Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kIy2gY43TZa5tVU6OMsB6TmlSmQ.roa
File: kIy2gY43TZa5tVU6OMsB6TmlSmQ.roa (raw, json)
Hash identifier: pT1DSWEX9+1y390jV4xlFajlrEPpPtZbOAyDGtg9GNk=
Subject key identifier: 90:8C:B6:81:8E:37:4D:96:B9:B5:55:3A:38:CB:01:E9:39:A5:4A:64
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3078
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kIy2gY43TZa5tVU6OMsB6TmlSmQ.roa
Signing time: Mon 26 Aug 2024 05:29:29 +0000
ROA not before: Mon 26 Aug 2024 05:29:29 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.193.32.0/20 maxlen: 20
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:52:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12408 (0x3078)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:29:29 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=908CB6818E374D96B9B5553A38CB01E939A54A64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:46:c4:ef:35:a2:17:56:46:e9:ac:d9:92:58:
ce:26:fe:ba:af:78:9f:37:85:55:7e:9f:91:08:32:
ab:d8:d1:61:6e:2d:d0:e0:7d:23:fe:09:2a:71:36:
a7:da:22:4f:50:2c:a6:7f:8b:84:f8:1a:92:80:2b:
a8:a0:a7:56:55:60:76:b5:93:0d:b7:15:57:cd:10:
dc:76:8e:bd:1a:c3:38:71:8e:ac:18:27:3e:f9:8d:
2a:40:4c:97:0f:ca:53:c8:28:a7:c7:01:c7:b2:e3:
01:ce:5e:bd:86:ef:f9:80:3d:ba:50:82:4c:73:bd:
6c:21:c4:c0:43:b9:ac:14:07:32:84:b6:ec:a0:47:
c3:18:ba:82:cf:45:12:4b:98:77:3e:60:d1:6d:b2:
ee:d9:f8:e4:03:1b:9e:f5:8d:2a:29:4a:99:d9:01:
cc:37:2a:97:ee:dd:fe:d4:e3:9e:fb:8d:fb:ad:0b:
92:b8:ca:a2:3c:c6:cc:c6:84:36:f7:08:ec:fd:df:
27:b8:14:90:8e:10:14:16:66:7c:2c:d1:05:44:df:
4a:aa:92:0e:9a:8b:f8:e8:4a:24:fa:1b:c9:6d:6a:
4a:c7:f2:28:a4:2d:07:52:00:72:da:85:63:5a:6d:
80:e0:50:aa:59:da:dc:4c:e8:47:e9:45:a2:a8:93:
26:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8C:B6:81:8E:37:4D:96:B9:B5:55:3A:38:CB:01:E9:39:A5:4A:64
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kIy2gY43TZa5tVU6OMsB6TmlSmQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.32.0/20
Signature Algorithm: sha256WithRSAEncryption
18:1d:8c:dc:71:67:98:b6:13:32:73:43:8b:2e:60:8b:bf:e2:
40:cd:bf:c9:60:a9:b9:66:48:87:b2:6d:93:90:20:df:09:83:
df:aa:80:50:4f:b9:cd:f4:98:48:ae:25:a9:d7:f7:95:36:75:
7f:5c:34:43:88:8d:5d:0a:fc:db:ac:1d:fe:e0:43:f9:47:84:
37:72:01:ee:bc:35:98:b0:7f:08:0a:51:df:17:93:e1:6a:f0:
f2:28:88:54:96:a1:ff:bc:ec:2e:5d:aa:88:75:42:b4:64:17:
b2:80:21:85:cd:a8:37:c1:e1:d5:8e:8b:51:5d:0c:36:95:a5:
3d:b2:d6:d4:91:6a:5d:92:49:5c:28:2b:a6:22:74:30:ee:a7:
e3:05:1e:32:28:0f:aa:82:d2:d3:98:5e:b0:e9:35:3a:bb:ce:
7a:56:ff:e6:b0:01:a3:2c:7e:6d:13:b5:e9:71:5b:a1:83:d2:
46:12:e8:1c:5b:6f:ce:a3:d0:f1:1c:4b:fc:d7:52:ee:f8:cb:
5f:d4:d9:ef:0c:12:cb:73:7e:03:7b:06:79:97:ac:fa:9b:75:
44:2d:13:a3:ab:15:96:23:46:b8:b7:eb:b7:24:e4:d6:40:7f:
53:73:f2:a4:e8:07:dd:0d:dd:43:41:01:29:8f:99:50:67:d4:
38:f9:7b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:47:24 2025 by rpki-client