Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EMmBL34gu6Sgdwi725M0f15aawo.roa
File: EMmBL34gu6Sgdwi725M0f15aawo.roa (raw, json)
Hash identifier: g90zfWk298VjDijDP4bkUM5CtSKfy2gNMQYw6K7ej/U=
Subject key identifier: 10:C9:81:2F:7E:20:BB:A4:A0:77:08:BB:DB:93:34:7F:5E:5A:6B:0A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3007
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EMmBL34gu6Sgdwi725M0f15aawo.roa
Signing time: Mon 26 Aug 2024 05:29:04 +0000
ROA not before: Mon 26 Aug 2024 05:29:04 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 123.195.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:53:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12295 (0x3007)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:29:04 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=10C9812F7E20BBA4A07708BBDB93347F5E5A6B0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9d:80:7a:7f:2b:9b:04:c4:de:46:4d:19:39:
2c:db:f9:e9:fc:f1:eb:e7:79:d6:21:01:32:f5:4c:
1a:73:0d:eb:dc:a1:90:2d:b2:17:38:b8:0f:9a:f0:
6f:30:e5:8a:85:4b:64:66:e0:75:45:f4:f2:e7:bf:
2d:b1:cd:b8:a4:0e:bc:80:88:ab:36:b5:91:a6:f4:
81:5a:8a:27:dc:16:8d:87:6d:0b:b0:76:e0:53:79:
52:e7:82:2a:77:88:8c:8b:b9:99:2d:62:a4:6b:40:
77:77:ce:29:76:c4:25:8e:dd:a6:d4:73:f6:29:44:
11:b6:93:e4:49:50:b9:75:f1:43:5b:7f:9e:81:9d:
62:dc:81:dd:22:2a:16:31:bf:c0:74:e4:61:6e:f9:
54:c5:58:38:c7:f8:b8:9d:ec:e9:7f:1b:b0:6e:df:
85:74:f4:33:98:14:3d:e2:fa:5e:1f:ea:f8:45:2c:
b0:9d:b7:7c:b5:8a:96:8e:10:b3:d1:d8:94:ed:98:
cb:c6:9f:14:e5:10:70:e8:7f:04:57:ff:49:29:d8:
be:ae:68:8c:c9:a3:73:c8:17:5c:78:b5:a9:b8:75:
60:c4:7f:9b:10:f2:97:0c:48:03:00:18:6f:a3:6c:
76:ce:35:70:00:69:3d:7d:56:aa:82:fa:06:0f:42:
19:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C9:81:2F:7E:20:BB:A4:A0:77:08:BB:DB:93:34:7F:5E:5A:6B:0A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EMmBL34gu6Sgdwi725M0f15aawo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.238.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:97:93:af:f8:11:73:0b:63:a9:ae:02:98:d5:ec:d5:56:41:
90:24:5b:e1:1f:41:f1:21:19:eb:87:5b:c4:6d:c7:33:bf:ef:
a6:43:a8:a8:85:bd:93:6c:85:2b:76:f9:3a:35:31:b0:d5:8d:
93:da:a8:57:68:c1:cf:fd:8b:64:d0:c9:d4:2a:31:2d:04:d9:
28:4c:fd:58:84:53:e5:0a:bf:5f:cb:ff:2e:27:99:c7:e7:22:
01:e1:79:25:47:e2:e7:d1:6c:71:aa:6c:97:a4:a9:1f:3a:6d:
5a:89:19:4f:df:b5:23:33:b1:db:f1:f5:f2:b0:b7:6e:0c:a3:
e6:ed:7f:76:69:59:6a:49:57:3a:c9:ab:5f:3e:df:c3:bf:77:
46:c6:51:a0:d1:bf:80:ae:39:73:a0:f2:3a:e6:33:32:1a:52:
c9:94:2f:63:0f:b2:73:92:9c:59:91:0e:e6:de:15:29:a5:5f:
f5:ee:78:61:c6:1f:11:77:6a:40:cd:69:8e:b3:b0:aa:c7:57:
6a:0b:91:dc:e5:c7:80:7a:92:01:e2:8d:b4:8a:d9:9f:d4:8c:
82:2c:d3:8b:73:f8:d0:f4:2a:3d:db:5d:4b:ab:ea:24:12:4d:
0b:65:08:bd:fd:ee:91:28:bf:6c:8f:d1:22:2c:bb:db:c5:9c:
7e:e8:06:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:59:57 2025 by rpki-client