Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Y2TwPtiLkpUJqIqb4VbugcHfsUY.roa
File: Y2TwPtiLkpUJqIqb4VbugcHfsUY.roa (raw, json)
Hash identifier: NFEzHed9+aRirt0Jc7553wnmJ40be0BZdBxztD4FdWU=
Subject key identifier: 63:64:F0:3E:D8:8B:92:95:09:A8:8A:9B:E1:56:EE:81:C1:DF:B1:46
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 308F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Y2TwPtiLkpUJqIqb4VbugcHfsUY.roa
Signing time: Mon 26 Aug 2024 05:29:35 +0000
ROA not before: Mon 26 Aug 2024 05:29:35 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.233.234.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12431 (0x308f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:29:35 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=6364F03ED88B929509A88A9BE156EE81C1DFB146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e9:eb:b7:8b:b9:de:af:98:42:81:70:6e:85:
8f:bc:40:f8:30:9d:e8:d6:5e:bf:7e:c7:94:fc:22:
54:aa:a2:3e:c6:9b:7e:4a:1a:aa:6b:df:41:c3:96:
fc:c8:b8:c5:dc:6a:44:fe:4c:b3:34:db:e3:c7:aa:
7a:15:15:af:99:00:90:7f:32:67:7a:df:3e:62:87:
83:34:8b:e4:a2:02:a4:1f:77:d4:2a:73:53:38:7e:
e7:95:e9:e8:f3:1e:aa:56:c7:7b:70:eb:c5:08:b4:
f9:eb:69:b8:b8:84:91:f0:b4:f7:8c:3d:ac:bb:ca:
0a:e4:e6:49:5e:68:84:dc:e3:ca:3e:b7:42:a0:fe:
02:4e:f5:d6:e1:e4:26:01:49:7b:9e:ce:a0:63:fc:
cd:40:f6:ba:a5:b6:f9:eb:5c:2e:ab:37:27:1d:ca:
c3:01:47:60:01:c5:f0:5a:84:44:24:4b:d1:4f:c6:
48:a1:5e:e4:1e:31:26:1f:da:34:12:2c:cb:17:86:
96:05:cc:dd:19:82:ac:4f:ab:8b:e2:75:72:1b:f9:
71:9b:ad:16:a1:69:4f:89:4c:ad:8e:8e:f9:b4:3a:
cd:cc:71:5a:50:96:34:88:a7:f6:7c:58:59:ad:bd:
78:b9:02:a4:c9:bf:1d:b4:ff:16:59:c9:df:18:d8:
a9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:64:F0:3E:D8:8B:92:95:09:A8:8A:9B:E1:56:EE:81:C1:DF:B1:46
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Y2TwPtiLkpUJqIqb4VbugcHfsUY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.234.0/23
Signature Algorithm: sha256WithRSAEncryption
22:5f:34:e0:a2:19:58:dc:ca:fc:87:a9:09:27:6f:77:98:34:
58:b1:e8:fa:97:6e:c6:03:08:4a:b0:f5:9c:56:48:7a:2f:a5:
10:80:82:17:54:a7:e4:ad:79:40:b9:4b:9e:91:75:f1:2e:23:
dd:6a:5b:23:c8:7a:54:61:19:ae:03:06:11:62:94:b4:f5:4b:
b4:ef:52:05:b9:ac:44:9a:35:ac:d3:27:93:55:ec:8d:f3:8a:
d6:ae:2b:d3:56:c4:6c:53:fe:9c:6e:a4:79:12:38:c4:c1:ab:
e4:78:f1:61:80:16:87:3e:b6:53:4a:9d:61:e2:b9:38:11:91:
19:c2:9f:40:fe:eb:6d:90:74:b3:6d:e9:b7:6d:93:4c:e7:27:
39:e6:a0:1d:a7:15:58:38:a5:fd:c0:9b:cf:46:d8:68:e9:7a:
a2:fa:0c:77:61:e8:ac:11:48:3e:5b:d5:34:81:e8:1e:77:10:
e2:6d:3d:29:8d:a6:cb:7a:54:8e:4d:1b:36:38:88:27:51:f2:
4c:2b:80:6e:ac:04:54:fa:67:e0:a8:c7:d6:c7:e3:ec:68:e5:
f5:c2:a1:0b:47:7c:ed:3c:03:b5:90:34:f2:bf:bb:21:a6:16:
dd:d8:c1:71:08:19:ae:39:d2:6a:e7:e6:d6:89:e4:8a:37:18:
24:05:a4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:28:20 2025 by rpki-client