Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xvJiGt7Yd8lNZpFiTL1rFMN967M.roa
File: xvJiGt7Yd8lNZpFiTL1rFMN967M.roa (raw, json)
Hash identifier: RfwNp/d8ksfh+ff0dqszugdt7/0hnCgxEgEl7cbHBYY=
Subject key identifier: C6:F2:62:1A:DE:D8:77:C9:4D:66:91:62:4C:BD:6B:14:C3:7D:EB:B3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 32D2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xvJiGt7Yd8lNZpFiTL1rFMN967M.roa
Signing time: Mon 26 Aug 2024 05:32:03 +0000
ROA not before: Mon 26 Aug 2024 05:32:03 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 180.177.216.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:54:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13010 (0x32d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:32:03 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C6F2621ADED877C94D6691624CBD6B14C37DEBB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2e:c7:55:a1:f9:97:8e:1d:27:fa:60:78:2f:
67:28:9b:5b:35:04:eb:8f:b9:4e:a4:b7:6f:eb:17:
cd:83:dd:3e:6b:bc:88:9c:24:5f:27:5b:a8:e3:29:
11:19:02:a0:7e:16:f8:74:c3:03:46:fd:80:44:c1:
0e:63:c0:38:c4:f8:e0:8d:9b:91:5f:04:00:dc:d9:
67:3c:a3:f1:a7:38:3c:de:9f:31:42:84:d8:11:fb:
85:b5:6f:e5:41:34:9b:a3:a7:4b:7d:9a:75:17:fd:
ef:3d:01:06:ca:dc:c7:75:eb:56:3a:d1:00:b5:f0:
04:f9:33:75:ce:49:1c:ab:91:f9:9d:10:3f:7a:c4:
ab:e8:e2:6b:88:d5:59:e4:b4:8b:5b:d9:08:0c:53:
26:9c:ae:65:46:00:63:51:2e:d3:12:63:cb:5b:4f:
c1:41:37:46:f4:f2:37:ba:cc:92:85:d1:98:47:38:
52:e2:95:70:98:20:ae:b3:55:60:ec:d2:d4:3b:03:
f1:ce:14:04:b3:27:db:4e:2d:70:32:e0:96:de:43:
32:86:74:04:ef:c4:d2:a9:e8:53:90:11:31:12:49:
5f:5c:9e:87:5f:11:e5:71:41:35:6c:f4:9e:b2:01:
a9:b5:ac:bf:55:2b:8c:89:f3:50:02:f1:12:bb:f1:
1b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F2:62:1A:DE:D8:77:C9:4D:66:91:62:4C:BD:6B:14:C3:7D:EB:B3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xvJiGt7Yd8lNZpFiTL1rFMN967M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.216.0/22
Signature Algorithm: sha256WithRSAEncryption
82:0d:45:dd:7a:c5:7d:9d:de:2b:10:62:d9:90:d3:f4:eb:5d:
83:b3:e2:51:5e:e7:29:65:dd:4b:74:8e:5c:36:a4:07:21:65:
79:c3:eb:17:dc:f0:9b:3f:f0:10:08:4d:56:3c:f4:bf:54:00:
56:e3:aa:13:3d:88:fb:d7:bf:83:cf:2f:bd:b7:2f:1e:23:84:
37:d0:7f:f4:7d:06:17:75:81:c5:c8:b9:59:2e:1c:a0:9e:f0:
00:05:28:59:20:90:49:4d:1c:0c:08:5e:c2:d0:e4:37:0d:e1:
67:d1:2f:0a:49:47:aa:d9:c3:8e:c5:09:5d:58:1e:0d:94:b5:
23:d3:be:95:41:a4:1d:2c:ae:3d:2f:cf:30:94:81:94:f8:92:
41:70:1d:75:60:03:24:81:41:19:fc:1c:3b:28:a9:93:db:f2:
b9:8a:50:f5:0f:75:c7:9c:24:09:3e:9f:a3:76:6b:30:a9:ff:
bd:16:87:16:3c:87:41:49:9a:a0:ce:d7:ae:cb:00:38:bd:15:
49:e7:4f:51:b9:27:33:ff:36:af:34:7d:fc:5a:68:5a:3e:6f:
bc:6d:79:0d:f4:93:c0:83:81:31:2d:8d:8c:70:be:f7:02:e5:
d8:be:09:b6:00:59:75:d6:29:41:8d:4c:fa:08:65:93:91:25:
53:3e:83:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 00:27:02 2025 by rpki-client