Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MH_G4qzRG85-YN09eFgzKZUqKpc.roa
File: MH_G4qzRG85-YN09eFgzKZUqKpc.roa (raw, json)
Hash identifier: 6ybj02PpT/OJYtfzPFegw336gY29jbLItL05staONgE=
Subject key identifier: 30:7F:C6:E2:AC:D1:1B:CE:7E:60:DD:3D:78:58:33:29:95:2A:2A:97
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3083
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MH_G4qzRG85-YN09eFgzKZUqKpc.roa
Signing time: Mon 26 Aug 2024 05:29:32 +0000
ROA not before: Mon 26 Aug 2024 05:29:32 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 180.176.112.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:51:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12419 (0x3083)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:29:32 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=307FC6E2ACD11BCE7E60DD3D78583329952A2A97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:55:31:a3:93:0a:c7:c3:5f:bb:6b:81:c0:bb:
bc:ed:70:0b:b7:be:3b:07:61:1f:76:98:f4:59:8f:
a7:98:3c:54:c0:6a:16:0e:49:51:50:92:02:21:73:
e5:87:de:79:b3:4f:ae:c7:cd:cc:bf:ee:33:2e:d4:
3a:76:5c:1e:91:79:fb:21:53:6c:16:f8:0a:99:2a:
4f:cd:ca:70:c9:e3:38:4f:80:f3:03:53:a0:cf:4e:
12:62:7f:76:5a:c4:f3:82:2b:1c:cd:64:8e:e2:eb:
9f:73:0c:e1:18:9a:78:27:ed:84:7a:45:87:e7:7a:
f6:c9:c8:c6:da:dd:25:97:a3:4e:25:22:1b:d4:85:
25:65:b3:e3:77:75:ec:f9:9c:3e:aa:3c:43:6c:22:
5e:c6:75:b5:40:e6:96:48:74:5b:7d:56:37:9a:2e:
f9:ed:59:0c:e9:17:88:7c:e2:40:1b:f2:d4:60:cc:
e8:30:da:80:4f:59:1a:98:a5:d5:55:d9:e5:51:7f:
16:39:c1:b6:2f:59:09:1c:d0:15:a4:16:5d:ff:35:
2f:b4:9b:23:74:0f:2c:60:d1:e1:de:db:09:c2:2b:
16:2d:98:8e:44:6d:30:ab:ed:1d:c3:75:59:ae:6b:
27:7c:cc:f6:3f:34:00:16:38:ae:6d:33:24:af:34:
61:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:7F:C6:E2:AC:D1:1B:CE:7E:60:DD:3D:78:58:33:29:95:2A:2A:97
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MH_G4qzRG85-YN09eFgzKZUqKpc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.112.0/21
Signature Algorithm: sha256WithRSAEncryption
3a:5e:26:0f:b4:b0:c2:7a:80:16:92:d0:c9:ae:ff:0b:ec:38:
e4:85:bf:34:9f:5c:3f:87:b8:9e:3b:ef:ec:50:47:fc:c3:26:
44:97:05:85:58:d5:24:81:21:ad:72:4a:01:71:b4:b9:cd:e5:
89:b7:71:3e:44:d8:d8:6e:54:b6:e4:60:d2:5e:77:ab:6f:52:
61:c1:dd:fe:67:f6:8e:87:3b:ca:df:02:e9:79:ff:8d:2b:e2:
12:b3:ba:82:37:43:59:36:cd:0a:1a:c6:48:c6:8f:10:00:22:
2d:fb:b6:aa:28:77:f7:44:30:5a:6e:f7:b9:17:a5:3f:cb:27:
41:bf:e4:b0:7d:a8:90:3b:cd:70:50:22:ee:f9:fa:cf:d0:21:
43:93:07:79:e1:48:b0:2a:20:63:a9:07:6f:05:60:a7:29:52:
b2:60:2f:36:49:b0:08:8d:15:fc:61:b9:fb:b1:c3:c7:33:0c:
80:f5:d2:43:62:0d:a1:47:d7:79:e4:70:6b:e8:4e:69:c9:42:
d0:3e:a1:f9:4f:3e:5b:58:6b:a6:3a:06:ca:4d:91:df:ae:8d:
10:49:9b:cc:56:e5:26:16:b8:e2:7d:a5:81:32:54:a2:e6:b2:
e2:13:df:6f:03:c1:38:a2:91:f0:51:c0:6e:c7:9c:53:23:9f:
f7:09:50:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:44:05 2025 by rpki-client