Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PAdx-x0rMTAbSCxjSrZnoZ6Xwyc.roa
File: PAdx-x0rMTAbSCxjSrZnoZ6Xwyc.roa (raw, json)
Hash identifier: 0vl+A+xxuV8fQmJWPoIwe7ck377G9tI3w42Uo0/D7cQ=
Subject key identifier: 3C:07:71:FB:1D:2B:31:30:1B:48:2C:63:4A:B6:67:A1:9E:97:C3:27
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3136
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PAdx-x0rMTAbSCxjSrZnoZ6Xwyc.roa
Signing time: Mon 26 Aug 2024 05:30:13 +0000
ROA not before: Mon 26 Aug 2024 05:30:13 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.116.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:52:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12598 (0x3136)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:30:13 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=3C0771FB1D2B31301B482C634AB667A19E97C327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:84:3b:7a:ae:49:b3:cf:8b:47:6a:31:ea:e0:
27:30:b8:73:0e:5c:fc:2f:4d:64:f8:da:94:f3:07:
8d:2a:b1:29:38:3f:58:95:1c:e2:ff:83:53:84:2e:
45:32:24:86:1d:36:f1:2a:3b:e2:75:8c:86:18:58:
4d:74:5d:e0:5a:5d:ec:c6:14:ae:3a:67:bf:6f:3c:
e6:77:d2:ae:dc:1a:d4:be:ec:88:76:f8:70:68:e2:
8b:e6:0b:84:a8:a5:1f:01:99:54:b3:31:b6:14:b4:
42:6c:ec:da:49:35:45:08:4e:2f:ed:e4:93:82:70:
ef:0d:06:23:fa:e4:92:98:80:61:e6:d0:d0:41:76:
ff:61:8c:0b:db:84:d9:da:d3:58:4c:e0:90:66:5c:
4c:d5:5d:69:ca:95:bf:04:4d:42:c3:e9:b8:11:93:
26:23:a9:db:96:df:ad:16:15:95:4c:d4:b5:cc:cb:
49:f4:dd:d3:56:16:13:e5:e1:6b:37:e0:b4:b7:0b:
13:04:eb:df:36:7d:54:9d:d3:09:b5:c4:6f:8b:06:
0f:23:c4:cf:0a:5a:36:2b:42:ec:58:30:24:07:9d:
b2:c1:d7:9b:05:e3:f3:35:8a:6a:aa:68:3d:dd:21:
64:b4:48:36:e9:3a:20:ee:c3:2f:3b:97:8d:db:9a:
3e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:07:71:FB:1D:2B:31:30:1B:48:2C:63:4A:B6:67:A1:9E:97:C3:27
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PAdx-x0rMTAbSCxjSrZnoZ6Xwyc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.116.0/22
Signature Algorithm: sha256WithRSAEncryption
90:b1:9a:a0:f3:a8:b2:9f:de:10:60:3a:0d:f2:d3:23:e2:59:
28:ef:b6:9c:25:36:84:05:c9:d5:7d:82:68:ba:30:48:a6:c5:
d2:e6:e6:c7:5b:a2:76:49:b9:ff:60:2a:68:67:e2:e4:bf:e7:
7d:28:cb:fc:09:53:0f:23:25:5e:3e:84:74:6c:84:ba:ae:44:
77:ff:0b:a6:5c:53:e2:36:1e:41:e7:26:e5:8d:f1:b0:8a:c1:
12:e1:6a:06:ba:94:d7:68:c0:cd:32:53:43:a5:7d:b6:ea:ab:
5c:4a:a7:4b:f1:a9:12:53:b1:87:f1:6c:bf:ad:e7:43:9a:0a:
ec:f9:bf:28:0b:ab:0f:c8:4a:eb:a0:61:f5:55:59:7e:92:4d:
41:3b:98:b3:35:73:74:be:66:c5:f0:df:02:59:0c:f0:7f:4e:
c6:05:f7:9e:1b:28:32:da:da:38:2d:13:69:f3:c4:11:68:2b:
d8:61:8c:40:a1:7e:99:c0:cc:b6:36:c4:ae:9a:cc:3c:09:ef:
b6:d9:58:ab:21:78:68:8d:bc:50:41:5f:dc:66:14:97:c2:ff:
81:f4:cf:52:fb:1a:c2:a1:1c:a8:3b:67:8a:08:6c:1e:92:d4:
47:48:99:d0:2b:f6:f2:f1:47:b8:f2:ad:79:f9:81:4a:75:fe:
b8:0b:29:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:41:13 2025 by rpki-client