Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/g6k-Ua4pRx0ObqzvShFsZdkJiTs.roa
File: g6k-Ua4pRx0ObqzvShFsZdkJiTs.roa (raw, json)
Hash identifier: jiyT3eWveETLkR0lWN6Huhr4fiAsVYrSqS4jjT/qW4g=
Subject key identifier: 83:A9:3E:51:AE:29:47:1D:0E:6E:AC:EF:4A:11:6C:65:D9:09:89:3B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3229
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/g6k-Ua4pRx0ObqzvShFsZdkJiTs.roa
Signing time: Mon 26 Aug 2024 05:31:21 +0000
ROA not before: Mon 26 Aug 2024 05:31:21 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.232.96.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:53:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12841 (0x3229)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:31:21 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=83A93E51AE29471D0E6EACEF4A116C65D909893B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9d:f8:0f:51:9e:1f:19:89:9e:0f:c5:cf:5c:
c4:25:17:f4:08:88:22:3d:20:65:b8:b2:0a:5f:8e:
e2:5a:95:7b:39:06:53:3c:40:c0:db:82:73:04:d7:
25:1d:c4:8d:12:25:dc:b0:0d:ac:68:64:be:0d:e5:
5d:90:39:d7:a9:58:97:e2:b5:c7:c3:18:51:9b:32:
76:88:1b:d3:46:1e:c7:5f:7d:26:59:7b:da:0a:b9:
e8:4b:61:5a:3c:cc:77:13:43:07:96:f6:0b:ed:4d:
c6:4a:cf:de:15:29:b8:67:e0:52:22:ea:80:b6:00:
12:27:ac:8b:1a:70:03:e4:4f:9c:71:4d:f0:10:d6:
e8:6e:61:b1:e1:bc:b5:b0:0a:ae:be:7f:ae:88:45:
db:dd:90:c2:4b:92:9e:3b:20:03:dc:9a:64:d4:9d:
c8:2e:2d:fa:d7:4f:1f:78:b8:a8:ac:f2:28:84:86:
46:2d:2b:78:c3:96:32:99:8b:7e:b6:20:7d:43:d0:
0c:93:82:1c:9b:92:16:8b:b4:9b:ce:44:da:72:62:
fe:82:cf:9a:a3:86:36:4b:67:ce:b5:4c:e2:57:bc:
fe:57:42:ab:06:3f:6e:8e:03:73:7f:00:b2:ca:d4:
ce:a5:0c:bf:63:9f:4e:93:eb:1e:4e:7a:8b:8c:8e:
bb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A9:3E:51:AE:29:47:1D:0E:6E:AC:EF:4A:11:6C:65:D9:09:89:3B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/g6k-Ua4pRx0ObqzvShFsZdkJiTs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.96.0/21
Signature Algorithm: sha256WithRSAEncryption
1a:e9:85:f8:43:40:4f:29:66:07:50:e0:d5:55:bd:50:35:3c:
0a:ef:45:70:ed:df:b4:1c:10:60:a3:7b:07:9d:b4:e3:b0:ba:
4d:eb:58:66:66:cd:22:94:91:bf:68:ea:5a:50:d1:6c:a0:4b:
f3:05:a5:c4:68:c2:7b:21:42:54:b2:0c:6a:e1:38:3f:66:8d:
c7:2b:33:80:dc:9b:00:0f:70:a4:15:12:fe:73:a4:51:44:f9:
35:a3:f2:11:e2:19:79:13:c2:e4:ee:ea:70:7c:73:ae:66:f8:
81:29:9a:2c:8b:f6:75:39:5a:f7:c6:a6:d7:c6:0d:3c:55:76:
0b:64:e2:95:64:66:e9:de:8d:c5:8c:be:5c:b0:6d:2d:c9:e7:
de:d4:04:a6:46:a8:8b:ed:88:89:ff:79:d8:13:02:91:2c:33:
bd:09:08:68:87:3f:1a:2f:69:c7:14:db:6c:a4:b7:98:2c:c5:
6f:fb:4d:25:8c:97:64:d9:06:56:b6:d1:41:dc:3a:62:48:87:
05:6b:f6:33:93:32:1b:61:87:19:2a:7d:b2:5d:76:cd:94:54:
26:dd:cb:13:19:79:3a:e8:67:5f:0a:eb:36:42:07:9c:f2:3a:
25:07:6f:42:9b:26:f8:b6:0e:0d:db:85:78:19:87:c6:8d:9f:
8d:f4:0e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:41:31 2025 by rpki-client