Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OzcS_SlKx27JFH8dHVx2Ln_QaF0.roa
File: OzcS_SlKx27JFH8dHVx2Ln_QaF0.roa (raw, json)
Hash identifier: MBTDFga2oxwksaQ04uA+3GmvkJOzK7cZxPaDrXGrg2I=
Subject key identifier: 3B:37:12:FD:29:4A:C7:6E:C9:14:7F:1D:1D:5C:76:2E:7F:D0:68:5D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 324B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OzcS_SlKx27JFH8dHVx2Ln_QaF0.roa
Signing time: Mon 26 Aug 2024 05:31:31 +0000
ROA not before: Mon 26 Aug 2024 05:31:31 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.80.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:53:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12875 (0x324b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:31:31 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=3B3712FD294AC76EC9147F1D1D5C762E7FD0685D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c9:38:9a:65:33:a8:ac:3b:36:0a:aa:34:b4:
d0:c2:78:8a:e7:44:59:3f:4f:cf:42:32:ee:70:26:
9f:6f:64:ec:70:10:09:d3:12:2c:bb:9c:cd:58:c0:
54:6a:b2:9d:fd:ee:c8:38:46:1e:d3:e6:dd:c8:98:
21:ab:7e:22:aa:53:27:b0:75:b3:eb:ed:f5:83:94:
33:20:9b:c7:ca:a3:d9:ce:96:0f:51:78:8f:e3:6d:
05:7f:e7:64:a6:83:79:5e:ae:88:35:bc:47:d8:ea:
f4:55:73:4a:9f:ba:9f:e3:c1:99:a5:28:b1:30:4d:
52:cf:0f:12:2b:85:f0:94:39:d4:04:a0:81:60:19:
4c:bc:dd:92:87:92:39:bb:6b:b8:80:87:f2:9c:94:
0f:cb:e1:1f:b1:51:12:00:c0:b3:f3:3b:fe:98:2e:
8a:83:57:f5:86:c0:e0:28:05:8c:44:9b:1c:4b:94:
66:2e:93:32:56:bf:c6:17:aa:3b:23:8c:50:65:a1:
90:94:2e:37:db:6e:88:4e:8a:fb:63:58:82:bf:61:
d0:75:44:31:7d:3f:e3:ad:f3:48:7a:a0:4f:e6:ad:
88:2e:01:ae:32:75:c5:c1:77:aa:2a:85:fe:8a:bf:
96:cd:b8:1c:a8:da:6c:1d:ec:f7:a4:d0:df:82:8a:
bb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:37:12:FD:29:4A:C7:6E:C9:14:7F:1D:1D:5C:76:2E:7F:D0:68:5D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OzcS_SlKx27JFH8dHVx2Ln_QaF0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.80.0/22
Signature Algorithm: sha256WithRSAEncryption
72:82:65:ae:c8:7c:2b:42:97:4a:44:3c:6b:69:c4:d8:be:06:
fc:99:66:a3:1d:f3:87:d8:e4:2c:4f:95:3f:9d:9a:5c:b6:a3:
57:b9:80:1d:ec:f9:14:05:02:c9:65:75:21:28:ab:36:e9:6b:
2e:a0:82:27:33:eb:bb:ae:5f:f8:ae:50:f9:81:ef:66:41:fe:
f2:64:93:a8:d5:cc:e6:eb:29:6d:b2:c6:ca:9f:42:d4:c8:62:
3b:3b:41:08:7c:42:e6:6d:91:fc:86:66:75:55:b2:2c:91:bf:
e0:b0:fb:33:73:ae:3d:01:6f:73:68:60:29:3e:bd:ae:31:c1:
74:29:3c:27:f3:de:2a:f7:3c:25:38:a7:93:d8:bb:4c:7c:0d:
15:e4:83:b0:f8:19:a3:95:08:37:22:4c:f6:31:7e:0e:4d:d9:
9f:0c:b6:02:bb:9b:31:6a:6e:b0:2f:cf:2f:b8:05:6a:1d:08:
dc:67:19:c5:b0:5f:66:fd:49:9b:af:9f:22:13:a3:3f:47:71:
07:00:af:91:b6:69:d9:8d:65:d4:a7:75:b8:d5:01:44:3d:86:
8d:8a:b7:76:4b:90:3e:cb:80:95:aa:ee:aa:03:f3:f2:6b:7c:
eb:9d:60:8d:fe:e2:5e:74:38:6e:50:24:97:1e:3e:b4:31:f0:
28:22:3f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:33:44 2025 by rpki-client