Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B72wq0pHEIIlr0EF5lXVNRI8owA.roa
File: B72wq0pHEIIlr0EF5lXVNRI8owA.roa (raw, json)
Hash identifier: TpSxmJs4wjEyQ88CR2TeAW22huGGxBbPbQ33e/BTqHY=
Subject key identifier: 07:BD:B0:AB:4A:47:10:82:25:AF:41:05:E6:55:D5:35:12:3C:A3:00
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 313F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B72wq0pHEIIlr0EF5lXVNRI8owA.roa
Signing time: Mon 26 Aug 2024 05:30:16 +0000
ROA not before: Mon 26 Aug 2024 05:30:16 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.232.144.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:52:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12607 (0x313f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:30:16 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=07BDB0AB4A47108225AF4105E655D535123CA300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7a:91:12:69:f6:e2:b8:6e:c1:b1:f8:b9:fa:
9d:94:66:32:6f:40:40:60:52:39:8f:a2:a8:e0:02:
08:cf:05:7d:a2:8e:8c:8d:5c:5a:2c:6d:0f:fe:6e:
f0:d0:19:65:bb:41:71:b4:e1:02:44:db:d5:a5:3f:
8a:d3:e7:14:9b:4b:c1:51:15:ae:39:8b:38:a3:17:
8a:60:28:27:3e:a6:28:d7:b0:c7:47:33:af:d9:87:
8f:db:2d:d4:6b:1a:d2:38:66:29:d6:1f:ad:92:39:
cc:aa:a8:8b:67:77:a8:41:0f:15:e3:b0:de:54:c5:
ea:f0:19:b7:d7:72:31:6f:87:d4:b4:e3:50:97:f6:
17:56:01:20:1f:ec:b5:7a:4a:9b:b5:47:bf:2b:98:
0e:f2:a2:3d:c6:ab:fa:a4:e9:f7:7a:08:20:dc:07:
2d:02:7e:1d:f1:36:b0:01:15:b0:96:4c:42:b2:5e:
73:34:c6:15:e7:7f:16:24:9a:3a:7c:0c:09:2e:67:
8f:8e:30:ea:5a:cc:d6:48:5e:a1:62:05:95:98:6c:
58:a4:ba:b8:ee:03:d7:06:fc:f6:b5:e6:f4:aa:a6:
9a:50:78:83:ac:61:2a:31:a2:a5:ba:fb:7c:8f:9d:
fc:74:dd:0a:3e:1b:07:0f:b1:69:e9:40:82:87:21:
49:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:BD:B0:AB:4A:47:10:82:25:AF:41:05:E6:55:D5:35:12:3C:A3:00
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B72wq0pHEIIlr0EF5lXVNRI8owA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.144.0/21
Signature Algorithm: sha256WithRSAEncryption
56:b3:8f:9b:c7:11:bc:07:f4:49:3b:21:ad:e4:0d:09:4c:bd:
ca:ba:aa:25:98:3a:62:43:94:6c:fa:55:bd:00:77:e5:ed:4f:
1a:cd:a2:fd:50:a7:24:2b:d3:80:33:c9:e0:67:2c:ee:c4:57:
82:9c:c9:93:df:ba:6e:e6:84:cf:5a:2f:73:86:7c:57:ca:fd:
a2:69:2f:13:e7:ab:9f:67:8c:25:fc:c3:3b:51:9f:71:ef:57:
ae:08:1a:d3:5d:8d:7a:1e:f5:ba:e8:30:7c:10:8b:07:e7:a8:
ca:f3:50:51:6b:70:54:0b:0f:d1:dc:89:85:d2:3b:0f:b4:84:
21:fd:f0:54:ef:04:ed:01:a7:6c:25:02:e9:c9:c4:79:cd:ab:
8d:01:7a:34:2e:15:38:60:d3:15:6b:6e:95:a4:ab:78:ca:01:
f7:de:e7:87:77:cd:e1:6b:68:7b:8d:a0:c8:ad:f6:b5:33:8b:
79:26:9e:82:d9:89:7d:6e:5b:22:97:4a:a1:40:72:72:49:ea:
09:f3:cb:da:20:0b:12:6b:e2:73:3b:52:2e:c7:3b:2c:0e:10:
50:4c:81:15:aa:e4:e0:cb:e1:51:76:1d:43:39:8b:1f:ef:5d:
ae:dd:1a:2c:f9:0e:00:20:84:3b:b7:4e:8f:3a:b9:93:b4:94:
a5:49:41:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:50:57 2025 by rpki-client