Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9lsgRPsB-dmwbl_4JqiXw7LPzjk.roa
File: 9lsgRPsB-dmwbl_4JqiXw7LPzjk.roa (raw, json)
Hash identifier: 7UBt2SJ0QyQNXTp9rUGAOegsNiNeR9tuNt8VQFvU+NI=
Subject key identifier: F6:5B:20:44:FB:01:F9:D9:B0:6E:5F:F8:26:A8:97:C3:B2:CF:CE:39
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2FEE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9lsgRPsB-dmwbl_4JqiXw7LPzjk.roa
Signing time: Mon 26 Aug 2024 05:28:59 +0000
ROA not before: Mon 26 Aug 2024 05:28:59 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.193.223.64/26 maxlen: 26
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:53:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12270 (0x2fee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:28:59 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F65B2044FB01F9D9B06E5FF826A897C3B2CFCE39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:49:8e:2f:ff:be:34:b6:cb:d2:23:43:ef:24:
f7:1a:9c:95:2b:0b:c0:25:ed:b5:11:d4:9e:41:6f:
4c:12:61:a5:f9:a6:b0:77:88:17:73:45:e9:45:17:
82:aa:6a:a8:ca:43:1c:47:eb:59:21:18:3e:07:a8:
e6:bc:b9:1a:40:4e:23:0e:9d:fa:10:77:72:2e:eb:
4b:c3:d6:4e:9d:ac:c8:9f:92:42:aa:e4:dd:f2:d6:
b4:2a:a1:d4:3f:bc:06:1f:83:3b:42:16:d7:9b:33:
9f:04:5f:db:00:ff:6b:eb:e6:45:3a:ac:30:12:76:
11:e6:ca:b5:9d:55:87:31:07:53:53:63:01:fb:0f:
79:08:1b:31:ac:8a:0d:f1:85:0b:0d:9a:a8:ee:73:
d5:11:1c:a8:62:a5:9e:a8:13:54:71:09:53:a6:c8:
8f:a4:41:c4:86:4f:b5:fc:54:6d:e5:6a:52:8c:4d:
89:69:1d:29:d9:f0:e0:5a:5f:46:00:39:da:c2:2c:
d4:5a:fc:15:4a:b8:a8:7e:e7:ed:ab:e8:f7:77:78:
3b:f3:15:a3:8c:99:a6:54:a9:01:7f:12:14:97:d4:
02:e2:2b:54:a0:ef:ac:97:f8:b1:30:4b:06:ed:36:
3e:ea:20:d9:69:74:47:38:a2:31:95:e3:e7:55:d5:
26:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5B:20:44:FB:01:F9:D9:B0:6E:5F:F8:26:A8:97:C3:B2:CF:CE:39
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9lsgRPsB-dmwbl_4JqiXw7LPzjk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.223.64/26
Signature Algorithm: sha256WithRSAEncryption
8a:d9:6d:05:24:e3:06:ce:ff:88:6d:64:ae:d3:46:9d:3b:b9:
8e:b4:e3:b2:a0:2e:a0:c7:e2:aa:73:ca:b4:10:b6:34:d8:70:
9c:17:0d:dc:fb:aa:84:ae:66:bc:d3:38:47:27:21:1f:e8:8d:
da:53:0e:06:1c:8d:69:14:99:0e:86:7e:0d:dc:a7:26:44:a7:
9c:cf:89:c9:f2:1a:da:df:cd:cf:ff:a5:f7:14:61:f8:18:ff:
c3:d6:80:00:0c:e7:97:1f:06:7e:cb:94:6a:4c:5e:ce:d7:a3:
f5:b9:3e:68:a3:32:12:0e:a3:ec:04:aa:ab:aa:da:3e:6b:6c:
e2:f4:5a:d1:c0:4e:05:33:09:b5:07:b3:23:07:7c:7b:8b:d1:
76:f3:e3:ed:ad:31:2b:3a:79:89:3a:f1:8c:27:b0:43:0f:d2:
d9:5f:95:ea:be:3f:c4:ea:71:09:ea:6c:0d:b1:31:cf:0e:7e:
c0:58:2a:1f:80:09:5c:46:4b:2b:68:47:b3:d5:b9:33:59:32:
ef:32:1f:49:60:03:3d:9c:24:54:25:f9:0f:75:46:99:a9:36:
71:b8:c3:b3:12:de:0f:27:d9:91:e0:14:76:55:45:9f:14:45:
3b:c6:7a:39:da:16:69:33:f2:c9:89:b4:17:22:89:b9:77:46:
d6:50:09:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:39:06 2025 by rpki-client