Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f_T-im-D1ZCOY_PshGgXwNMAHwo.roa
File: f_T-im-D1ZCOY_PshGgXwNMAHwo.roa (raw, json)
Hash identifier: nIZ6S3oSE/VpJ4ZRQzfBgkQtNJEJgpdLFrsWIhjoMDY=
Subject key identifier: 7F:F4:FE:8A:6F:83:D5:90:8E:63:F3:EC:84:68:17:C0:D3:00:1F:0A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3092
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f_T-im-D1ZCOY_PshGgXwNMAHwo.roa
Signing time: Mon 26 Aug 2024 05:29:36 +0000
ROA not before: Mon 26 Aug 2024 05:29:36 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.192.144.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:52:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12434 (0x3092)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:29:36 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=7FF4FE8A6F83D5908E63F3EC846817C0D3001F0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d5:ab:05:9a:09:4e:39:1b:71:77:45:b7:32:
33:d9:0f:83:bc:29:ed:9e:5f:64:ed:e8:ec:88:ff:
35:39:86:2a:94:0a:11:a3:1f:9a:2b:33:94:e4:4b:
c3:04:63:7a:39:bd:86:1c:37:2e:6d:64:87:53:bd:
18:98:a8:c4:a1:ab:91:72:cd:3e:84:1c:46:cb:4a:
b6:17:e2:38:a8:80:e5:e0:c6:ec:3e:f9:fe:f6:47:
ab:11:e3:f8:ad:13:d5:84:aa:33:de:c7:c7:96:f3:
dd:a0:61:76:6a:23:95:ba:2d:f3:08:30:10:28:3b:
57:14:0a:0e:55:39:d5:43:d4:18:ac:ea:42:e1:80:
f6:7d:85:4e:a1:a0:8d:ca:8a:f9:bc:f3:0a:2f:e6:
91:41:7d:63:dd:47:14:e8:92:85:86:bb:e1:7e:e1:
10:49:70:6e:cf:c8:2f:7e:6b:c6:93:df:03:e0:ca:
fa:ff:53:9e:aa:43:89:2b:48:f2:68:6e:47:49:e6:
a1:d3:3b:d5:2b:67:7d:5f:0c:6d:be:84:b7:10:4c:
c6:c3:09:1a:a7:c6:59:13:e5:d9:da:1e:bc:8f:a1:
96:16:72:e9:10:04:ac:0a:ed:0e:83:f7:8a:61:03:
a3:f2:93:b7:c2:2d:63:2e:54:56:1e:b1:2f:ca:56:
f9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F4:FE:8A:6F:83:D5:90:8E:63:F3:EC:84:68:17:C0:D3:00:1F:0A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f_T-im-D1ZCOY_PshGgXwNMAHwo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.144.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:de:99:30:b6:a1:96:30:7d:9f:9b:7b:fa:93:3b:f4:22:41:
b9:a1:aa:47:0f:4c:c0:48:02:24:ed:cd:3e:8a:f2:80:42:86:
10:ee:26:01:14:cf:1e:5a:da:2c:98:13:94:0c:94:4f:e4:43:
0d:55:12:c7:02:a1:11:df:3b:f6:0d:0c:19:de:21:a4:67:6b:
da:92:79:4f:18:c8:27:aa:a5:23:3a:e2:6d:f1:c3:4d:89:f2:
bc:0e:0d:e2:c4:bb:51:c8:fc:6f:9d:07:c3:e1:8d:04:27:63:
4b:f3:3d:69:e1:f7:01:07:16:24:a2:71:fb:e6:58:82:38:f3:
29:c4:20:76:be:89:d1:8c:ba:23:75:f9:32:97:9d:94:26:e0:
31:8c:0c:0e:72:9e:0e:4c:c5:6e:f0:ed:34:5b:6d:d8:d5:61:
e5:9d:ad:80:42:d5:2a:26:af:e8:87:92:d0:54:3c:6e:e6:4f:
17:ce:02:88:be:62:6d:5d:42:21:ba:fe:02:e3:4d:49:48:2e:
6f:d7:c8:87:e5:08:15:8f:c9:ce:7c:7e:3b:96:40:d7:5c:b4:
01:cb:ce:2d:71:ea:0f:53:86:db:e6:19:a1:68:97:a8:a1:09:
fa:68:d8:38:06:d4:85:2b:b4:12:4c:2d:d5:1e:af:90:9e:67:
1a:4f:95:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:14:05 2025 by rpki-client