Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HRMuI2KgXX5CVa5jBfzSGOaJ-og.roa
File: HRMuI2KgXX5CVa5jBfzSGOaJ-og.roa (raw, json)
Hash identifier: zRuAoPIztrxCS3IBnS4ZdzBQ2e/GEl1s1hAcOAlpGGA=
Subject key identifier: 1D:13:2E:23:62:A0:5D:7E:42:55:AE:63:05:FC:D2:18:E6:89:FA:88
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 316D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HRMuI2KgXX5CVa5jBfzSGOaJ-og.roa
Signing time: Mon 26 Aug 2024 05:30:27 +0000
ROA not before: Mon 26 Aug 2024 05:30:27 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.233.144.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:52:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12653 (0x316d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:30:27 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=1D132E2362A05D7E4255AE6305FCD218E689FA88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c2:bd:59:0b:be:f7:b7:66:1e:d6:5d:6e:78:
e9:80:bc:83:99:f2:98:da:eb:26:ef:10:b4:0a:2f:
9a:7a:d4:b9:06:16:68:04:a5:7b:f7:87:3e:a0:3f:
2b:c3:fb:26:aa:92:6e:29:60:56:1a:43:fb:58:be:
34:1b:17:84:59:33:d7:17:8a:8e:fb:cc:38:51:83:
30:60:1c:bf:6c:94:d4:ed:d3:a4:8c:94:de:4d:b0:
a4:60:f6:7f:4f:77:d4:17:d2:18:92:d4:90:e9:c9:
6b:e6:33:e7:d3:47:11:55:b7:b1:8f:59:5c:8d:8a:
5a:39:0a:6a:f3:57:54:99:cc:a4:d6:fe:95:16:e5:
fc:4a:aa:37:87:8e:38:85:84:b3:cc:53:bc:30:bb:
be:c4:12:ea:9b:8d:4d:51:de:49:4f:4b:2e:53:cf:
01:65:18:e2:02:1b:9f:90:7b:45:c4:b3:8a:46:f6:
d8:3f:19:41:5b:5f:17:0c:bd:f3:d8:29:74:28:98:
3b:fd:2d:50:89:33:4f:04:cf:7c:29:a5:dc:35:38:
57:b5:65:93:f7:a3:23:8a:72:1a:61:5f:a6:a9:e1:
1e:d6:51:ae:7a:81:28:db:e9:bc:32:86:9c:e9:b5:
30:d1:fc:29:11:69:ef:c2:1f:3a:fa:a2:ab:6e:fc:
c1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:13:2E:23:62:A0:5D:7E:42:55:AE:63:05:FC:D2:18:E6:89:FA:88
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HRMuI2KgXX5CVa5jBfzSGOaJ-og.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.144.0/21
Signature Algorithm: sha256WithRSAEncryption
61:af:9f:e7:30:ec:d0:aa:55:23:61:bb:92:87:cd:e9:8a:55:
af:74:9c:71:7c:e7:64:ad:ea:7c:d4:f4:12:81:09:00:09:a4:
f0:26:0d:75:63:25:a0:be:35:2d:c6:a4:d9:d2:8d:67:bd:a3:
55:38:98:1f:e4:1b:67:fe:7b:c0:47:83:42:a2:9f:2b:e9:f7:
f0:e1:af:e1:49:d7:fa:c1:9b:2b:03:f3:51:66:1f:96:b6:b8:
b6:09:0b:0a:33:e0:e7:d2:04:b3:a5:30:ba:86:68:58:74:a7:
c7:5f:9d:8b:26:e1:a5:b3:19:18:01:e2:d2:bd:e0:87:43:ff:
6c:ff:bc:b3:53:13:3f:22:48:97:5c:7c:38:0c:aa:84:b3:3f:
65:72:44:19:fd:d9:4b:14:0e:f2:9c:95:2c:93:54:bb:57:7a:
24:f7:1e:3f:6d:be:fc:f3:80:42:6d:71:be:2e:b9:cb:16:b6:
06:b7:af:f2:9e:cc:57:cb:d3:83:74:a9:92:f2:74:2e:9d:d9:
5c:10:d5:96:2f:9c:32:80:37:2c:b0:48:a8:91:4d:d8:44:05:
4c:8b:2a:75:9f:f8:1d:8b:ab:ad:dc:5d:dc:df:02:3a:18:15:
48:00:78:5a:7c:aa:f8:4e:b7:08:1e:12:b1:a9:b1:c2:44:a3:
92:e8:b3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:59:36 2025 by rpki-client