Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YN_ReANbhQoUdn_5mNQGaerIgiw.roa
File: YN_ReANbhQoUdn_5mNQGaerIgiw.roa (raw, json)
Hash identifier: LCbO/CRjzEyiyUBvdSB7Mpl0vhpH59WmTW5XT7ChH5I=
Subject key identifier: 60:DF:D1:78:03:5B:85:0A:14:76:7F:F9:98:D4:06:69:EA:C8:82:2C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 305F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YN_ReANbhQoUdn_5mNQGaerIgiw.roa
Signing time: Mon 26 Aug 2024 05:29:24 +0000
ROA not before: Mon 26 Aug 2024 05:29:24 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.195.200.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:51:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12383 (0x305f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:29:24 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=60DFD178035B850A14767FF998D40669EAC8822C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:43:c8:ee:77:58:aa:8e:35:bd:60:6d:58:57:
32:b9:8f:5b:db:4c:aa:5a:56:26:a6:4e:fd:4c:53:
e1:e0:81:c4:6c:55:41:ee:ea:92:b7:22:ce:fc:49:
f9:59:75:81:45:c9:14:7d:7a:c9:ee:db:1b:53:44:
00:26:7c:27:ae:90:4b:b7:8c:fc:7d:c1:cc:14:43:
87:d0:ef:ce:35:5c:c0:b0:19:45:3e:10:ab:c2:8b:
43:c3:0b:43:88:41:b4:a3:ae:4b:08:46:a5:a0:74:
ce:c7:96:73:33:16:f4:26:b9:f9:40:94:62:e2:ad:
55:66:fc:f9:a4:7b:63:52:54:f6:4b:ec:7c:86:e5:
b1:bc:b9:94:6a:07:6d:75:8d:e2:8d:23:8d:72:43:
16:ff:68:02:85:a1:f0:61:38:17:34:ff:cf:d5:52:
43:6c:ba:bf:cd:9c:26:02:1c:9a:5e:08:a2:92:93:
16:4d:65:a1:ae:5f:13:dd:8b:9a:5f:8c:94:0d:13:
9a:1a:0b:35:c7:a2:8a:18:84:6d:43:5f:23:5a:3a:
7b:5b:db:c5:49:a8:b8:b1:02:a1:c9:86:40:a9:4e:
be:11:1f:9f:d8:35:ab:3c:9e:67:0b:34:26:d6:58:
a6:18:8a:34:b8:4e:e7:c7:b5:03:bc:33:c8:e3:6c:
eb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DF:D1:78:03:5B:85:0A:14:76:7F:F9:98:D4:06:69:EA:C8:82:2C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YN_ReANbhQoUdn_5mNQGaerIgiw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.200.0/21
Signature Algorithm: sha256WithRSAEncryption
13:ec:1f:73:3f:e8:35:02:50:66:f9:c1:c2:a8:dc:f2:71:ed:
5a:52:7a:84:b2:ec:dd:b1:6b:d8:1d:94:5d:d0:e1:0b:35:37:
0b:fe:b7:b8:9c:f3:ed:f4:d9:d8:92:62:4e:e3:15:96:fe:f9:
fa:cc:70:ca:98:f5:4b:5a:71:9e:2c:22:59:e0:53:68:4a:63:
af:e7:2b:a8:8a:f1:8e:6a:e6:9e:fe:6f:b1:be:04:9d:d0:28:
d9:93:0a:07:ca:e0:a1:ef:9d:9d:17:fa:37:3d:2f:76:85:f0:
a8:cb:c3:a0:5e:48:a7:51:10:46:be:77:05:05:c4:3b:30:69:
a7:6e:9e:8c:18:c8:3e:7c:b1:09:dc:6c:8c:74:9b:35:59:73:
12:3b:53:10:5b:90:6a:3e:3c:1f:d7:bc:83:7f:64:7e:8c:fa:
0b:65:5a:59:09:0a:19:38:dc:93:6b:81:35:44:cc:0b:e5:9f:
e0:f1:e8:1a:37:82:ae:09:a7:ee:fe:f0:87:d3:a1:52:30:fc:
c6:67:8f:ea:13:7b:a2:b8:f3:33:61:4a:73:bc:ac:53:97:b6:
2e:67:eb:30:a0:f1:4b:e6:39:28:34:4e:38:eb:8f:65:3c:c1:
d4:cc:3f:35:39:47:2e:e5:7c:a7:32:4d:98:11:f1:97:d9:8b:
76:73:4f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:15:35 2025 by rpki-client