Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kGxanQQPB3UmFX0PNUeV4XaS4k8.roa
File: kGxanQQPB3UmFX0PNUeV4XaS4k8.roa (raw, json)
Hash identifier: g/tJbVxoCMkIAweGDWfVsfyfnETerW/MjiVSjVqqkCU=
Subject key identifier: 90:6C:5A:9D:04:0F:07:75:26:15:7D:0F:35:47:95:E1:76:92:E2:4F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 30FC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kGxanQQPB3UmFX0PNUeV4XaS4k8.roa
Signing time: Mon 26 Aug 2024 05:30:00 +0000
ROA not before: Mon 26 Aug 2024 05:30:00 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.232.200.0/21 maxlen: 27
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:51:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12540 (0x30fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:30:00 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=906C5A9D040F077526157D0F354795E17692E24F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c7:d8:4f:f5:66:db:d4:43:cd:84:58:0b:4a:
c7:b8:77:84:3c:05:ee:b8:c7:2f:bd:f0:33:48:bd:
be:41:d6:27:39:5f:93:05:64:e4:28:59:c1:0b:6d:
cd:68:69:7e:3a:24:90:23:31:45:37:af:3f:42:2e:
bc:e0:ea:1f:ed:ef:09:cd:44:e0:6f:44:39:41:b3:
34:2e:3e:ec:59:0e:93:7f:aa:dd:bf:b4:c1:3d:a7:
1e:f3:4b:e7:f9:73:9e:8f:48:a6:a5:94:76:15:34:
93:1d:70:4f:59:09:7b:73:a4:49:90:38:46:7c:14:
6d:9a:fb:52:2b:27:c9:45:54:7b:af:ea:8c:22:38:
72:4c:c4:81:3b:dc:7a:15:1b:05:67:a7:65:c1:f2:
0c:18:20:e0:63:11:6c:1b:35:8a:7b:5d:92:ac:24:
5c:87:43:57:38:53:e7:a0:7f:58:b0:b6:71:d6:b2:
c0:ce:f7:74:07:02:b2:34:b3:eb:8f:b1:40:f4:5a:
f1:96:12:f9:ae:ef:71:a5:e3:19:c0:6e:42:af:d1:
33:1f:1f:f4:c9:72:98:a7:f3:b0:e5:da:91:e4:fd:
43:95:48:3c:99:ed:b5:b8:fa:1b:66:87:8d:ba:2e:
b9:30:e9:f8:df:fc:57:7c:4b:cd:dc:b4:57:ac:62:
02:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:6C:5A:9D:04:0F:07:75:26:15:7D:0F:35:47:95:E1:76:92:E2:4F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kGxanQQPB3UmFX0PNUeV4XaS4k8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.200.0/21
Signature Algorithm: sha256WithRSAEncryption
09:27:7f:0b:7e:42:49:b3:80:58:bb:00:f5:97:7f:34:7f:91:
6c:ed:f6:ac:6c:cc:b2:62:0e:15:e7:ef:9f:2b:86:39:e8:b4:
0b:03:51:bc:e5:b0:35:dd:52:08:4d:16:c6:c0:82:4b:cc:36:
c9:c7:29:d4:94:4a:f4:1a:bb:bb:7c:48:10:b8:92:d5:e6:37:
9b:ab:27:ff:02:16:f6:93:86:f5:79:bf:64:22:a3:2e:58:46:
5a:ea:4a:4a:70:b1:6a:92:16:97:03:67:bd:c1:54:a2:84:0f:
1b:97:81:fc:50:bd:4a:33:79:38:78:5e:9d:69:3d:a3:08:4e:
91:ed:9f:07:07:63:9e:20:1d:b9:ae:db:ca:6c:93:86:f9:ce:
92:59:88:a1:b3:ef:4b:00:0c:14:e5:f6:37:fb:52:3f:37:61:
b6:b6:56:30:49:94:6c:9c:c2:99:1d:35:4f:89:15:bb:cb:ec:
00:1c:cb:a4:36:8f:6b:0c:81:94:7b:7b:33:35:a0:60:12:3f:
7a:ec:e8:57:15:59:ec:2c:10:dc:21:cd:ff:0d:e9:cc:b6:5c:
24:6b:d9:2e:04:a8:37:23:16:2e:b1:38:bb:c3:be:e8:81:44:
23:53:09:51:d6:09:9f:26:ce:6e:f4:a0:c9:41:fb:6b:58:03:
63:86:2f:17
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICMPwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw
NTMwMDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDkwNkM1QTlEMDQwRjA3
NzUyNjE1N0QwRjM1NDc5NUUxNzY5MkUyNEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9x9hP9Wbb1EPNhFgLSse4d4Q8Be64xy+98DNIvb5B1ic5X5MF
ZOQoWcELbc1oaX46JJAjMUU3rz9CLrzg6h/t7wnNROBvRDlBszQuPuxZDpN/qt2/
tME9px7zS+f5c56PSKallHYVNJMdcE9ZCXtzpEmQOEZ8FG2a+1IrJ8lFVHuv6owi
OHJMxIE73HoVGwVnp2XB8gwYIOBjEWwbNYp7XZKsJFyHQ1c4U+egf1iwtnHWssDO
93QHArI0s+uPsUD0WvGWEvmu73Gl4xnAbkKv0TMfH/TJcpin87Dl2pHk/UOVSDyZ
7bW4+htmh426Lrkw6fjf/Fd8S83ctFesYgJjAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUkGxanQQPB3UmFX0PNUeV4XaS4k8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2tHeGFuUVFQQjNVbUZYMFBO
VWVWNFhhUzRrOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2
6MgwDQYJKoZIhvcNAQELBQADggEBAAknfwt+QkmzgFi7APWXfzR/kWzt9qxszLJi
DhXn758rhjnotAsDUbzlsDXdUghNFsbAgkvMNsnHKdSUSvQau7t8SBC4ktXmN5ur
J/8CFvaThvV5v2Qioy5YRlrqSkpwsWqSFpcDZ73BVKKEDxuXgfxQvUozeTh4Xp1p
PaMITpHtnwcHY54gHbmu28psk4b5zpJZiKGz70sADBTl9jf7Uj83Yba2VjBJlGyc
wpkdNU+JFbvL7AAcy6Q2j2sMgZR7ezM1oGASP3rs6FcVWewsENwhzf8N6cy2XCRr
2S4EqDcjFi6xOLvDvuiBRCNTCVHWCZ8mzm70oMlB+2tYA2OGLxc=
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:20:14 2025 by rpki-client