Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rYM0QUDPI7EZZg7h2SPOAVa7Mzs.roa
File: rYM0QUDPI7EZZg7h2SPOAVa7Mzs.roa (raw, json)
Hash identifier: I2Qj/Ou/Nypgt+stWao/9mv0oGtN0yhN8vDKcJ2DG0o=
Subject key identifier: AD:83:34:41:40:CF:23:B1:19:66:0E:E1:D9:23:CE:01:56:BB:33:3B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 30CA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rYM0QUDPI7EZZg7h2SPOAVa7Mzs.roa
Signing time: Mon 26 Aug 2024 05:29:50 +0000
ROA not before: Mon 26 Aug 2024 05:29:50 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 180.176.184.0/21 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:52:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12490 (0x30ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:29:50 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=AD83344140CF23B119660EE1D923CE0156BB333B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fd:58:bb:b5:bf:95:83:8a:dc:81:bd:2c:15:
fd:5d:ec:05:d8:ae:7a:b8:5e:df:63:7e:af:02:cb:
ef:55:bb:63:1e:18:a3:db:04:b7:8b:05:98:1b:e1:
a7:ab:cf:82:e4:a5:81:23:53:05:37:11:e3:25:97:
f1:24:e8:90:0b:a5:4a:ca:48:db:7d:f1:40:34:64:
41:24:0c:f7:cb:d0:21:77:ec:20:74:19:d7:85:53:
5a:8d:b0:f0:a0:2e:5b:5d:e9:a3:5c:c3:c7:e3:2c:
c8:82:b4:f0:bf:04:1d:64:1c:93:de:45:03:98:72:
f7:66:d9:0e:64:66:92:6e:09:09:5b:26:26:b6:ba:
94:20:cb:9f:be:08:8c:cc:b5:73:49:d0:af:33:96:
e7:41:bf:1a:1c:b7:3e:98:65:83:be:31:43:99:70:
bf:8b:a4:83:4c:d8:01:3a:02:82:54:7a:a4:2c:60:
d0:44:a3:4e:32:58:ed:54:90:44:12:8b:41:fe:ef:
d2:05:e0:80:81:b0:85:97:9d:17:64:cb:00:e3:02:
66:44:04:2d:77:ab:bf:92:d0:98:a7:30:20:c4:f1:
90:76:68:3c:0b:04:33:e2:0e:b2:65:b5:55:cd:76:
26:32:49:51:05:c5:e3:c0:40:ae:5c:22:d4:ec:d3:
15:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:83:34:41:40:CF:23:B1:19:66:0E:E1:D9:23:CE:01:56:BB:33:3B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rYM0QUDPI7EZZg7h2SPOAVa7Mzs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.184.0/21
Signature Algorithm: sha256WithRSAEncryption
8d:9f:9f:8c:3a:d2:58:26:67:5e:b8:a2:79:2b:ea:e3:54:3f:
ce:dd:b5:6e:4f:85:35:4c:70:cc:c3:93:86:f5:73:3a:4a:07:
b7:53:44:4f:2e:13:65:72:c1:d7:d1:dd:a0:54:d7:07:e7:c5:
72:9a:07:92:00:1a:e6:cd:fa:c4:87:96:dd:a2:c7:60:5c:46:
f2:0b:c6:b7:28:b7:08:31:3f:43:49:1a:0f:59:72:7a:b4:bf:
1d:f8:03:5f:39:f2:62:30:0e:63:b8:a9:e2:30:a9:f9:34:1a:
d2:53:6c:c0:5c:29:c7:0f:18:25:02:16:a0:8a:32:ee:87:99:
3a:12:3b:f0:d1:f6:1d:3a:de:82:81:17:76:33:06:c7:61:84:
57:e5:06:81:8a:d0:a5:1e:5a:01:81:a4:c6:86:ce:b7:f3:27:
a2:39:52:da:00:08:8e:58:f0:82:1a:36:21:d1:de:a8:69:9c:
ae:09:1a:c4:77:64:b5:91:ea:23:8b:9f:2e:25:37:37:02:3e:
df:00:76:7a:a3:23:36:84:c6:db:94:2c:5b:5f:cb:70:03:8b:
1e:58:07:33:a1:a0:ad:34:97:2a:5f:c6:a5:48:e1:76:4b:17:
ce:c4:03:51:2a:4e:f4:6b:9f:ef:26:90:9e:73:98:8d:de:bf:
a8:cd:14:dc
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICMMowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw
NTI5NTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFEODMzNDQxNDBDRjIz
QjExOTY2MEVFMUQ5MjNDRTAxNTZCQjMzM0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDd/Vi7tb+Vg4rcgb0sFf1d7AXYrnq4Xt9jfq8Cy+9Vu2MeGKPb
BLeLBZgb4aerz4LkpYEjUwU3EeMll/Ek6JALpUrKSNt98UA0ZEEkDPfL0CF37CB0
GdeFU1qNsPCgLltd6aNcw8fjLMiCtPC/BB1kHJPeRQOYcvdm2Q5kZpJuCQlbJia2
upQgy5++CIzMtXNJ0K8zludBvxoctz6YZYO+MUOZcL+LpINM2AE6AoJUeqQsYNBE
o04yWO1UkEQSi0H+79IF4ICBsIWXnRdkywDjAmZEBC13q7+S0JinMCDE8ZB2aDwL
BDPiDrJltVXNdiYySVEFxePAQK5cItTs0xWFAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUrYM0QUDPI7EZZg7h2SPOAVa7MzswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3JZTTBRVURQSTdFWlpnN2gy
U1BPQVZhN016cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
sLgwDQYJKoZIhvcNAQELBQADggEBAI2fn4w60lgmZ164onkr6uNUP87dtW5PhTVM
cMzDk4b1czpKB7dTRE8uE2VywdfR3aBU1wfnxXKaB5IAGubN+sSHlt2ix2BcRvIL
xrcotwgxP0NJGg9Zcnq0vx34A1858mIwDmO4qeIwqfk0GtJTbMBcKccPGCUCFqCK
Mu6HmToSO/DR9h063oKBF3YzBsdhhFflBoGK0KUeWgGBpMaGzrfzJ6I5UtoACI5Y
8IIaNiHR3qhpnK4JGsR3ZLWR6iOLny4lNzcCPt8AdnqjIzaExtuULFtfy3ADix5Y
BzOhoK00lypfxqVI4XZLF87EA1EqTvRrn+8mkJ5zmI3ev6jNFNw=
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:31:47 2025 by rpki-client