Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hKZJ7h4xzVi_AMgFjIf3D8mKEZg.roa
File: hKZJ7h4xzVi_AMgFjIf3D8mKEZg.roa (raw, json)
Hash identifier: bEywOnQzpocpuM8omRNJPc0OAb/QgdLSr9wVFztDUGs=
Subject key identifier: 84:A6:49:EE:1E:31:CD:58:BF:00:C8:05:8C:87:F7:0F:C9:8A:11:98
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2FFF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hKZJ7h4xzVi_AMgFjIf3D8mKEZg.roa
Signing time: Mon 26 Aug 2024 05:29:02 +0000
ROA not before: Mon 26 Aug 2024 05:29:02 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.194.64.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:53:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12287 (0x2fff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:29:02 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=84A649EE1E31CD58BF00C8058C87F70FC98A1198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:87:cc:ba:00:75:8a:a4:62:86:f1:55:3a:11:
26:ea:69:c0:ca:e9:76:1b:c4:98:f9:9c:17:83:a4:
b2:8b:45:d1:9a:6c:12:dd:fd:f0:49:8a:7e:11:82:
40:0b:6e:4e:ce:89:69:44:21:2f:57:27:31:6b:76:
7f:ef:3e:f1:27:f9:b9:b7:4c:20:d0:08:46:8e:d0:
ae:32:35:1b:e4:2e:17:fd:4d:56:6b:48:09:29:1c:
e4:4c:d5:53:f2:47:e4:a2:f2:98:e5:98:c7:f5:30:
b5:b1:4d:4a:39:47:cf:a1:e4:eb:ba:0e:6e:cc:e2:
27:d6:b8:d5:fc:5b:44:c8:fb:48:32:7b:2a:73:c0:
e8:69:4a:bf:03:76:a2:00:e0:3b:f9:9f:75:90:ea:
87:73:73:0e:e9:2e:0a:55:7d:db:8c:92:e2:11:ef:
8d:a4:4a:7d:4a:6d:c6:8d:31:dc:cf:00:32:bc:4a:
e7:e7:79:36:c2:83:6f:fe:06:7b:64:96:3c:cb:c5:
24:6d:00:df:06:df:00:47:b6:11:b2:dd:e9:bd:f1:
e2:c1:f4:0b:52:c8:57:c2:75:87:f7:9f:fb:15:7e:
d5:b3:5f:de:79:ef:88:31:df:a8:f7:4e:57:f3:bd:
ab:c5:67:89:de:66:33:17:bf:47:a0:00:ad:48:ca:
25:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A6:49:EE:1E:31:CD:58:BF:00:C8:05:8C:87:F7:0F:C9:8A:11:98
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hKZJ7h4xzVi_AMgFjIf3D8mKEZg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.64.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:73:3f:20:ca:a8:c9:98:f2:35:33:c0:bf:f5:82:14:f6:e3:
c0:9d:6e:a4:06:7f:4b:53:cb:1a:83:f6:88:11:5d:e1:1c:b4:
77:c3:b4:ab:1b:3c:50:e2:3e:16:3f:79:a7:52:af:9f:e8:b2:
bb:12:d2:f5:83:8d:f8:60:6e:35:fd:bc:d1:3e:79:c8:96:a2:
3d:cb:51:01:5c:21:5a:0b:8b:82:5c:f6:cf:0a:0a:a1:da:e0:
f6:f1:c7:a9:93:3b:b6:1f:f9:17:bc:89:a5:f3:e1:df:69:7f:
5c:41:e8:a4:76:97:a4:e4:a7:eb:15:43:32:29:b4:d6:3c:0d:
4d:02:4a:f7:8d:16:e4:03:32:1c:a8:d0:46:93:21:5c:88:b2:
71:4e:e0:9a:96:cd:4e:6d:0b:46:e4:14:c2:db:73:b3:1e:ad:
e5:3b:a3:c3:81:b0:1a:d2:d3:1f:4c:63:e7:c0:6c:71:1a:dc:
13:a6:fc:e2:e1:2e:3a:28:b5:8c:27:b6:a4:86:2d:d1:69:50:
10:ce:5d:d2:07:b1:35:8d:fd:db:78:b8:5a:28:92:aa:29:a4:
69:28:86:60:3b:73:7b:66:10:79:bf:8f:75:1b:d1:e7:d2:5c:
c7:c3:66:07:f3:9e:ec:fc:14:49:a9:54:f8:77:f3:ad:39:04:
2b:a8:55:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:44:05 2025 by rpki-client