Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0FeZ4t2F6aLjBnzOnMelw9S0XmI.roa
File: 0FeZ4t2F6aLjBnzOnMelw9S0XmI.roa (raw, json)
Hash identifier: cEMje+OwU/PCxRQH1Sca3dYU+9yNPTHIhbvDMxA5hOs=
Subject key identifier: D0:57:99:E2:DD:85:E9:A2:E3:06:7C:CE:9C:C7:A5:C3:D4:B4:5E:62
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 32D9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0FeZ4t2F6aLjBnzOnMelw9S0XmI.roa
Signing time: Mon 26 Aug 2024 05:32:05 +0000
ROA not before: Mon 26 Aug 2024 05:32:05 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 45.64.28.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:54:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13017 (0x32d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:32:05 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D05799E2DD85E9A2E3067CCE9CC7A5C3D4B45E62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:09:79:9b:c7:db:91:fe:eb:50:91:5f:70:b8:
38:cf:5d:68:96:1f:a8:a2:1a:ed:cf:c8:af:30:e9:
43:27:af:eb:8f:08:c9:14:6c:3a:23:ae:45:86:70:
83:c6:91:44:d2:88:a4:f1:48:8a:8f:44:c8:43:18:
7d:89:67:3b:fe:a1:a9:27:cd:84:11:76:3c:e4:c5:
60:e1:6c:c0:89:07:f1:9e:95:12:85:c3:fb:28:a5:
cd:c2:6d:89:ba:f9:2a:38:25:78:fc:af:07:1e:96:
85:72:ea:98:5c:8d:d3:04:2a:5f:2a:48:55:da:d2:
f4:8b:b3:b4:5b:57:2e:8f:6b:34:05:af:18:bf:c4:
4c:40:0c:1b:37:61:d2:af:51:08:e6:ae:04:fa:20:
44:68:fa:f5:88:64:cf:b1:b5:32:af:67:e8:73:e7:
08:83:c1:21:7e:a2:35:67:dc:78:61:28:dc:3d:99:
3a:ef:8c:b8:f2:db:eb:8d:f0:ad:aa:b8:e8:0c:b2:
c5:83:21:41:36:7f:27:c5:15:9e:7a:57:4d:19:ba:
7d:e3:9a:d5:32:33:c8:a6:76:92:4c:33:19:54:93:
6d:e9:d3:e2:26:14:27:89:fb:b7:33:ab:29:61:65:
f5:fa:c4:60:9f:a0:16:b6:8d:66:d2:68:ce:c4:b4:
79:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:57:99:E2:DD:85:E9:A2:E3:06:7C:CE:9C:C7:A5:C3:D4:B4:5E:62
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0FeZ4t2F6aLjBnzOnMelw9S0XmI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.64.28.0/22
Signature Algorithm: sha256WithRSAEncryption
15:c3:bf:22:55:c0:06:f2:45:36:a6:e1:dc:19:d1:21:f2:20:
de:25:bb:ec:5e:c2:8d:cb:ae:94:5b:0b:c8:9a:c2:81:5c:54:
f2:d1:12:fa:95:7a:06:41:dc:50:13:ab:90:e9:df:ef:f7:37:
10:e3:cc:b5:e5:00:89:a0:1b:c0:20:fa:b4:78:e4:21:b8:04:
e0:b4:eb:f9:a0:fe:8f:07:71:9b:ad:99:71:07:8b:1e:3f:91:
58:24:5c:3f:88:f6:b6:d4:5f:8e:cb:b4:af:51:8e:55:6b:51:
26:11:72:75:c6:10:21:39:87:d4:e3:6a:49:dc:8f:bd:cd:0f:
d4:4a:d5:92:1e:47:8c:48:f7:47:37:b8:34:0a:f4:4b:fb:d9:
d1:08:33:a2:fb:59:86:f3:14:ae:d9:9f:92:d0:4d:f2:3e:80:
24:26:b8:3f:29:dc:b3:36:fd:22:64:80:db:78:de:85:a4:cb:
3a:84:58:e3:04:ef:4a:fc:3d:69:ab:e4:35:e0:e9:c5:16:78:
db:82:3b:65:4f:80:d3:5b:af:db:b4:4a:44:d7:33:67:13:09:
f3:29:9c:28:f8:09:ca:82:da:80:eb:1f:23:8d:a1:d2:67:64:
51:b1:79:c7:66:20:bd:75:6e:36:df:03:c5:be:18:85:73:0a:
d3:22:45:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:27:43 2025 by rpki-client