Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X84vePmOdetbFEQl6D2FViNSn0s.roa
File: X84vePmOdetbFEQl6D2FViNSn0s.roa (raw, json)
Hash identifier: 9K1FDCxjzfZOV+ZqQZYmhkLOKgQq1MahT01kzPJ/3Fk=
Subject key identifier: 5F:CE:2F:78:F9:8E:75:EB:5B:14:44:25:E8:3D:85:56:23:52:9F:4B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 30A4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X84vePmOdetbFEQl6D2FViNSn0s.roa
Signing time: Mon 26 Aug 2024 05:29:40 +0000
ROA not before: Mon 26 Aug 2024 05:29:40 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.194.160.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:51:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12452 (0x30a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:29:40 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5FCE2F78F98E75EB5B144425E83D855623529F4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:54:3c:bd:d4:24:d3:56:11:bc:4f:ee:3d:06:
82:e0:08:4b:94:99:bf:03:f7:ba:7f:cf:31:b7:e5:
8b:99:61:c3:cb:1b:90:06:c3:77:2b:1f:ce:b4:7a:
69:74:f3:28:31:3d:9c:bf:c7:d7:bf:b0:15:90:ea:
0d:4c:0d:ec:12:d7:32:27:c6:bb:c9:44:9f:20:19:
95:d4:ce:cf:fe:2f:c2:a6:2e:61:07:b1:94:76:e3:
82:9d:03:df:ab:b7:53:b9:0e:6f:99:43:79:0c:4d:
ba:0b:77:ac:9c:d5:f4:7a:aa:75:41:99:f5:87:3e:
cb:08:a4:fc:74:e2:40:e1:a3:a6:32:05:fd:e5:d4:
56:70:62:90:20:75:66:be:88:e1:fb:5b:38:4c:d2:
90:62:01:f9:99:b6:c3:eb:fc:e2:67:e8:20:d3:8a:
0d:2a:21:91:96:4d:f5:32:8d:ac:cb:35:79:55:51:
a2:21:db:11:84:16:99:e6:1d:fd:81:22:42:5e:f2:
0b:e2:5e:a0:4c:eb:2d:67:18:74:e4:c6:aa:1d:6a:
8d:06:bf:a7:09:95:f9:8d:29:5b:f1:85:a1:0b:f8:
8f:40:65:6e:85:0f:71:2e:cc:34:58:44:03:a6:ed:
78:90:c7:19:57:6b:ed:dd:3a:96:5e:2a:b4:93:44:
56:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CE:2F:78:F9:8E:75:EB:5B:14:44:25:E8:3D:85:56:23:52:9F:4B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X84vePmOdetbFEQl6D2FViNSn0s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.160.0/22
Signature Algorithm: sha256WithRSAEncryption
51:39:fc:97:12:7c:3e:a3:c3:8b:61:dd:6f:1f:0a:4a:af:5c:
42:86:e9:7b:a2:cf:8b:75:5e:1a:a5:e9:2c:c6:bf:f6:cc:1a:
e5:b5:42:ac:19:2c:c2:cf:92:49:33:97:fd:21:31:59:f3:b7:
e0:90:01:1b:c7:55:d4:5d:74:44:dc:69:a2:e1:20:e5:0f:b1:
df:31:bd:c3:81:41:d7:91:8e:bf:d4:c2:23:b3:68:9c:93:52:
7e:7c:e4:e0:46:05:b3:2a:46:4b:06:0f:fa:52:03:f1:dd:c5:
37:66:7c:cf:7e:3a:ac:83:a7:6b:38:c8:45:da:1b:db:70:a9:
df:59:1d:35:0c:89:fa:73:f5:43:0a:ad:f5:f6:71:47:f1:a7:
87:e6:16:b2:ad:9a:9a:3b:de:0c:dc:5f:17:44:6c:af:73:f8:
1a:31:24:25:e7:69:64:99:8c:a8:3c:b6:9d:5b:1b:20:3e:a8:
c4:b3:c9:18:e2:be:ea:30:d2:29:5b:2c:cd:00:47:ab:35:a3:
ea:a4:9a:4d:47:7b:0f:ea:28:2b:26:89:27:c2:3d:0e:79:c5:
a7:a6:af:70:70:35:1f:b9:70:a3:63:e6:39:12:a4:6c:04:e4:
8b:dc:76:4a:71:6b:49:d4:8b:30:3f:f1:f4:3e:3c:73:a8:d2:
27:10:30:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:28:38 2025 by rpki-client