Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/scUKOl6zb8k5Ag6RVs06LzUmx5c.roa
File: scUKOl6zb8k5Ag6RVs06LzUmx5c.roa (raw, json)
Hash identifier: RURqMLehsJ5HPEO+MSNK8+46J3r5A974P8hpFstN96k=
Subject key identifier: B1:C5:0A:3A:5E:B3:6F:C9:39:02:0E:91:56:CD:3A:2F:35:26:C7:97
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 32C1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/scUKOl6zb8k5Ag6RVs06LzUmx5c.roa
Signing time: Mon 26 Aug 2024 05:31:59 +0000
ROA not before: Mon 26 Aug 2024 05:31:59 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 180.177.64.0/20 maxlen: 20
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:54:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12993 (0x32c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:31:59 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=B1C50A3A5EB36FC939020E9156CD3A2F3526C797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f9:e8:7f:b4:86:2e:0c:ed:f6:99:d5:59:39:
a3:67:f6:f3:bb:76:49:d7:5b:ab:0a:06:d3:8f:78:
6a:42:18:c9:c6:c2:2b:6b:08:21:be:06:7e:ae:4c:
ab:da:b1:1b:b0:2b:86:1d:a6:3d:98:09:91:1d:72:
fa:78:e1:4b:56:de:34:b5:d0:66:0c:38:b2:7c:18:
b8:6f:2a:98:38:0d:4f:31:43:20:fa:b8:da:40:18:
3d:bd:dc:6d:db:56:41:f3:f1:af:04:92:e0:5e:99:
51:d3:f4:0c:67:06:0f:fc:2e:81:19:aa:2c:65:5e:
77:52:65:ae:0d:47:81:c9:a0:bf:e5:36:7e:d7:7b:
e9:ba:cd:72:a3:6f:f3:c8:6a:81:ec:5a:b6:70:00:
97:71:2f:7b:6b:b5:7b:09:bb:aa:25:d8:f4:d8:de:
eb:9d:82:34:93:07:f6:23:6a:a0:28:01:83:d3:03:
16:dc:83:69:f5:e4:78:a8:da:b3:8f:06:c9:bf:d6:
6e:12:4d:df:fd:92:f2:27:8c:91:f4:b9:77:1a:0d:
b1:b6:27:77:8c:f8:22:56:b4:ea:d8:3c:a5:ae:45:
3f:98:bb:69:14:74:4f:2c:9d:5f:ad:e7:13:e5:21:
4d:b8:3d:65:c8:73:e3:80:9d:68:5a:46:b5:bb:a6:
5b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C5:0A:3A:5E:B3:6F:C9:39:02:0E:91:56:CD:3A:2F:35:26:C7:97
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/scUKOl6zb8k5Ag6RVs06LzUmx5c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.64.0/20
Signature Algorithm: sha256WithRSAEncryption
14:8f:ff:82:12:6f:72:59:57:03:7a:26:82:1d:a5:d7:05:f2:
22:23:70:4e:b6:16:8c:08:97:21:bd:90:40:55:b3:35:db:12:
91:56:05:b6:e4:d8:b5:e2:e4:44:5b:6a:57:67:06:9b:a0:b1:
2c:e0:23:be:0c:01:50:da:6e:ea:c6:73:da:92:cd:85:d7:1f:
be:40:ab:e0:23:0f:94:9a:6f:61:75:e8:b5:3d:9d:8f:d0:d8:
4f:c4:31:1c:de:8b:02:9d:a0:b7:26:e8:b7:8b:c5:5a:04:c3:
e5:d3:95:06:f7:b3:17:b7:47:e5:6a:84:32:40:56:7a:b0:b8:
c5:62:b2:50:22:85:40:a0:88:7d:1f:37:84:e9:bc:60:82:82:
72:4f:b9:be:2a:58:3d:f4:4e:4d:58:f3:3a:61:8d:e8:ab:e4:
4e:4f:03:46:35:29:be:33:1c:15:0f:76:0d:29:9e:6a:20:21:
21:d8:a0:c0:1b:16:07:93:4c:58:73:27:56:54:97:7e:e6:84:
39:00:91:d4:c0:a0:2f:f3:8d:8d:92:99:14:e1:ff:98:57:d1:
6c:72:f2:25:fc:2d:90:28:8d:66:7e:de:8c:45:54:07:79:35:
87:14:12:70:db:eb:05:5f:aa:ce:83:f5:a9:a7:24:b8:50:8a:
80:63:d0:ca
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICMsEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw
NTMxNTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEIxQzUwQTNBNUVCMzZG
QzkzOTAyMEU5MTU2Q0QzQTJGMzUyNkM3OTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCi+eh/tIYuDO32mdVZOaNn9vO7dknXW6sKBtOPeGpCGMnGwitr
CCG+Bn6uTKvasRuwK4Ydpj2YCZEdcvp44UtW3jS10GYMOLJ8GLhvKpg4DU8xQyD6
uNpAGD293G3bVkHz8a8EkuBemVHT9AxnBg/8LoEZqixlXndSZa4NR4HJoL/lNn7X
e+m6zXKjb/PIaoHsWrZwAJdxL3trtXsJu6ol2PTY3uudgjSTB/YjaqAoAYPTAxbc
g2n15Hio2rOPBsm/1m4STd/9kvInjJH0uXcaDbG2J3eM+CJWtOrYPKWuRT+Yu2kU
dE8snV+t5xPlIU24PWXIc+OAnWhaRrW7plt9AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUscUKOl6zb8k5Ag6RVs06LzUmx5cwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3NjVUtPbDZ6YjhrNUFnNlJW
czA2THpVbXg1Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAS0
sUAwDQYJKoZIhvcNAQELBQADggEBABSP/4ISb3JZVwN6JoIdpdcF8iIjcE62FowI
lyG9kEBVszXbEpFWBbbk2LXi5ERbaldnBpugsSzgI74MAVDaburGc9qSzYXXH75A
q+AjD5Sab2F16LU9nY/Q2E/EMRzeiwKdoLcm6LeLxVoEw+XTlQb3sxe3R+VqhDJA
VnqwuMVislAihUCgiH0fN4TpvGCCgnJPub4qWD30Tk1Y8zphjeir5E5PA0Y1Kb4z
HBUPdg0pnmogISHYoMAbFgeTTFhzJ1ZUl37mhDkAkdTAoC/zjY2SmRTh/5hX0Wxy
8iX8LZAojWZ+3oxFVAd5NYcUEnDb6wVfqs6D9amnJLhQioBj0Mo=
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:33:37 2025 by rpki-client