Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Cid9NoY3G1YHgN66cYkmNy9q_oE.roa
File: Cid9NoY3G1YHgN66cYkmNy9q_oE.roa (raw, json)
Hash identifier: MNCYZWtZPFXI0VgeiJvoRoAMbIx2AeNjEJS6FsinR1E=
Subject key identifier: 0A:27:7D:36:86:37:1B:56:07:80:DE:BA:71:89:26:37:2F:6A:FE:81
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 31F7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Cid9NoY3G1YHgN66cYkmNy9q_oE.roa
Signing time: Mon 26 Aug 2024 05:31:07 +0000
ROA not before: Mon 26 Aug 2024 05:31:07 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.233.240.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:53:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12791 (0x31f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:31:07 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=0A277D3686371B560780DEBA718926372F6AFE81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d2:71:8e:76:05:23:18:36:b7:bb:f3:a7:4f:
c5:59:94:c9:ee:a4:80:30:3f:53:02:ee:7c:ce:3e:
2c:a5:17:b9:8b:14:e7:9c:e3:22:fd:d7:35:81:89:
c0:d8:28:ed:49:4f:18:3c:ae:da:52:8f:cb:38:12:
b8:de:fa:80:9e:b2:55:b5:d9:08:97:7a:cc:7b:52:
df:02:62:7e:b4:fb:e5:f7:f5:76:ca:ea:f2:18:f1:
2e:8a:19:c7:52:0f:97:45:34:07:c5:17:ec:f7:53:
8c:56:82:3d:1f:8c:2a:cc:22:f2:6e:51:03:0b:74:
9e:8f:b7:19:2d:23:33:0e:27:40:fe:1f:8b:e2:f9:
62:4b:e8:82:c7:5e:c7:cc:c7:a6:ad:ec:77:3b:3e:
a7:61:19:b1:28:eb:88:1c:5a:dc:7e:62:eb:85:8f:
a1:0f:3d:39:99:28:ad:9e:90:1b:05:40:98:8d:bb:
65:b4:a7:e2:f1:08:8e:2a:f3:22:f6:e6:a7:ac:d0:
dc:f5:cb:aa:c9:03:c7:9d:a7:eb:6f:b4:e2:6b:f9:
d9:b9:7e:18:35:e9:98:bd:64:eb:5b:4f:47:f1:d9:
82:06:1a:2f:59:7b:db:6b:55:63:46:da:62:1a:a6:
38:19:0b:57:2c:92:fd:72:64:5b:b6:c0:9b:c0:fd:
48:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:27:7D:36:86:37:1B:56:07:80:DE:BA:71:89:26:37:2F:6A:FE:81
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Cid9NoY3G1YHgN66cYkmNy9q_oE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.240.0/23
Signature Algorithm: sha256WithRSAEncryption
82:94:c6:e5:fe:69:4e:e4:e2:b3:e9:30:a9:42:5f:c2:ba:2a:
a9:77:0b:13:00:e8:9a:07:45:cc:1a:e0:be:9f:da:73:6c:12:
d4:c8:0c:c6:14:cd:c7:c5:f6:ad:dd:d1:88:c5:6d:fa:85:57:
7d:1f:92:03:62:c8:39:d4:2e:c0:a1:18:8f:d7:57:fd:55:bd:
ba:68:39:13:ed:ee:75:46:ea:b1:d1:7c:e0:cb:48:f4:3e:c1:
35:d0:e5:94:5a:80:2c:cd:42:c0:ae:9a:3e:23:9a:3e:99:45:
30:b4:88:0a:40:cc:24:92:99:29:78:61:c9:8b:7d:a6:73:38:
7c:1c:8e:a0:38:7b:9e:8e:56:16:41:a9:40:b0:47:8b:f0:d5:
49:f0:3f:a5:03:9b:90:4e:48:e0:dc:c7:f0:7d:63:6e:ba:ae:
25:b2:3a:64:fb:48:34:6e:68:99:29:15:93:f0:3e:93:a7:a7:
61:ea:22:99:57:05:46:1a:fd:ac:c6:82:57:ee:80:84:bd:fe:
9f:09:2d:63:5d:46:32:ce:a6:25:f0:55:b8:c5:b4:9b:4d:9d:
f4:8f:df:b8:a4:f3:3e:3a:0e:ee:d0:3e:20:f7:9c:97:ca:c2:
7e:d0:c4:16:ef:9f:c4:fc:e2:c1:c3:99:68:07:cd:5c:e0:76:
e2:da:d6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:39:20 2025 by rpki-client