Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Zz5GhlCf7MsCLNKGUdGgTXqzJP0.roa
File: Zz5GhlCf7MsCLNKGUdGgTXqzJP0.roa (raw, json)
Hash identifier: A+jCQhnj4EV2I0t2TJ5qfFHrQoF4Ac/gpbcsbcyF8jE=
Subject key identifier: 67:3E:46:86:50:9F:EC:CB:02:2C:D2:86:51:D1:A0:4D:7A:B3:24:FD
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 301F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Zz5GhlCf7MsCLNKGUdGgTXqzJP0.roa
Signing time: Mon 26 Aug 2024 05:29:09 +0000
ROA not before: Mon 26 Aug 2024 05:29:09 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 180.177.16.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:53:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12319 (0x301f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:29:09 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=673E4686509FECCB022CD28651D1A04D7AB324FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bc:23:2b:55:f2:ba:05:61:a2:e0:c4:56:50:
50:f3:59:e5:52:de:97:83:7f:cd:9a:12:a1:fd:da:
bd:f9:01:2f:3c:15:b8:7f:18:06:91:e7:8e:a7:c3:
c8:29:10:9d:9a:03:77:ae:71:b0:17:3e:f9:84:df:
5e:0a:4f:86:86:cd:ce:c5:d3:19:bd:e2:34:0d:61:
7b:99:0a:08:84:49:a5:42:a4:16:d7:7b:f8:be:7d:
59:d0:a2:3f:3a:8f:03:7d:68:9d:6d:21:30:ea:ce:
97:5e:85:b3:35:26:d5:0b:17:f2:04:b1:2a:35:22:
35:a5:69:ea:84:ae:30:d0:12:61:06:47:ed:95:33:
cc:8c:6a:6f:46:f2:d6:61:8e:70:d6:10:d1:7b:28:
57:0a:36:cd:26:a4:0c:49:d0:28:79:1d:4f:c4:77:
c9:7e:74:bf:0d:85:29:44:a3:37:2b:de:51:8b:56:
2f:43:27:7d:76:99:cc:c2:a3:7c:f4:78:11:17:7e:
7a:f1:84:6a:e3:d8:16:d8:46:d9:4a:b8:66:08:49:
f8:61:29:8d:d5:d5:d1:62:2f:0c:d2:2f:d6:24:51:
2f:b0:be:73:b0:06:29:2f:5d:e9:4f:b3:cc:0a:fd:
3a:8f:19:63:f2:3a:55:a9:a5:f1:89:23:27:05:b6:
22:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:3E:46:86:50:9F:EC:CB:02:2C:D2:86:51:D1:A0:4D:7A:B3:24:FD
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Zz5GhlCf7MsCLNKGUdGgTXqzJP0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.16.0/21
Signature Algorithm: sha256WithRSAEncryption
5d:f7:89:62:c2:c7:86:40:54:5a:11:e6:d6:2b:8b:65:04:ee:
72:61:9c:10:1a:84:bb:b4:83:5e:7d:17:ee:8a:e9:30:63:de:
63:2e:0b:54:92:e0:71:a6:00:be:f9:80:ef:a1:47:43:1c:18:
d0:b4:3b:cf:c0:0e:8a:c5:90:9a:a8:58:5c:34:96:b1:b2:89:
ce:60:33:45:7b:1c:5c:f6:20:4c:e7:09:f5:64:36:63:29:5b:
7d:67:90:b3:31:8c:9f:79:1b:5d:c3:94:da:f2:16:26:33:fe:
c4:87:c1:36:4d:08:b9:41:cc:d4:fe:ff:4e:34:6e:21:5e:89:
47:1c:5d:b2:d7:3a:2a:87:b9:8f:be:63:15:3e:63:0b:e5:c5:
81:c4:56:11:f3:85:c5:be:9f:59:84:56:3d:1b:09:c4:13:f1:
81:18:86:e0:df:3e:ea:f9:b2:5a:6e:22:f5:65:af:ba:de:45:
84:0b:d2:d4:80:ce:f8:47:c5:9e:6e:5e:62:bc:9f:af:94:96:
ba:5d:39:6e:b0:5f:87:d4:bc:b8:6b:d3:6b:27:83:4b:da:9e:
7b:b4:0d:3c:02:42:4a:a1:60:97:21:11:36:df:1b:d0:2a:2a:
ae:84:8b:87:f2:ef:0a:40:55:9d:a1:a5:10:e2:21:f1:c5:16:
6c:d1:c9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:33:39 2025 by rpki-client