Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/O-YUk6B2ycO-sPjUPbbQZxax5bE.roa
File: O-YUk6B2ycO-sPjUPbbQZxax5bE.roa (raw, json)
Hash identifier: k9FTE5raHkdwD1IDn3qdjYysLvbatXunp0ZnaZyh5Mg=
Subject key identifier: 3B:E6:14:93:A0:76:C9:C3:BE:B0:F8:D4:3D:B6:D0:67:16:B1:E5:B1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 30B2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/O-YUk6B2ycO-sPjUPbbQZxax5bE.roa
Signing time: Mon 26 Aug 2024 05:29:44 +0000
ROA not before: Mon 26 Aug 2024 05:29:44 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.194.56.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:52:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12466 (0x30b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:29:44 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=3BE61493A076C9C3BEB0F8D43DB6D06716B1E5B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c1:a9:d5:c3:59:6c:ff:88:44:00:dd:1d:59:
aa:57:3a:d7:fd:c1:8f:1a:70:06:42:9e:bd:c3:86:
f4:6d:88:16:6c:a1:89:61:3c:4e:6b:3b:1d:bc:e0:
e4:60:e8:a0:07:9b:c1:c9:4e:fd:3f:7e:d6:eb:ee:
6b:e4:e6:db:dc:51:da:cd:39:d1:d6:aa:83:a7:13:
e5:d0:29:77:57:5d:7a:62:c3:82:a4:84:54:77:00:
a2:e5:cb:3c:7b:d5:bd:2e:98:b1:20:47:36:33:2e:
ea:0f:59:56:34:45:b9:d6:39:5d:03:ca:dc:01:04:
63:df:d5:e5:e2:96:17:ff:8c:4c:31:e1:3f:62:5e:
c0:7d:fa:ec:c4:5c:ca:15:98:9f:59:4d:e8:f9:73:
7a:4d:ed:76:d6:05:ff:35:32:8d:6d:07:92:fd:5a:
bb:c0:67:64:4d:fc:fc:45:da:88:66:d2:63:89:53:
97:66:32:af:37:b8:b5:c8:51:87:0a:1a:af:7c:d7:
72:bc:1b:c5:9d:44:f8:74:a4:50:b9:1e:e9:d9:d0:
03:6b:9b:c8:6a:c7:d2:35:a5:6f:57:37:ed:d9:96:
91:3e:36:75:c3:e3:bd:02:fb:67:3b:41:99:c8:89:
05:c9:19:a6:33:1e:a9:ff:74:5f:de:be:41:30:5e:
f4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E6:14:93:A0:76:C9:C3:BE:B0:F8:D4:3D:B6:D0:67:16:B1:E5:B1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/O-YUk6B2ycO-sPjUPbbQZxax5bE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.56.0/21
Signature Algorithm: sha256WithRSAEncryption
98:fa:d9:4b:64:27:6c:3c:cc:03:75:60:63:dd:4f:a0:06:dd:
87:0d:8d:fb:96:31:40:01:32:51:8c:00:e3:76:59:f4:25:ec:
bd:fa:67:53:bc:f6:1a:bb:fe:24:ee:69:c4:cb:de:ab:bc:10:
e7:93:e7:25:3f:12:1f:91:87:4c:de:2d:36:72:49:85:34:99:
a2:8b:68:62:58:d2:61:23:fb:fa:d5:11:5e:44:6e:ef:cd:41:
8a:82:dc:c2:52:cc:a7:32:76:d9:55:e0:d1:47:b0:15:cb:30:
f7:36:8a:c4:8c:41:e0:00:46:1a:56:75:93:64:75:de:85:e7:
93:39:a8:d7:b7:71:c0:f0:3b:e5:11:b1:08:cb:20:f8:11:d0:
e4:ff:aa:db:94:70:bf:d2:61:24:01:c0:73:a7:24:53:86:8a:
8c:8f:40:69:0a:e7:02:3a:66:83:e2:50:15:39:d2:85:8c:b9:
2c:91:6b:13:f8:39:04:69:c2:c7:84:12:36:30:d9:c0:b2:fe:
46:2a:d2:37:80:06:04:f1:b4:0c:92:d7:51:0c:d0:9d:c9:6e:
55:cd:f7:07:c0:e7:93:2b:73:83:1b:8e:09:bf:76:c2:85:4e:
8a:20:bd:f3:9c:23:2d:cc:4c:1d:d6:65:8f:be:89:2d:70:d2:
c0:ca:ce:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:31:15 2025 by rpki-client