Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lzV4iaaJb0fbEFZScRVo4vLaR-M.roa
File: lzV4iaaJb0fbEFZScRVo4vLaR-M.roa (raw, json)
Hash identifier: q7u4uvliBBIMkyIUn0ULa6jQsF4Mml4wjQTP73oEvas=
Subject key identifier: 97:35:78:89:A6:89:6F:47:DB:10:56:52:71:15:68:E2:F2:DA:47:E3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3179
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lzV4iaaJb0fbEFZScRVo4vLaR-M.roa
Signing time: Mon 26 Aug 2024 05:30:30 +0000
ROA not before: Mon 26 Aug 2024 05:30:30 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 180.176.236.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:52:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12665 (0x3179)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:30:30 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=97357889A6896F47DB105652711568E2F2DA47E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:48:47:89:b0:1f:e8:a3:c4:a9:fb:50:9b:36:
4a:93:5e:59:94:93:1a:08:ee:c4:85:2f:fe:03:6f:
d0:aa:97:d4:bb:a1:08:7c:cc:2f:77:4b:89:0b:fd:
8e:26:1e:64:24:1c:4e:89:21:1f:de:f6:4e:19:33:
28:ec:f7:8e:4a:38:51:f1:77:89:c8:4e:b0:31:b7:
69:1c:a9:9e:84:ed:30:19:f0:bf:82:39:93:47:11:
e8:96:90:95:13:a1:83:d7:e7:4f:81:43:01:38:8c:
06:91:81:62:78:09:97:91:77:34:13:42:6a:9c:e3:
cc:07:2d:c3:89:de:79:6a:38:1b:0b:b6:c1:73:70:
3f:4c:4c:76:f0:55:09:f3:51:93:1e:ec:53:2d:b9:
c6:dc:31:59:4b:ea:a0:6d:2b:c8:9f:e2:fb:ac:1d:
c1:d5:64:9f:08:82:9a:80:21:bf:40:20:7a:4d:68:
7c:ec:72:85:42:3b:0e:1a:85:f1:4d:b9:dc:b7:e2:
0c:a1:25:21:c5:9e:e7:0c:ed:f9:62:f6:2b:a6:85:
00:66:49:af:62:e3:7d:c9:5c:1d:d9:77:99:2d:2d:
1a:ca:e0:7a:84:cd:ef:5b:f1:b6:c0:49:5c:24:01:
49:8c:f1:50:41:27:82:92:01:45:e9:11:57:0c:50:
f1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:35:78:89:A6:89:6F:47:DB:10:56:52:71:15:68:E2:F2:DA:47:E3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lzV4iaaJb0fbEFZScRVo4vLaR-M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.236.0/22
Signature Algorithm: sha256WithRSAEncryption
13:e6:cf:bb:4e:b5:7d:0a:e7:f0:86:69:88:1d:f1:77:3d:6a:
e9:44:63:13:81:40:83:6d:9a:a1:b0:0a:39:7c:c9:89:61:a5:
2a:78:36:61:4e:61:ae:3d:0d:50:ba:47:50:73:67:23:e2:a0:
94:18:ad:3d:bf:1b:74:c1:33:f2:e2:68:b0:bd:86:ba:80:90:
05:2f:58:3a:5b:d6:85:07:de:a3:54:41:ee:ba:d4:a2:da:1a:
89:73:d6:bf:11:0d:ef:c1:3c:8d:3c:09:35:8e:23:95:d3:98:
4f:3b:30:54:e2:1f:f3:e0:b4:33:b0:79:1d:46:02:3a:eb:df:
5c:8f:4a:89:4e:dc:2f:65:57:88:24:c8:f4:f6:ec:49:8e:2f:
82:4c:ff:e9:ea:4a:0a:2f:da:09:7f:e2:4a:8f:f1:8d:34:19:
ae:8a:7c:a6:47:75:c9:72:1f:a1:3d:c2:f3:a9:7b:c9:29:f8:
4b:0e:34:24:59:5e:94:3a:92:51:27:c5:51:9b:6d:b6:a9:12:
9d:5e:44:c3:ef:f0:a6:f2:d0:44:01:64:d4:64:bf:5e:c5:b1:
06:4e:ff:b7:31:ae:76:fb:a8:71:26:49:b0:73:3f:4b:f2:8a:
9c:ec:36:42:d9:52:59:9d:33:7a:22:1e:0c:61:32:4e:ed:dc:
5d:60:01:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:02:58 2025 by rpki-client