Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/g4C-q2jUhBEUCloTwtZtx3fM9OY.roa
File: g4C-q2jUhBEUCloTwtZtx3fM9OY.roa (raw, json)
Hash identifier: bKX0jYc6vlWU4CMqurqNeAgpjUPODLgjwONRoUQje5I=
Subject key identifier: 83:80:BE:AB:68:D4:84:11:14:0A:5A:13:C2:D6:6D:C7:77:CC:F4:E6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 31B4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/g4C-q2jUhBEUCloTwtZtx3fM9OY.roa
Signing time: Mon 26 Aug 2024 05:30:50 +0000
ROA not before: Mon 26 Aug 2024 05:30:50 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.233.196.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:54:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12724 (0x31b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:30:50 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=8380BEAB68D48411140A5A13C2D66DC777CCF4E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5e:a6:da:7f:f3:13:76:fa:24:94:53:fd:d3:
2e:2a:21:74:5b:f5:0b:5e:79:d1:70:ee:a1:eb:68:
59:45:2b:df:6c:8d:4c:01:6e:79:9c:3c:b0:c6:e5:
b1:e1:60:a3:9a:c7:79:78:8d:f8:d7:2b:af:a6:df:
df:01:d4:3e:e0:62:c2:d8:3b:84:3a:6c:58:b4:3e:
d4:88:51:26:15:e4:f5:0f:08:b8:f0:7f:c5:c1:b9:
f3:92:74:4e:45:2d:ff:43:6a:48:1b:99:bb:7e:c5:
43:52:a6:09:85:75:5b:06:2f:bf:e1:a1:e3:28:8b:
08:dd:8a:ff:82:c6:6b:75:ef:ff:59:88:2d:b1:a9:
8d:7e:f8:85:9f:9d:07:aa:36:26:9d:53:ad:c8:9c:
35:5f:09:84:c3:d7:37:b3:1d:8c:8d:3f:2e:e2:e8:
b2:ac:52:a7:83:60:c6:a2:af:e5:0a:a4:44:8f:55:
46:a9:4d:39:b9:55:e3:87:5e:c8:99:ed:7f:7b:37:
46:f9:e6:40:21:ec:ee:63:a3:3e:d8:0f:44:9f:8c:
d2:b9:76:3b:ca:0e:9d:59:67:97:f4:28:fa:27:93:
6c:5f:6c:ac:89:36:20:47:08:a9:a3:13:58:d4:57:
d4:29:99:04:e9:59:0b:3e:10:69:18:23:98:63:db:
16:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:80:BE:AB:68:D4:84:11:14:0A:5A:13:C2:D6:6D:C7:77:CC:F4:E6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/g4C-q2jUhBEUCloTwtZtx3fM9OY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.196.0/22
Signature Algorithm: sha256WithRSAEncryption
32:ad:a6:f7:3a:96:01:56:5d:ea:c0:1b:56:5e:5b:a1:8e:97:
e1:3e:43:3c:50:a8:cc:9b:e4:8f:80:47:ee:e3:35:83:af:68:
39:fc:1b:b2:68:a3:3c:fa:98:56:b8:7b:94:5a:06:42:d4:05:
26:b4:6f:51:d0:f5:4a:ed:a5:63:6f:6d:e5:2b:9c:a3:9c:63:
b3:d4:68:f4:8a:50:14:9e:3e:64:eb:83:c0:a7:6c:f4:b7:09:
65:a2:7b:a2:c9:69:f8:ea:5f:fb:f8:72:6d:83:cb:b2:87:7c:
75:de:0b:53:4b:5d:65:eb:7d:c9:fe:c6:9f:0d:05:97:d8:8d:
35:06:04:a6:e9:4a:58:4b:57:1a:45:d3:b5:94:bb:59:79:37:
79:fe:25:79:58:6e:53:73:c7:ba:fe:d3:60:df:36:f1:f5:2d:
1a:c5:98:21:5a:30:f6:94:a7:08:29:9b:0a:d2:19:56:25:1b:
cc:ef:e0:a1:99:68:9b:d4:f3:b1:2f:d1:77:2b:53:5f:61:4f:
5c:60:d4:9d:42:d7:43:be:28:40:63:9c:be:b1:e5:18:a2:99:
be:b0:11:2d:75:3a:0e:88:da:ed:6a:0e:dd:2c:26:6f:77:bd:
10:32:27:d0:ef:d0:2f:ae:ea:14:49:92:a3:c9:a0:d2:4b:55:
04:5d:49:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:36:53 2025 by rpki-client