Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eMTcI3BCpa6HphuY1M-03pwDmZQ.roa
File: eMTcI3BCpa6HphuY1M-03pwDmZQ.roa (raw, json)
Hash identifier: C7DklNcDyhZTt1gJVaPOYRs1HpWAWSkxVxPfiARm7gM=
Subject key identifier: 78:C4:DC:23:70:42:A5:AE:87:A6:1B:98:D4:CF:B4:DE:9C:03:99:94
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 312B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eMTcI3BCpa6HphuY1M-03pwDmZQ.roa
Signing time: Mon 26 Aug 2024 05:30:11 +0000
ROA not before: Mon 26 Aug 2024 05:30:11 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 118.232.0.0/19 maxlen: 19
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:52:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12587 (0x312b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:30:11 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=78C4DC237042A5AE87A61B98D4CFB4DE9C039994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:90:88:3d:c5:23:06:7f:11:8f:6a:c8:1e:bd:
ba:62:eb:20:be:ee:13:b2:7e:e6:ae:c2:79:81:6a:
0f:ac:71:ff:f8:f3:89:af:51:5d:66:ca:4b:c7:b2:
cc:c6:fb:49:21:b4:72:15:7a:78:ce:55:6d:17:a7:
12:7b:ab:73:0b:e5:97:9a:97:21:81:a8:ce:1c:1f:
9f:26:ed:11:74:44:54:85:46:da:89:94:31:a1:e7:
3b:f7:03:a1:9b:5b:76:e0:45:1a:60:f7:2f:dc:a4:
0f:d5:7c:09:36:7a:79:8c:49:d0:48:06:d1:f4:a3:
9e:bd:93:27:84:0f:37:a3:29:92:c0:00:7b:f7:ed:
c4:0c:a3:c8:de:e8:90:e3:dd:9b:b4:c9:27:15:4a:
1b:d1:d8:1d:98:36:5b:e8:22:4c:60:e6:0a:6e:cd:
8a:09:e8:f1:77:93:57:2c:0c:f6:8f:8d:48:8f:31:
12:61:3b:f5:2a:a8:98:9e:58:ff:13:97:ca:14:76:
98:82:dd:55:3d:48:08:bf:f3:64:4f:cd:05:3f:d8:
f6:bf:cd:38:25:bf:9a:7d:c8:a2:b2:5d:21:36:de:
e8:f9:a5:ec:34:3c:e1:e3:e4:63:ed:b0:7c:5c:12:
9d:ed:37:b1:ae:ef:3f:aa:10:63:06:93:cc:a8:ef:
9d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C4:DC:23:70:42:A5:AE:87:A6:1B:98:D4:CF:B4:DE:9C:03:99:94
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eMTcI3BCpa6HphuY1M-03pwDmZQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.0.0/19
Signature Algorithm: sha256WithRSAEncryption
51:0c:3a:65:96:e2:34:fe:b5:a2:57:2d:08:40:22:d3:07:a1:
34:f9:29:91:7a:1a:f4:7f:13:19:5a:61:0f:92:ae:a8:8d:79:
92:24:63:cc:01:c4:b3:13:e5:0b:e3:2b:f1:f0:44:78:1a:64:
b3:29:d9:a3:4b:71:95:b3:be:92:bf:65:1c:e3:57:c7:29:02:
85:eb:55:df:43:0b:34:ab:05:7b:33:e2:7d:dc:38:ad:1a:c7:
e9:6a:41:ed:0e:65:e9:ed:09:69:c1:ca:30:38:9f:73:43:6e:
ab:47:6b:08:a1:55:31:22:38:81:80:98:c2:1a:fd:85:e4:10:
1a:98:68:74:6e:53:41:e7:ff:9c:bd:e0:3e:8f:be:17:97:9d:
29:c6:2e:bc:c6:a1:9a:eb:f6:90:e9:1a:44:6b:de:c1:50:7b:
0b:48:92:fd:a9:b5:c6:e5:b0:40:f1:98:ca:a8:c7:9e:e2:1c:
7c:5a:03:1c:e0:1c:00:fd:87:71:cc:fd:30:89:cd:b7:55:32:
00:3a:a5:01:55:0b:dc:f5:89:2d:b1:18:30:5e:67:99:18:98:
64:3b:72:f0:b6:8e:d8:dd:ba:f5:a1:48:de:6c:47:84:89:57:
68:eb:18:2d:48:40:34:89:d7:2b:e6:6e:22:37:56:b1:f6:0b:
31:86:03:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:59:30 2025 by rpki-client