Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cT0ieypOoR5ePInJaYxBLDdUx5c.roa
File: cT0ieypOoR5ePInJaYxBLDdUx5c.roa (raw, json)
Hash identifier: aFkDyQJOfBH7Vto76NEt13wc03AzPpo0kojJD6p1ZmI=
Subject key identifier: 71:3D:22:7B:2A:4E:A1:1E:5E:3C:89:C9:69:8C:41:2C:37:54:C7:97
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 31E0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cT0ieypOoR5ePInJaYxBLDdUx5c.roa
Signing time: Mon 26 Aug 2024 05:31:02 +0000
ROA not before: Mon 26 Aug 2024 05:31:02 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.233.0.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:53:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12768 (0x31e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:31:02 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=713D227B2A4EA11E5E3C89C9698C412C3754C797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:35:f9:f4:6b:01:28:f0:26:43:ea:e1:12:2c:
a5:7a:32:a8:5c:d8:24:59:5a:d7:c1:a6:a1:c9:1f:
95:cc:66:89:2e:ed:31:43:43:22:1b:09:a7:a1:d5:
5b:db:68:83:b7:59:a5:e4:ee:1d:90:a6:50:66:15:
e0:da:e0:2e:a8:67:a9:96:5d:23:bd:87:6f:3c:a6:
3b:6b:f5:df:e5:34:05:ac:a7:87:d8:75:8b:a8:27:
85:86:ae:2f:8c:61:78:a4:36:9b:72:89:3f:3e:4d:
5d:2f:0d:bb:cf:63:65:d4:2d:fe:6e:e7:3d:62:f0:
1c:94:8b:07:6b:9b:bc:be:72:6b:81:de:41:0a:db:
3b:f0:e6:ae:04:27:65:17:6f:06:93:ac:93:72:cc:
88:4e:80:2d:76:d9:05:c1:a0:6f:7b:e9:51:e8:f5:
bc:0e:54:9e:4b:8b:71:51:73:a7:ae:32:a7:28:1c:
fa:73:45:f2:d1:fb:b2:c9:0b:98:7e:4e:47:0f:b5:
27:5a:40:ad:ec:fc:53:b7:78:2e:31:f1:f7:5d:6c:
52:d5:89:88:01:ab:b9:18:71:ff:1c:26:70:87:5c:
91:dd:78:5c:4c:23:a7:dd:73:14:da:7a:c1:a9:90:
9e:ab:4d:6b:99:74:3a:c4:03:92:fc:00:83:5b:60:
40:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3D:22:7B:2A:4E:A1:1E:5E:3C:89:C9:69:8C:41:2C:37:54:C7:97
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cT0ieypOoR5ePInJaYxBLDdUx5c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.0.0/21
Signature Algorithm: sha256WithRSAEncryption
84:84:2c:94:ef:c7:7d:27:32:d1:45:d4:69:09:b8:d8:d9:dd:
4f:0d:74:87:03:98:3e:c7:98:4c:dd:91:92:e3:78:39:13:13:
05:99:24:d8:03:f4:29:b6:cc:9f:35:28:ca:01:3c:b8:d9:b0:
b2:a9:56:40:18:4b:9d:a7:48:cb:55:42:59:7c:1c:9a:be:6f:
73:34:fe:a5:ba:d1:15:4f:f8:7f:03:bb:c3:12:8e:cc:ff:66:
6f:f7:21:e0:f5:ee:47:dc:54:57:2d:7b:8a:77:ec:94:97:81:
ac:7c:2d:14:06:04:7a:92:69:d9:32:aa:91:4d:30:b3:04:4b:
27:d5:f8:27:94:cb:38:f0:95:7c:53:21:67:dc:e2:93:0b:f8:
18:be:2d:67:b0:22:7d:c9:4c:97:3c:d4:0d:c1:12:90:43:70:
2d:8c:26:c8:28:6c:52:40:8e:69:4f:4e:48:95:00:6e:91:34:
dc:05:eb:06:70:97:80:6a:65:59:94:d8:a7:50:a8:ac:50:23:
88:38:2e:eb:fe:f5:5b:7d:54:e6:0b:2f:0c:ed:36:ff:2a:a2:
2f:20:ed:4c:3b:aa:52:dc:03:16:2a:39:bc:4e:9b:0b:b8:68:
e6:2e:cb:a0:f5:75:7c:73:57:11:ae:a9:3a:52:3f:f4:d4:17:
93:13:38:5c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICMeAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw
NTMxMDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDcxM0QyMjdCMkE0RUEx
MUU1RTNDODlDOTY5OEM0MTJDMzc1NEM3OTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDpNfn0awEo8CZD6uESLKV6Mqhc2CRZWtfBpqHJH5XMZoku7TFD
QyIbCaeh1VvbaIO3WaXk7h2QplBmFeDa4C6oZ6mWXSO9h288pjtr9d/lNAWsp4fY
dYuoJ4WGri+MYXikNptyiT8+TV0vDbvPY2XULf5u5z1i8ByUiwdrm7y+cmuB3kEK
2zvw5q4EJ2UXbwaTrJNyzIhOgC122QXBoG976VHo9bwOVJ5Li3FRc6euMqcoHPpz
RfLR+7LJC5h+TkcPtSdaQK3s/FO3eC4x8fddbFLViYgBq7kYcf8cJnCHXJHdeFxM
I6fdcxTaesGpkJ6rTWuZdDrEA5L8AINbYEArAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUcT0ieypOoR5ePInJaYxBLDdUx5cwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2NUMGlleXBPb1I1ZVBJbkph
WXhCTERkVXg1Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2
6QAwDQYJKoZIhvcNAQELBQADggEBAISELJTvx30nMtFF1GkJuNjZ3U8NdIcDmD7H
mEzdkZLjeDkTEwWZJNgD9Cm2zJ81KMoBPLjZsLKpVkAYS52nSMtVQll8HJq+b3M0
/qW60RVP+H8Du8MSjsz/Zm/3IeD17kfcVFcte4p37JSXgax8LRQGBHqSadkyqpFN
MLMESyfV+CeUyzjwlXxTIWfc4pML+Bi+LWewIn3JTJc81A3BEpBDcC2MJsgobFJA
jmlPTkiVAG6RNNwF6wZwl4BqZVmU2KdQqKxQI4g4Luv+9Vt9VOYLLwztNv8qoi8g
7Uw7qlLcAxYqObxOmwu4aOYuy6D1dXxzVxGuqTpSP/TUF5MTOFw=
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:47:35 2025 by rpki-client