Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/A3hxBCzl9p4y7nznJG0KIHnJuCE.roa
File: A3hxBCzl9p4y7nznJG0KIHnJuCE.roa (raw, json)
Hash identifier: 8Xbkcv7TUfm11luVUMWmVQ3z3gVvpHNe/05G159K2fU=
Subject key identifier: 03:78:71:04:2C:E5:F6:9E:32:EE:7C:E7:24:6D:0A:20:79:C9:B8:21
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 32E6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/A3hxBCzl9p4y7nznJG0KIHnJuCE.roa
Signing time: Mon 26 Aug 2024 05:32:07 +0000
ROA not before: Mon 26 Aug 2024 05:32:07 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.194.16.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13030 (0x32e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:32:07 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=037871042CE5F69E32EE7CE7246D0A2079C9B821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b8:bd:9f:39:92:64:ec:32:65:4a:f6:55:4d:
0d:58:29:c3:ad:ba:c8:ec:69:7f:97:4e:a9:86:b1:
29:aa:f6:d3:a6:99:57:1e:5b:35:46:ac:df:f8:f3:
11:de:05:4f:fc:a8:fe:89:21:f3:c5:da:56:70:f8:
5e:61:b7:b7:7b:ce:39:3d:ea:f5:d8:66:80:75:42:
f0:d1:60:b7:31:ab:f8:e4:cf:4c:6c:82:ea:e1:ac:
d5:fe:c4:03:56:f0:a3:11:32:7f:58:31:2a:87:ed:
50:3c:77:35:3a:16:91:37:f0:89:59:30:0b:a8:76:
35:8b:60:dc:95:63:5f:1b:f0:e5:64:11:7f:4f:17:
45:35:4f:18:76:a7:f5:96:4c:94:71:d9:de:79:e7:
4d:05:2d:54:bf:5e:87:c2:51:ed:7e:b8:f2:20:1c:
6e:89:fa:97:1d:87:0e:34:fb:bd:8f:1f:07:ee:63:
35:77:f4:24:0a:f7:48:fc:ef:7c:40:65:7d:62:9d:
e7:84:0a:d9:d8:92:ec:69:05:2d:6d:22:15:20:f2:
da:b1:a1:b1:65:23:24:c2:0b:6f:6e:4f:4e:be:78:
25:f3:da:fe:58:f0:80:72:e4:c2:08:63:4d:8a:65:
ea:87:4d:f5:9b:e0:dc:2e:37:48:58:32:f3:6d:3e:
7e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:78:71:04:2C:E5:F6:9E:32:EE:7C:E7:24:6D:0A:20:79:C9:B8:21
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/A3hxBCzl9p4y7nznJG0KIHnJuCE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.16.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:75:f0:f8:9c:83:7b:8b:a0:3d:5c:f0:a4:66:75:a0:09:77:
7a:9e:31:64:c1:1d:2e:87:6d:16:b0:58:79:2b:00:52:b6:e4:
7a:6c:cb:4c:09:ef:a7:94:3d:18:ea:9f:10:05:1c:89:2b:27:
ba:09:54:dd:18:3a:8b:85:cd:1f:4b:17:63:19:2e:97:9b:00:
25:ab:30:c4:2e:32:01:ff:40:2d:06:f0:c4:2c:b3:11:ef:bf:
67:29:17:06:06:10:bb:b9:84:a1:10:7a:43:97:0c:51:d5:f4:
57:66:83:7d:61:95:2f:42:f7:08:2d:96:e2:c7:fc:e9:b1:94:
1e:fd:d3:fc:b8:7d:ce:02:d7:b1:58:7e:1e:c2:5a:0b:87:36:
44:e1:91:5e:27:ca:e4:a6:ae:6a:04:5e:29:11:18:d6:f9:e3:
d6:8f:da:f0:b1:cf:2d:f0:64:26:7c:e3:87:4a:b0:57:0a:e2:
71:10:ff:95:33:04:86:c3:5b:54:87:61:9c:af:f9:e3:b2:fc:
f0:af:1b:37:03:21:02:f5:f8:f4:2f:7a:a9:6c:bc:04:a5:32:
e3:90:69:95:15:dd:74:95:31:fc:3b:e6:46:68:b0:48:41:80:
aa:3c:f1:5c:0e:d6:37:f9:ca:d5:55:64:86:e3:09:93:45:e3:
74:f3:5b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 00:39:40 2025 by rpki-client