Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mYC8YK5BXHZm7dmmn54u_l7IaNo.roa
File: mYC8YK5BXHZm7dmmn54u_l7IaNo.roa (raw, json)
Hash identifier: f15dYj75PCq+s/w6rBJFtiy6gMtu4A0d/3RBpgHQIBM=
Subject key identifier: 99:80:BC:60:AE:41:5C:76:66:ED:D9:A6:9F:9E:2E:FE:5E:C8:68:DA
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 31A8
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mYC8YK5BXHZm7dmmn54u_l7IaNo.roa
Signing time: Mon 26 Aug 2024 05:30:48 +0000
ROA not before: Mon 26 Aug 2024 05:30:48 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 2407:4d00:ff00::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:54:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12712 (0x31a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:30:48 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=9980BC60AE415C7666EDD9A69F9E2EFE5EC868DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c2:44:51:25:fa:a2:2d:b4:ff:f8:9e:a7:18:
c9:1a:7f:21:88:62:42:53:53:9a:18:e3:1d:fc:e5:
db:cf:bf:ac:89:d7:4d:d4:5f:a3:fe:86:44:27:75:
be:2d:08:9e:a5:99:4e:9f:4c:24:ea:bd:34:86:01:
6d:0f:de:6b:96:80:93:e1:e8:e7:4f:e4:20:18:48:
93:7b:ed:86:78:13:ba:25:e6:48:66:ed:79:c6:86:
3f:aa:d5:d3:45:02:59:e0:c4:f4:5b:9f:d8:a7:35:
bc:f0:d1:c9:9d:62:d0:67:50:b6:34:8c:eb:6c:42:
48:dd:6e:15:65:ce:22:18:ec:7a:3b:13:4b:a2:da:
fc:ba:d9:12:6a:d6:0c:98:42:ff:51:74:0a:fa:da:
0f:e7:7f:73:34:1e:88:d2:47:eb:48:61:25:d1:31:
26:db:7a:9d:38:fc:5a:9c:da:af:68:a1:f6:18:50:
f9:f6:c4:c3:3f:cd:f2:aa:b8:ca:21:1f:47:77:37:
78:6c:8f:76:f3:8b:76:d6:1a:2c:45:22:82:40:b5:
8b:b8:11:36:3b:16:c6:25:a4:a0:86:19:46:a4:46:
b8:74:3b:aa:1d:01:5c:1e:b2:03:18:71:66:53:7f:
74:c4:94:74:08:78:e0:b4:af:35:46:18:3a:cb:ed:
99:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:80:BC:60:AE:41:5C:76:66:ED:D9:A6:9F:9E:2E:FE:5E:C8:68:DA
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mYC8YK5BXHZm7dmmn54u_l7IaNo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:4d00:ff00::/44
Signature Algorithm: sha256WithRSAEncryption
18:81:c9:5e:fa:1f:de:ed:6c:f6:4c:b7:97:a3:1a:6a:f2:d8:
14:0f:43:64:a6:24:05:d2:f5:77:68:b1:2d:1f:4b:4f:77:c3:
c2:76:6c:6a:6d:63:2c:bc:91:c9:80:e0:bc:6a:f8:7a:f4:60:
0b:2d:0d:9e:13:d8:7d:13:4d:71:2e:4c:0c:d7:61:76:88:a0:
52:14:09:e3:42:00:22:41:7b:7a:72:1a:fd:87:2f:06:0a:bf:
ed:6e:7f:b0:c4:9a:eb:93:fd:6d:10:3f:7d:99:29:64:38:f7:
9a:b8:8d:04:1a:b1:72:a9:27:dd:13:1d:f1:68:62:17:8d:bd:
1d:95:f8:f8:8a:12:c9:14:68:20:e7:da:82:6a:de:79:c2:a4:
87:e1:0b:ec:1a:56:36:43:35:d7:49:35:73:c8:ec:1d:7b:0a:
29:63:62:4d:24:7e:c7:7a:69:c1:e5:e3:45:b2:06:5d:1a:99:
36:10:eb:6c:55:41:5e:56:d4:24:fa:da:23:b3:11:57:02:09:
de:ea:33:96:a2:b9:f8:b4:08:3d:a5:ed:6a:00:3d:fb:df:2c:
c7:b8:d3:3c:a7:f1:5a:f0:0b:60:c1:b4:79:80:91:fb:88:60:
4c:d0:ce:18:64:b1:9c:b2:45:cc:cd:a5:61:65:3a:72:0b:8b:
38:ad:6c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:59:15 2025 by rpki-client