9c:64:b6:9b:55:45:47:23:2b:
fb:7a:13:7f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICMQEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw
NTMwMDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEYxNUU4RTMzNEY1RTM2
MjRCMjEwRDkyMUUzRkE1REE5RkE5MjkwNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCotom946AB7YlIi/EG1wTcewu2fVLsa4dtljD/b8rttH91Oxj8
RXo9x50B2aPG1Ck9mXhu0O50jaGR6aAZi96D5O8LGJ08S+E9FL1INgg29XhP1ChL
IKOIcqMdg0x99myvX0cuM27Gt4yj+t3H6p25ejyWLS+5K2rPsXEvC+Nu9IDoq8b5
sCK3yAgJv88qFiRdaJoyrmiGaXdTr9mQBc1yafFWHBUq9LrCgq8vCD2akUx8ppa0
G9WJ9KOHmwxIYycLia+084WEmRBrXt8IZvbzkZ2KcFgiPubcSGP9Epjgf8qaGUle
EjQMADU5170slOWTz829zvD36Rujim4yV0QJAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU8V6OM09eNiSyENkh4/pdqfqSkHYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzhWNk9NMDllTmlTeUVOa2g0
X3BkcWZxU2tIWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
w+AwDQYJKoZIhvcNAQELBQADggEBAIXbEyShMKoZ7FeCuVSD1pLKlrhKsId0HeJy
ERPWcbYZpqqTiFHFY9iaQf3Nu4OXkyrltiLh/t7NDvmoFVVb20BQENsv52F2h1is
BD1t+MAbQ1bTBAf3Vz94bmKevQV7YV2xDOu8VEKOodjLDceZbvSLf2j5diOffhn8
nNbaUJj009eg25y38NKmfIVfY5JRgI46c3AHc1x+Iu5No5yGXcLtk0hTtYaZdWvd
CuyMM0kJ9fEycOHHVNrCxlq3Rb9Vg707VnC58gPmnZ+Um69xagKwDxwjEqdEhg9Y
DOI45KHawYZqAyFxoz04DD5ziy30Rn8XHJxktptVRUcjK/t6E38=
-----END CERTIFICATE-----
Generated at Wed Apr 23 04:49:58 2025 by rpki-client