Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w6OszkLs1RxBnnUAl44iLAMbwUA.roa
File: w6OszkLs1RxBnnUAl44iLAMbwUA.roa (raw, json)
Hash identifier: 00Po5XbcJDamqYG7/aYbme9pc1zCEj/SoGNR8rU1E/c=
Subject key identifier: C3:A3:AC:CE:42:EC:D5:1C:41:9E:75:00:97:8E:22:2C:03:1B:C1:40
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2FAA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w6OszkLs1RxBnnUAl44iLAMbwUA.roa
Signing time: Mon 26 Aug 2024 05:28:43 +0000
ROA not before: Mon 26 Aug 2024 05:28:43 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.64.0/21 maxlen: 23
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:52:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12202 (0x2faa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:28:43 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C3A3ACCE42ECD51C419E7500978E222C031BC140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2b:b9:3c:17:84:3e:20:3c:b3:de:90:44:f9:
b3:90:7a:5e:54:a1:11:22:e7:11:57:41:e1:0d:3a:
d6:29:ef:1d:70:0b:bc:ae:ef:b5:f0:10:f1:c6:00:
87:dd:4f:ed:02:c4:20:ea:7d:cc:d5:d7:94:ac:01:
73:df:85:39:87:08:d7:77:1d:cf:fe:91:5f:2b:21:
5e:f9:df:4b:a6:08:0d:cc:5a:42:be:68:0a:cb:47:
f4:71:79:00:4c:21:8b:8a:7b:79:bc:8a:05:20:2b:
19:47:7a:a3:ab:09:b5:6f:39:1e:a0:2e:92:e6:e3:
95:94:c5:80:43:c9:15:24:ee:9a:ee:af:f0:12:43:
71:80:51:ef:1e:ba:cb:ae:62:26:93:06:18:d0:98:
17:40:7d:55:bb:3e:cf:33:d5:f9:39:38:09:91:92:
1d:7d:00:d2:4e:a5:9a:1e:df:7b:e5:38:e4:21:dc:
28:23:55:90:15:a5:bd:fd:2b:53:66:6b:8b:a8:be:
65:f4:76:27:cf:ae:9c:26:47:e0:1c:b3:ef:0e:88:
ca:19:fd:24:94:74:21:7d:22:df:c1:89:e5:1a:ff:
f6:d6:f4:06:4a:2e:dc:df:15:71:ca:6e:9a:e5:e2:
61:17:e5:df:d1:39:bc:d0:eb:68:77:51:95:8b:14:
9e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A3:AC:CE:42:EC:D5:1C:41:9E:75:00:97:8E:22:2C:03:1B:C1:40
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w6OszkLs1RxBnnUAl44iLAMbwUA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.64.0/21
Signature Algorithm: sha256WithRSAEncryption
58:89:fa:14:e1:54:0d:30:ff:87:2e:21:03:58:68:b9:e8:fe:
61:1d:b6:f4:01:8c:e3:e7:95:42:fd:fa:70:69:30:3c:e3:d3:
cc:ae:2e:1e:f9:ad:69:8a:93:18:76:1a:2d:6b:74:17:93:0d:
5c:50:c3:8e:27:25:0d:0e:31:66:e6:5d:18:2d:0b:c3:a7:a0:
42:c7:42:14:8c:73:4c:b9:52:40:af:ad:32:5a:d4:7e:d2:0f:
b9:ca:18:d1:5c:e0:5c:65:97:d4:61:2b:f0:17:aa:b7:5b:85:
90:5e:0f:22:62:c7:8a:85:64:87:2a:40:69:2c:08:9a:8e:4c:
2a:ee:13:6d:2a:0d:5a:ea:51:5b:5e:38:7b:f7:d2:5f:b6:6d:
f7:cf:ae:80:e2:bd:46:f7:44:5b:5b:6c:df:4b:a2:f7:c7:0a:
37:31:bf:d9:ec:9a:f1:7f:88:f4:dc:76:1e:50:99:e3:20:21:
0a:e9:72:11:56:66:f2:78:d0:2d:50:ac:f1:4d:88:d8:53:f3:
72:b3:ca:20:a4:59:40:52:a8:ad:32:a3:fb:78:aa:32:74:c6:
1b:7e:49:b5:c2:3d:70:e0:d9:79:36:48:55:c2:75:4b:c6:6b:
75:5e:6f:bb:ed:de:e5:11:e4:6c:2b:a5:b2:2b:de:fc:2e:76:
16:1e:c4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:37:07 2025 by rpki-client