Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zmlxhkbi-cBUwdqT7DrHlb9ghsY.roa
File: zmlxhkbi-cBUwdqT7DrHlb9ghsY.roa (raw, json)
Hash identifier: v4OE7SMoGyEucSiHwiGfQ5WqGnqY8GGlG3Xwq9taLq8=
Subject key identifier: CE:69:71:86:46:E2:F9:C0:54:C1:DA:93:EC:3A:C7:95:BF:60:86:C6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2FD1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zmlxhkbi-cBUwdqT7DrHlb9ghsY.roa
Signing time: Mon 26 Aug 2024 05:28:53 +0000
ROA not before: Mon 26 Aug 2024 05:28:53 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 180.176.0.0/20 maxlen: 20
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:53:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12241 (0x2fd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:28:53 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=CE69718646E2F9C054C1DA93EC3AC795BF6086C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:df:e9:a0:7b:58:3f:4d:d0:f1:31:d7:da:f2:
e6:c2:f9:65:6d:05:6f:54:4e:46:ee:98:90:ef:36:
65:6c:57:b4:cf:af:0d:12:25:e0:2c:dc:33:b0:3d:
d5:a0:4d:30:1d:6c:21:3c:2f:91:f3:7a:b5:74:39:
c7:d7:4f:e9:df:a3:c9:25:43:7c:8a:d6:3e:41:38:
87:76:f1:5f:03:ad:1e:e9:4c:0d:cd:fb:1e:0f:84:
91:2a:d9:86:13:26:5e:87:7b:c9:66:51:f2:55:14:
3b:41:fd:7e:0e:3a:2b:58:2c:f7:b4:c0:dc:0a:94:
82:f9:20:86:b6:9f:70:3f:84:70:d2:b1:e8:ad:70:
35:ff:c9:d2:7e:ee:f5:18:d9:d1:92:ee:08:09:56:
56:4c:32:a5:6a:fe:73:d2:e4:ac:c1:82:14:de:2b:
3b:a5:60:cf:68:4a:4c:43:e2:95:b4:c7:d8:a9:24:
bd:9f:3f:2b:55:01:cf:1a:3f:0d:66:b8:18:7c:6c:
d9:a0:c1:92:98:0f:e3:5c:f3:4e:e7:c0:ca:b5:a4:
95:45:32:96:0c:fe:1c:d3:80:dc:96:24:78:9b:dc:
15:d5:41:ee:6d:08:c1:3f:3d:85:ea:0a:ac:e4:93:
b2:41:9c:e4:d8:aa:49:d0:e2:1d:a4:6c:81:0e:0c:
08:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:69:71:86:46:E2:F9:C0:54:C1:DA:93:EC:3A:C7:95:BF:60:86:C6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zmlxhkbi-cBUwdqT7DrHlb9ghsY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.0.0/20
Signature Algorithm: sha256WithRSAEncryption
1b:cf:42:d5:70:6d:a9:5a:61:ed:4e:48:37:5c:e9:88:bf:49:
ad:2c:d0:20:09:5e:8b:47:0a:58:6d:af:38:6c:1f:96:e1:d6:
03:f9:6f:a8:be:64:3f:1a:7b:24:2e:5d:e8:29:3d:c7:9a:2f:
34:f9:21:c1:89:1a:7b:d8:83:21:30:01:2a:3a:2f:67:d5:81:
3a:e2:b6:de:f4:ed:6a:7b:e3:b9:2d:8a:ad:5b:01:d6:1c:93:
3d:a4:9c:28:ed:e1:b1:2f:ab:6a:6d:33:86:07:2e:df:16:83:
77:de:1c:56:ed:f8:30:14:aa:ff:68:ac:bd:9d:fc:17:17:4e:
17:8f:ad:fc:60:78:5d:e0:76:ea:7d:f0:95:69:5a:d9:18:7a:
75:21:7c:ad:40:71:74:ec:7d:62:a5:a1:4e:dd:41:77:3d:dd:
88:9f:69:d6:22:6e:b3:74:bd:47:fd:26:53:98:2e:78:09:b0:
f5:6f:1b:01:e2:4e:13:a5:a6:68:05:a3:f0:17:15:c6:d0:60:
81:04:17:05:0a:c7:72:a0:b3:2f:07:df:be:ce:be:82:a9:35:
42:d0:3d:ff:6b:23:51:82:23:1b:a8:87:bb:51:ab:56:9c:6d:
40:cd:2b:b6:77:02:d9:f1:8a:cd:7f:ca:82:d1:f8:6d:82:84:
5d:51:b0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:22:43 2025 by rpki-client