
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/M2FdFP3YEJsT79X6kTCNYrc6Eq8.roa
File: M2FdFP3YEJsT79X6kTCNYrc6Eq8.roa (raw, json)
Hash identifier: V/KYWGkdzB21kU6QSiT8dvXB7jodNX9+1qs8JojAINc=
Subject key identifier: 33:61:5D:14:FD:D8:10:9B:13:EF:D5:FA:91:30:8D:62:B7:3A:12:AF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3257
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/M2FdFP3YEJsT79X6kTCNYrc6Eq8.roa
Signing time: Mon 26 Aug 2024 05:31:34 +0000
ROA not before: Mon 26 Aug 2024 05:31:34 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 2407:4d00:ff04::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:53:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12887 (0x3257)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:31:34 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=33615D14FDD8109B13EFD5FA91308D62B73A12AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:63:76:d4:5a:06:32:c4:f1:9a:e2:26:20:a8:
36:0f:60:0b:cf:d0:3c:32:34:93:7a:51:b7:9a:16:
05:99:a9:63:e9:99:97:88:7a:24:93:97:03:0b:bc:
ca:5d:5d:2f:47:df:4f:9b:ee:55:f3:bd:bc:e6:38:
b4:74:06:97:14:d6:37:e9:3f:0a:3a:e4:dc:f6:f1:
ef:38:e6:0f:13:21:f0:c7:57:be:a6:0c:81:ff:42:
52:29:bd:43:5e:11:16:84:5f:7e:a9:29:cf:94:17:
b2:e7:6d:d2:7f:28:60:48:df:1c:df:f5:58:c5:0f:
74:6b:32:37:ba:18:82:45:50:69:85:f3:21:ce:5a:
78:04:27:d8:1b:e9:af:57:46:90:a7:ff:b4:97:23:
8f:ce:93:15:25:87:68:00:ab:03:86:23:a6:89:76:
bf:59:75:8e:27:a3:28:cd:b7:f7:35:10:a4:98:73:
e7:c4:1b:93:b4:f4:7e:35:c6:ea:20:42:e8:48:f9:
86:37:e6:2f:b8:f9:50:e3:f5:3e:6f:cc:70:55:72:
6b:10:e1:77:14:df:35:08:13:b6:df:56:48:61:5c:
c5:07:ca:f8:97:e0:08:74:0d:83:f7:ff:7e:ac:25:
73:88:19:66:76:68:76:4f:3f:7f:cd:fd:fb:bc:ca:
71:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:61:5D:14:FD:D8:10:9B:13:EF:D5:FA:91:30:8D:62:B7:3A:12:AF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/M2FdFP3YEJsT79X6kTCNYrc6Eq8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:4d00:ff04::/48
Signature Algorithm: sha256WithRSAEncryption
76:ac:09:31:6c:83:c8:0e:ad:09:e8:5a:55:23:10:47:4c:21:
4e:c9:e8:fa:da:ce:d7:a9:88:0b:1f:71:ec:2b:70:02:06:03:
13:69:1a:9f:c3:42:75:67:41:c4:9b:c9:ac:5d:fc:95:e2:7e:
d3:af:ad:68:4b:64:10:04:33:4a:40:e4:5b:0b:6f:c8:b5:bf:
80:69:b9:d8:e4:2c:99:00:8e:73:0d:ae:aa:39:73:2e:9b:b1:
32:91:9c:7f:55:48:88:11:58:6c:a4:ab:86:97:77:51:b8:b5:
68:82:f7:46:63:97:56:2f:0f:ef:33:bc:18:9f:61:51:7a:68:
ac:22:fa:54:b5:18:e1:24:d6:a3:cb:ef:85:ed:ad:8e:96:b9:
4a:78:98:cb:13:0e:1f:29:f3:f1:9d:29:61:dc:b5:6e:f6:83:
4b:cd:b1:3d:d6:94:e9:19:8b:95:26:5c:9d:be:05:33:28:d3:
b9:02:7a:ce:53:87:5b:2a:92:e7:5e:9b:36:16:71:07:40:b1:
7a:87:17:97:1b:61:cb:7a:90:5d:b7:2e:61:ad:f9:3f:cd:7f:
90:74:ae:6f:fd:ed:bf:8c:d8:de:0b:cc:df:af:24:41:16:c1:
d9:30:03:e1:47:87:22:35:74:14:0a:b0:e4:bf:ed:d7:93:d4:
a7:9c:e7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:39:13 2025 by rpki-client