Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KsRj58PY6ifshx34t1pQgffvSHU.roa
File: KsRj58PY6ifshx34t1pQgffvSHU.roa (raw, json)
Hash identifier: o7SfrtBaJmU5rKrx1jTt389x8pfx8NE7Geqh/2ufiv8=
Subject key identifier: 2A:C4:63:E7:C3:D8:EA:27:EC:87:1D:F8:B7:5A:50:81:F7:EF:48:75
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3193
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KsRj58PY6ifshx34t1pQgffvSHU.roa
Signing time: Mon 26 Aug 2024 05:30:35 +0000
ROA not before: Mon 26 Aug 2024 05:30:35 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 180.176.32.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:52:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12691 (0x3193)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:30:35 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=2AC463E7C3D8EA27EC871DF8B75A5081F7EF4875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:26:36:59:ba:8c:72:db:c4:f2:04:aa:b6:f7:
4f:f9:1e:16:6c:48:a4:34:bb:6e:21:0f:e3:93:5b:
6b:a3:c8:8a:71:ca:27:b3:52:0f:7c:2a:f8:ea:8e:
28:bb:50:fa:0e:2e:20:8c:af:30:83:a9:36:66:cd:
84:4f:92:b2:22:56:21:e4:32:af:fe:cb:31:05:1d:
63:db:51:a0:8a:a9:82:58:26:6b:8a:9d:21:80:8e:
1a:39:55:83:29:8e:5f:86:5c:6a:8b:b9:7f:50:95:
43:39:f8:b7:67:4d:4a:90:60:07:cc:0b:83:8a:7b:
b8:04:60:da:98:e9:bd:bf:73:aa:4a:73:30:15:75:
ee:0e:11:dc:16:d1:c8:f9:01:9c:6d:5a:49:46:e4:
6a:3f:59:5d:72:ad:58:d3:fa:bb:9d:d6:0e:b2:a9:
60:40:ec:18:9f:74:e8:8f:ae:a0:35:c6:4d:cf:bc:
ce:6a:ae:0a:3d:92:3d:8c:10:5d:88:7f:82:9b:b3:
6a:9c:a3:0b:99:b5:0b:50:1f:a4:a9:fb:0a:03:50:
f6:05:91:a3:87:7c:b7:13:91:78:e9:03:3c:a0:76:
e6:d5:0d:c7:43:9c:91:1d:d5:73:34:37:82:f4:71:
7a:5f:1d:e0:5d:51:73:c9:c8:d8:2e:d1:a3:28:13:
22:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C4:63:E7:C3:D8:EA:27:EC:87:1D:F8:B7:5A:50:81:F7:EF:48:75
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KsRj58PY6ifshx34t1pQgffvSHU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.32.0/21
Signature Algorithm: sha256WithRSAEncryption
27:75:d3:11:24:71:29:8e:d5:74:5d:df:f2:91:f0:ba:64:1c:
7e:56:24:03:6b:d5:34:00:14:7a:17:14:b7:da:ed:3f:8e:56:
75:39:19:ab:32:e0:38:10:d6:4a:24:a2:0d:70:68:15:e4:e8:
6e:42:93:59:68:89:d2:7a:10:e8:57:bb:8b:ac:01:b1:19:30:
28:a4:1d:9d:0a:17:32:59:7e:51:90:4e:d6:f1:6c:d0:9d:58:
49:6e:0f:96:53:27:97:3f:ad:53:8f:6d:c3:90:f7:87:3d:08:
d9:ee:ba:13:6b:e9:5b:4c:1d:6d:11:e1:9c:18:44:2f:b3:1e:
b6:64:52:11:f6:f5:12:54:6e:02:d8:6e:d7:d9:61:26:f5:00:
95:c1:82:d9:77:5b:3d:be:cf:07:32:cf:fe:91:d9:96:9e:a8:
40:d8:a3:13:b0:31:3d:7f:5d:fb:1b:b9:81:3e:23:24:85:5e:
2f:e9:c2:6f:51:17:1f:9f:04:ab:83:ec:c1:55:c8:55:e9:f0:
58:6e:46:13:06:d1:18:8a:68:a2:b3:c5:9a:77:e1:d1:77:5c:
bc:38:f2:83:00:e3:eb:10:b5:32:c2:5d:03:f1:2b:da:fa:4b:
a8:3a:f4:24:3e:a2:f6:b9:e3:11:21:52:c0:f3:9a:69:9b:0a:
9c:d3:41:4d
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICMZMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw
NTMwMzVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJBQzQ2M0U3QzNEOEVB
MjdFQzg3MURGOEI3NUE1MDgxRjdFRjQ4NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDaJjZZuoxy28TyBKq290/5HhZsSKQ0u24hD+OTW2ujyIpxyiez
Ug98Kvjqjii7UPoOLiCMrzCDqTZmzYRPkrIiViHkMq/+yzEFHWPbUaCKqYJYJmuK
nSGAjho5VYMpjl+GXGqLuX9QlUM5+LdnTUqQYAfMC4OKe7gEYNqY6b2/c6pKczAV
de4OEdwW0cj5AZxtWklG5Go/WV1yrVjT+rud1g6yqWBA7BifdOiPrqA1xk3PvM5q
rgo9kj2MEF2If4Kbs2qcowuZtQtQH6Sp+woDUPYFkaOHfLcTkXjpAzygdubVDcdD
nJEd1XM0N4L0cXpfHeBdUXPJyNgu0aMoEyLPAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUKsRj58PY6ifshx34t1pQgffvSHUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0tzUmo1OFBZNmlmc2h4MzR0
MXBRZ2ZmdlNIVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
sCAwDQYJKoZIhvcNAQELBQADggEBACd10xEkcSmO1XRd3/KR8LpkHH5WJANr1TQA
FHoXFLfa7T+OVnU5Gasy4DgQ1kokog1waBXk6G5Ck1loidJ6EOhXu4usAbEZMCik
HZ0KFzJZflGQTtbxbNCdWEluD5ZTJ5c/rVOPbcOQ94c9CNnuuhNr6VtMHW0R4ZwY
RC+zHrZkUhH29RJUbgLYbtfZYSb1AJXBgtl3Wz2+zwcyz/6R2ZaeqEDYoxOwMT1/
XfsbuYE+IySFXi/pwm9RFx+fBKuD7MFVyFXp8FhuRhMG0RiKaKKzxZp34dF3XLw4
8oMA4+sQtTLCXQPxK9r6S6g69CQ+ova54xEhUsDzmmmbCpzTQU0=
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:37:17 2025 by rpki-client