Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Tzod4Cr3t1N5YZwqn2k5sAmVOPs.roa
File: Tzod4Cr3t1N5YZwqn2k5sAmVOPs.roa (raw, json)
Hash identifier: eq37ruz9Ermg9UkPOsYOcw2WLBHsDxMaDfdmGpiaU7g=
Subject key identifier: 4F:3A:1D:E0:2A:F7:B7:53:79:61:9C:2A:9F:69:39:B0:09:95:38:FB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3217
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Tzod4Cr3t1N5YZwqn2k5sAmVOPs.roa
Signing time: Mon 26 Aug 2024 05:31:15 +0000
ROA not before: Mon 26 Aug 2024 05:31:15 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:53:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12823 (0x3217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:31:15 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=4F3A1DE02AF7B75379619C2A9F6939B0099538FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8e:06:d4:00:cc:ec:21:f6:3c:06:f5:07:b2:
a0:10:5e:af:c1:f3:3a:6d:32:1a:af:74:23:49:33:
70:72:9d:e8:33:b7:7b:0e:6a:f1:91:4d:36:60:f2:
de:75:2e:38:f9:ff:c0:d5:65:53:62:de:39:8b:a4:
44:64:5c:e1:4f:28:b0:29:82:99:c8:56:28:75:af:
c8:f1:76:8c:c6:ee:f7:64:94:c1:3b:20:f7:4b:bd:
31:95:62:f0:31:56:a0:4d:c7:f2:38:87:7f:a6:02:
f0:d0:d7:ed:72:2c:37:a6:a7:2a:f0:68:08:39:28:
d8:6a:cb:63:d5:2a:70:a0:bd:34:a7:01:0a:c3:ca:
d3:fd:83:69:68:ae:38:c5:64:f6:25:aa:e1:9a:93:
9f:9a:c1:3c:63:67:d4:d5:0c:cc:c5:fb:d9:48:90:
91:f4:1a:d7:81:f6:df:8a:8a:c7:54:a5:47:ab:f9:
ee:a1:99:dc:df:b6:05:2c:82:2f:5f:00:bd:d3:75:
e8:48:bb:30:67:e7:1c:aa:33:9b:d9:73:72:9c:69:
3c:09:70:a8:fe:66:86:46:ec:8c:15:2c:8d:f7:80:
3f:14:52:4a:e0:6a:65:98:65:15:75:c9:7c:1b:c5:
9c:41:fe:be:d5:ff:61:32:e5:ca:08:cd:7a:78:16:
df:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3A:1D:E0:2A:F7:B7:53:79:61:9C:2A:9F:69:39:B0:09:95:38:FB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Tzod4Cr3t1N5YZwqn2k5sAmVOPs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.180.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:8e:1c:64:33:da:cd:66:56:ac:ce:8c:55:70:8f:27:78:f3:
77:8a:41:cd:13:3a:00:a4:79:89:bd:83:be:4c:b7:47:2c:a5:
07:30:62:7b:34:0c:b3:af:6f:ea:94:c4:56:08:34:60:e8:0a:
e5:a9:71:07:d9:0e:55:2a:c7:64:e0:60:6f:00:9a:8e:52:52:
fb:80:a2:15:2d:0d:df:93:e5:2a:b3:2d:29:de:d3:96:d5:49:
48:9a:bb:f0:16:df:78:52:97:f4:98:c5:4f:f8:c5:25:8e:0b:
65:d7:33:4a:d4:ab:c6:0e:25:33:a9:2f:bb:80:a4:10:66:8e:
70:d1:c3:47:b4:69:00:59:f6:45:69:67:68:f0:09:d0:49:29:
63:c2:89:c0:01:d2:6c:2c:e6:fd:fc:ca:29:79:17:6d:de:44:
af:e7:33:f8:33:1f:db:e5:30:81:e0:0e:4f:76:8c:59:ab:4a:
48:e2:01:f6:21:84:37:6b:9d:45:38:51:43:e8:9c:ff:ed:6d:
26:7c:dc:0d:53:97:d8:bc:c7:55:6b:ca:20:87:6b:82:ba:19:
c1:17:b6:1b:92:6a:83:9a:37:a3:8a:90:2b:0a:28:7b:1c:d5:
35:6a:e7:58:82:35:d1:8f:20:5e:5c:0b:32:19:9c:1d:9c:98:
85:c1:53:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:11:54 2025 by rpki-client