Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9nIVVVtrPVxUkG-NTs1mO-keiso.roa
File: 9nIVVVtrPVxUkG-NTs1mO-keiso.roa (raw, json)
Hash identifier: JwdCW/XufbCOieMQT53MMIRaL/Lu6vdXsPxwYCT98xs=
Subject key identifier: F6:72:15:55:5B:6B:3D:5C:54:90:6F:8D:4E:CD:66:3B:E9:1E:8A:CA
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 310C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9nIVVVtrPVxUkG-NTs1mO-keiso.roa
Signing time: Mon 26 Aug 2024 05:30:03 +0000
ROA not before: Mon 26 Aug 2024 05:30:03 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:51:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12556 (0x310c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:30:03 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F67215555B6B3D5C54906F8D4ECD663BE91E8ACA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:de:ce:77:22:59:65:72:c8:f2:aa:fd:df:e0:
34:28:3b:c7:bd:ed:79:de:e8:74:fe:29:89:b5:34:
32:2f:d5:71:03:87:d2:97:af:09:af:fc:12:70:dc:
72:49:12:6d:86:47:46:04:84:c9:c3:3b:cf:e3:f4:
8b:75:90:84:7c:63:bf:1c:59:ce:49:d6:f3:3e:bf:
82:09:19:bd:7c:d6:ce:da:e1:70:60:12:72:ae:86:
8c:19:b7:74:32:4a:b9:06:f0:5e:57:dd:76:d6:72:
a7:b7:b7:5f:60:4e:f7:5f:d4:f4:b1:be:d1:5b:63:
88:18:7e:29:5d:9c:e6:b6:da:e4:57:a1:62:55:94:
e0:0e:7e:8e:2e:80:04:38:8f:04:9e:ea:9f:2a:ce:
52:74:29:10:32:b1:94:12:5a:db:d5:cb:be:1d:a7:
6f:e6:82:19:55:fe:f6:98:8b:e1:b2:eb:4d:71:94:
ac:fb:bf:58:dd:bd:61:0a:be:33:b5:85:c6:25:60:
aa:99:d9:c5:ed:ec:f6:dd:7f:86:5a:30:a9:ef:62:
47:b7:a9:3e:e9:d2:a1:b4:b7:1a:7e:dc:44:31:c2:
76:1f:f5:a1:f1:b5:56:dd:8a:26:e0:1d:8a:d1:4d:
de:88:8a:23:bd:59:9d:25:d7:3a:72:95:03:38:b0:
21:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:72:15:55:5B:6B:3D:5C:54:90:6F:8D:4E:CD:66:3B:E9:1E:8A:CA
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9nIVVVtrPVxUkG-NTs1mO-keiso.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.220.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:95:b6:3f:8c:4e:aa:97:63:8f:7e:76:f7:dc:9a:6b:d8:09:
7f:ff:5c:ab:c1:98:7d:38:2d:ad:61:69:f1:8b:21:09:bb:f0:
a0:c3:93:9c:f1:22:3c:9d:48:bd:03:67:78:18:c7:61:82:e6:
ff:6b:10:71:d5:85:97:e8:22:3e:2b:27:80:c1:52:c4:46:46:
5a:52:ed:c2:72:4d:96:66:9e:36:5f:91:d1:b4:13:d1:ba:95:
8f:46:a4:48:ff:09:9a:c7:6b:d4:df:70:68:45:95:64:50:ca:
87:0a:06:a6:40:4f:c1:43:3c:16:59:65:29:cc:b9:12:03:78:
0d:d6:f6:f6:98:26:19:93:d2:c2:84:7e:6d:b5:e0:4c:03:8f:
a0:34:29:83:44:e0:be:44:8f:fa:28:7a:9b:be:46:d4:01:0b:
0d:00:d1:3e:ce:54:15:98:f5:8b:de:ef:65:be:88:58:0b:2e:
35:65:f2:84:63:72:81:d1:cd:eb:b1:0a:21:35:b4:6c:33:13:
28:fd:93:21:06:a1:03:b9:2a:93:50:15:31:ad:20:0c:b1:55:
76:cd:08:67:ed:ad:78:6d:b6:31:9a:55:32:b2:93:c6:6e:5d:
6a:08:35:40:d5:04:af:ec:57:c6:b6:bf:d8:ba:08:d8:62:a8:
50:3c:9a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:06:38 2025 by rpki-client