Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Sb9CyVG2LJxgmpjfK9mzWGdEGgk.roa
File: Sb9CyVG2LJxgmpjfK9mzWGdEGgk.roa (raw, json)
Hash identifier: XCRLVgPMpBxLQJRdA+v2Uj+fJYySWvn4wcZH2YE49ZY=
Subject key identifier: 49:BF:42:C9:51:B6:2C:9C:60:9A:98:DF:2B:D9:B3:58:67:44:1A:09
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3266
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Sb9CyVG2LJxgmpjfK9mzWGdEGgk.roa
Signing time: Mon 26 Aug 2024 05:31:37 +0000
ROA not before: Mon 26 Aug 2024 05:31:37 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:54:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12902 (0x3266)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:31:37 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=49BF42C951B62C9C609A98DF2BD9B35867441A09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9e:02:e4:60:a1:d8:3d:c2:8a:63:e9:41:75:
d9:e7:bd:58:ef:6d:9a:5e:a5:d4:37:8c:86:10:56:
bf:e8:5b:45:4e:5b:8c:a9:60:34:ae:8a:7a:0c:03:
96:6f:74:f3:70:5b:bf:58:3d:df:56:07:64:b1:db:
d8:88:31:28:4a:24:16:45:f0:53:5a:b3:3e:6e:99:
34:c4:89:d4:42:c1:4f:b0:bd:61:8b:38:64:48:05:
84:bf:6f:a7:15:9e:8b:0a:85:27:79:d3:1b:c6:7f:
e8:4c:7b:ec:2f:5d:31:00:4d:31:2e:d0:b4:f5:a3:
7f:a5:d1:0e:bf:ae:60:57:a0:03:de:e6:f8:77:52:
cb:d6:23:51:c1:f3:6f:68:a4:93:78:a2:e9:ce:4a:
b5:e6:3a:4c:1b:0c:12:95:5b:4e:00:70:f2:41:e8:
6e:c6:9b:eb:56:0f:eb:15:ab:07:3d:7a:c4:92:34:
69:39:e0:ec:b4:62:84:62:0f:8b:57:f3:ea:0a:bc:
f5:d8:08:fc:54:63:7a:d7:5b:61:53:ce:68:22:c7:
9a:e4:9b:06:ca:88:17:6b:54:81:23:7e:b4:b1:f4:
17:d5:cb:e3:76:19:05:d6:f2:96:89:5d:63:aa:23:
28:db:1a:82:a8:0d:a5:8a:18:fc:73:44:b6:db:70:
1d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BF:42:C9:51:B6:2C:9C:60:9A:98:DF:2B:D9:B3:58:67:44:1A:09
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Sb9CyVG2LJxgmpjfK9mzWGdEGgk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.215.0/24
Signature Algorithm: sha256WithRSAEncryption
32:fa:5a:1c:4f:7a:c5:95:06:78:ad:cd:58:1e:ac:f6:67:00:
ff:50:49:a3:56:dd:89:07:7d:57:f3:d3:8a:e4:ca:88:bc:9d:
57:03:47:df:6c:2c:79:84:c7:d6:7a:d0:37:8f:49:21:f3:80:
1f:7a:65:fa:b9:32:16:a5:d3:a0:dd:b3:5f:f7:cc:ba:41:06:
55:0e:80:95:68:49:7c:8c:62:77:10:e7:ff:0b:d1:30:0b:c1:
f2:11:1b:24:f2:48:7f:7b:35:5b:1a:d6:17:21:d0:e3:af:f0:
8b:dd:58:80:3f:da:99:00:7f:ed:18:4f:82:d8:cf:00:d0:54:
a9:ee:9c:cf:59:32:db:15:96:e1:42:77:f5:05:8f:68:13:01:
e6:35:12:ef:89:d0:b9:82:20:c6:b7:b7:3d:a0:fa:4e:9c:2c:
d6:08:0e:c4:9f:e6:13:e1:1d:8d:d4:c2:93:df:68:98:45:4f:
03:68:f6:6b:9d:7b:9a:3f:a6:8d:36:e6:45:21:11:b5:33:ed:
1b:da:bc:f3:5f:b7:3e:dd:4c:d1:ef:b4:57:80:b2:91:a6:c9:
0b:a5:ef:16:4d:c5:50:04:5b:ab:e2:11:19:de:23:27:8f:5b:
b1:9d:34:a3:d3:4d:92:e3:e6:4c:65:61:72:8d:f6:1c:1a:75:
6c:4d:05:ef
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICMmYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw
NTMxMzdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQ5QkY0MkM5NTFCNjJD
OUM2MDlBOThERjJCRDlCMzU4Njc0NDFBMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBngLkYKHYPcKKY+lBddnnvVjvbZpepdQ3jIYQVr/oW0VOW4yp
YDSuinoMA5ZvdPNwW79YPd9WB2Sx29iIMShKJBZF8FNasz5umTTEidRCwU+wvWGL
OGRIBYS/b6cVnosKhSd50xvGf+hMe+wvXTEATTEu0LT1o3+l0Q6/rmBXoAPe5vh3
UsvWI1HB829opJN4ounOSrXmOkwbDBKVW04AcPJB6G7Gm+tWD+sVqwc9esSSNGk5
4Oy0YoRiD4tX8+oKvPXYCPxUY3rXW2FTzmgix5rkmwbKiBdrVIEjfrSx9BfVy+N2
GQXW8paJXWOqIyjbGoKoDaWKGPxzRLbbcB31AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUSb9CyVG2LJxgmpjfK9mzWGdEGgkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1NiOUN5VkcyTEp4Z21wamZL
OW16V0dkRUdnay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq
AdcwDQYJKoZIhvcNAQELBQADggEBADL6WhxPesWVBnitzVgerPZnAP9QSaNW3YkH
fVfz04rkyoi8nVcDR99sLHmEx9Z60DePSSHzgB96Zfq5Mhal06Dds1/3zLpBBlUO
gJVoSXyMYncQ5/8L0TALwfIRGyTySH97NVsa1hch0OOv8IvdWIA/2pkAf+0YT4LY
zwDQVKnunM9ZMtsVluFCd/UFj2gTAeY1Eu+J0LmCIMa3tz2g+k6cLNYIDsSf5hPh
HY3UwpPfaJhFTwNo9mude5o/po025kUhEbUz7RvavPNftz7dTNHvtFeAspGmyQul
7xZNxVAEW6viERneIyePW7GdNKPTTZLj5kxlYXKN9hwadWxNBe8=
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:33:46 2025 by rpki-client