Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FG9D06CbXgRyfFzIfLZOGmuDdlQ.roa
File: FG9D06CbXgRyfFzIfLZOGmuDdlQ.roa (raw, json)
Hash identifier: mNw9YntkTtmSLOplP1nBkxXweiOfY9YW3oYwMpw+Zzc=
Subject key identifier: 14:6F:43:D3:A0:9B:5E:04:72:7C:5C:C8:7C:B6:4E:1A:6B:83:76:54
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3263
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FG9D06CbXgRyfFzIfLZOGmuDdlQ.roa
Signing time: Mon 26 Aug 2024 05:31:37 +0000
ROA not before: Mon 26 Aug 2024 05:31:37 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:54:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12899 (0x3263)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:31:37 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=146F43D3A09B5E04727C5CC87CB64E1A6B837654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d9:64:cc:db:b7:ff:7f:99:77:77:b5:d0:55:
ba:89:22:9b:f7:98:76:11:85:b9:3c:74:ab:5e:25:
56:19:a2:88:b6:52:b9:6e:31:52:51:0a:f3:20:28:
39:cb:33:ae:e6:27:15:3e:e9:a7:20:4d:74:05:92:
28:9a:c5:e4:14:c2:9e:02:df:3c:5d:6d:d7:57:53:
09:ad:4d:eb:3f:15:f0:76:d6:41:67:12:23:c0:93:
4d:7b:71:c4:9e:18:14:55:69:c6:2c:b7:25:5e:68:
28:80:95:58:f0:e7:d1:77:eb:02:49:77:7a:db:83:
3d:3d:eb:5e:6c:5a:88:8c:6f:6e:af:5f:06:3b:08:
7d:8d:bb:67:dc:8c:5f:e1:e4:88:91:d9:c9:14:fd:
51:5d:d0:cd:83:37:34:ce:66:03:6f:8e:1e:65:ac:
eb:e8:ce:80:73:0d:84:7e:84:de:2c:d2:de:b1:9f:
34:a5:19:18:96:8e:a7:ab:0c:14:69:20:82:53:7c:
42:5b:8c:1a:ae:e3:cc:9a:41:ae:ce:70:03:57:df:
6d:79:8d:13:d2:7b:9d:8f:cf:dd:a5:96:36:c6:1f:
6d:b0:f4:b2:ee:80:84:74:9f:3b:12:de:01:5e:29:
82:47:07:b5:03:a1:7f:9d:5e:bc:02:00:8d:48:b4:
04:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6F:43:D3:A0:9B:5E:04:72:7C:5C:C8:7C:B6:4E:1A:6B:83:76:54
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FG9D06CbXgRyfFzIfLZOGmuDdlQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.214.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:39:a5:31:a9:90:16:3f:ac:4e:12:93:5c:67:2c:fc:8d:23:
1c:7f:8a:a9:f3:95:73:28:21:63:b5:c5:3b:f4:44:f0:58:ff:
e0:e4:7f:aa:58:b3:00:37:03:fc:85:8c:74:41:40:d7:0e:fd:
6a:47:43:72:dc:f1:76:3c:fa:ae:d6:8f:c9:ad:23:a4:bb:2b:
0b:0c:b3:92:18:1a:7e:4b:69:8b:66:9d:39:51:8d:52:6f:9c:
a5:20:54:fc:78:3e:18:51:e9:68:f5:68:ec:a2:73:8e:d1:2d:
87:91:77:02:69:11:1c:4e:f1:c8:60:92:6e:c9:fd:32:15:8f:
f0:91:da:05:09:4c:01:2a:29:25:cb:aa:fa:ae:05:41:96:8f:
7a:10:c8:af:4b:e9:15:9b:2d:f9:27:01:36:95:d8:c4:01:fe:
ac:5a:b0:ec:d6:93:1d:39:36:cf:90:e2:87:6e:b0:8e:d4:d1:
b9:8c:59:9c:eb:cf:c1:ce:9c:93:1d:c9:38:4d:d8:16:18:6f:
6e:52:93:e8:7d:83:ab:35:f7:d1:35:c5:f8:00:24:28:b1:4e:
6d:dc:d0:fc:e5:d8:51:ca:47:bc:38:39:0f:80:2f:f9:b6:a5:
c1:07:c7:cd:7a:12:bd:75:f1:f8:e0:35:1a:12:10:16:70:e1:
dd:55:f7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:13:30 2025 by rpki-client