Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WLfda2Y4OfupKD5RIaXqptbQvh8.roa
File: WLfda2Y4OfupKD5RIaXqptbQvh8.roa (raw, json)
Hash identifier: u0j9g1l60FYSomEiCifZvmmPaHEEE+27tMzxjdSVUtc=
Subject key identifier: 58:B7:DD:6B:66:38:39:FB:A9:28:3E:51:21:A5:EA:A6:D6:D0:BE:1F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 329F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WLfda2Y4OfupKD5RIaXqptbQvh8.roa
Signing time: Mon 26 Aug 2024 05:31:50 +0000
ROA not before: Mon 26 Aug 2024 05:31:50 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.194.204.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:54:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12959 (0x329f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:31:50 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=58B7DD6B663839FBA9283E5121A5EAA6D6D0BE1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d5:b9:dc:ce:98:a9:89:d7:ba:a2:99:5d:3c:
ba:c5:6d:e7:e6:2a:cb:40:ae:05:30:ef:76:b2:f2:
6d:a0:92:40:48:0f:a9:ad:ea:38:fa:f5:fb:31:20:
bd:4b:4d:b1:72:4a:c5:c5:29:ce:67:d9:8b:50:6c:
cf:f3:d0:cb:ea:d1:f6:c4:2f:20:52:fd:10:b9:54:
ca:48:a5:74:ea:21:3a:fb:af:0a:7d:c1:fd:9d:19:
b6:aa:9e:ea:b3:0d:03:5d:7d:bd:d9:04:9f:88:68:
8b:93:f8:df:a7:63:97:f9:09:2d:08:fc:8b:a0:48:
d5:36:b4:45:0c:77:ac:b0:c6:9e:c8:46:c4:7b:7e:
22:1d:af:35:db:9c:06:02:4e:e7:c9:04:a1:5c:de:
28:08:ea:a0:eb:f2:36:61:ef:a5:10:ee:73:c3:95:
12:a7:7a:a8:8e:38:ac:b9:57:45:06:47:6d:b4:60:
41:3d:f4:fa:e1:3b:29:c2:2a:49:46:b5:79:1c:9b:
c1:be:c4:99:58:d8:33:21:8e:de:90:9c:75:2a:08:
a2:16:0a:cf:8b:f3:05:28:48:8d:a3:2e:01:b6:02:
99:c3:8b:c0:d9:eb:19:fa:e8:c8:57:f5:03:ee:4b:
2b:fd:d4:d6:14:1e:ce:03:ac:50:90:b5:a2:7e:37:
4c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B7:DD:6B:66:38:39:FB:A9:28:3E:51:21:A5:EA:A6:D6:D0:BE:1F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WLfda2Y4OfupKD5RIaXqptbQvh8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.204.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:21:95:a9:c3:c6:e0:6e:e5:3f:bf:53:69:32:82:f5:b4:bb:
71:18:8e:2f:bf:65:2b:b3:fc:d4:12:72:c8:6e:7a:d6:d0:ef:
ef:df:a0:1c:2a:92:92:8f:22:3b:a6:1c:c3:bf:ca:1b:18:86:
7d:d3:ee:97:55:06:d3:fe:57:1b:76:98:11:bf:ba:f3:e9:0a:
38:b1:a5:2f:4b:af:9b:b0:8f:fc:a0:75:99:d4:69:48:56:7d:
00:e4:a8:79:7e:01:73:4d:e0:7e:d1:cd:c6:e9:41:b9:c4:28:
34:4c:e2:e4:82:13:7b:87:35:7e:62:51:10:88:bf:ec:0f:0d:
fd:6d:dc:cb:67:68:44:58:d0:7c:0f:13:e0:5e:54:87:c3:08:
28:7c:b1:49:59:2b:49:20:9f:12:a8:58:05:b3:8a:2c:1a:43:
bc:17:4c:a2:e9:61:42:ab:a3:df:d3:24:64:cd:33:62:df:18:
b6:16:67:a4:77:0a:bb:82:cb:6e:de:40:4f:2c:12:d6:46:36:
0e:85:62:51:86:c4:0e:22:4f:27:97:b6:d7:b9:fc:2f:bd:28:
17:b6:c4:59:ca:c2:41:0a:62:a4:c4:32:48:ab:64:a8:0d:71:
bc:8f:03:05:59:bf:aa:b5:32:24:a1:42:20:53:34:32:76:5a:
34:a2:58:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:50:27 2025 by rpki-client