Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/njJT6kTirwKu_MaFfPDa3Xx8q9A.roa
File: njJT6kTirwKu_MaFfPDa3Xx8q9A.roa (raw, json)
Hash identifier: 4rI0OHjDev8bNJ2uUIGQ3MLsNQ/kcvdnT3EnOCxgXcg=
Subject key identifier: 9E:32:53:EA:44:E2:AF:02:AE:FC:C6:85:7C:F0:DA:DD:7C:7C:AB:D0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3287
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/njJT6kTirwKu_MaFfPDa3Xx8q9A.roa
Signing time: Mon 26 Aug 2024 05:31:45 +0000
ROA not before: Mon 26 Aug 2024 05:31:45 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 180.177.88.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:54:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12935 (0x3287)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:31:45 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=9E3253EA44E2AF02AEFCC6857CF0DADD7C7CABD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:48:78:9e:68:0a:10:39:50:ae:64:99:d2:70:
21:e5:02:91:16:0d:55:ec:ea:a8:48:84:40:c4:16:
9b:08:36:ff:48:b9:aa:ff:6d:0c:19:71:33:a2:f7:
e3:ce:1b:b4:27:55:55:a4:d0:ba:6d:51:c5:ae:54:
6f:3b:82:2f:77:5a:11:1e:98:28:bd:95:26:f4:09:
de:55:09:22:80:97:1a:aa:b7:df:58:79:1f:e4:9e:
89:9f:1f:42:30:6f:69:8c:ce:4c:11:19:66:9f:46:
70:f1:eb:e0:36:53:64:a7:0f:24:eb:f4:ca:89:c6:
fe:3a:ae:cc:5a:ed:86:7b:8a:68:c1:8f:cb:ef:36:
05:6a:67:ec:b9:1d:f3:74:4d:a4:d4:88:d5:97:31:
d7:10:5e:7e:5a:0e:eb:02:9b:79:3a:c6:66:1a:f3:
0f:dd:ab:79:5a:af:42:2a:9d:6f:23:6b:31:19:0f:
bf:84:91:3b:32:e2:63:94:0d:8d:09:e1:42:fd:27:
f6:7c:82:11:0b:a5:f9:a2:87:b6:07:d9:01:a0:25:
8c:e7:c4:ae:f9:43:d8:ed:9f:44:ba:cc:f6:d0:d8:
a7:10:48:64:9c:d0:10:a5:79:35:5f:67:25:e8:47:
d7:55:ad:4c:a1:cb:df:80:ba:9b:69:ef:44:50:a5:
e9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:32:53:EA:44:E2:AF:02:AE:FC:C6:85:7C:F0:DA:DD:7C:7C:AB:D0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/njJT6kTirwKu_MaFfPDa3Xx8q9A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.88.0/22
Signature Algorithm: sha256WithRSAEncryption
29:16:4c:a6:a3:13:11:98:93:b5:b0:fd:1c:48:f8:67:9c:ef:
74:ab:65:22:15:61:39:0b:fd:a9:20:a1:3f:24:a8:ab:e8:d2:
84:cb:fd:61:05:7d:53:a5:ae:ca:3d:9d:e6:fb:61:ba:53:db:
4a:92:e5:7f:0a:43:10:78:3d:54:ca:86:45:b5:73:16:d5:c4:
b2:fa:5e:2c:41:a9:44:9e:a7:18:c3:32:b3:6a:9d:0f:ca:28:
c5:98:45:d5:25:4f:19:f3:fe:10:ce:45:39:c7:97:9e:bd:ec:
80:77:cb:77:28:97:3f:c9:a8:8d:fd:a4:44:a3:bb:9e:b2:52:
2b:a0:37:05:22:08:33:73:0d:f2:b9:21:92:ef:41:dc:df:a8:
65:3e:fd:01:76:71:e3:43:8d:a6:36:a4:e9:d7:53:b6:a3:fe:
b8:ca:35:48:11:0a:13:c6:8f:e5:ab:a6:79:e4:e0:e5:44:0f:
00:4a:78:af:14:4e:bf:44:89:bb:1c:c7:31:79:08:62:da:9c:
fc:63:26:51:86:01:6e:9d:c8:fc:77:28:76:33:1d:38:bb:57:
0f:68:4d:54:08:2f:78:9d:8b:e3:23:09:12:12:f8:07:59:4b:
f8:17:00:ff:a4:5e:25:77:6e:14:b2:d3:ed:2f:ba:6e:31:84:
00:21:ac:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:44:57 2025 by rpki-client