Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0gdrUDLs1QOqtbYikkPvTeXjfDI.roa
File: 0gdrUDLs1QOqtbYikkPvTeXjfDI.roa (raw, json)
Hash identifier: HthiMxZKHDwVBp8RfU8MGtYhrOPS+Ut8Q2mvQnIBqGM=
Subject key identifier: D2:07:6B:50:32:EC:D5:03:AA:B5:B6:22:92:43:EF:4D:E5:E3:7C:32
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3178
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0gdrUDLs1QOqtbYikkPvTeXjfDI.roa
Signing time: Mon 26 Aug 2024 05:30:29 +0000
ROA not before: Mon 26 Aug 2024 05:30:29 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 123.193.32.0/19 maxlen: 19
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:52:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12664 (0x3178)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:30:29 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D2076B5032ECD503AAB5B6229243EF4DE5E37C32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:36:a0:13:91:30:52:8c:05:a7:eb:7a:b2:87:
af:1e:14:ed:1c:03:bf:73:b5:b4:c3:a0:db:ec:69:
6c:af:57:f2:83:8e:d0:b3:4f:19:04:35:80:07:9b:
c2:3d:dc:11:b7:b9:88:6a:3b:87:80:e7:fc:48:2a:
47:77:a9:74:02:72:82:26:fa:30:4b:f1:37:e3:ce:
a2:5c:c6:ef:78:9f:a3:1b:9a:39:ea:35:c2:d2:6d:
aa:f4:b8:8b:93:37:0b:7c:df:f0:d5:c6:8d:b1:99:
9f:0b:b3:ea:f6:ac:19:c8:c8:a3:58:1d:78:1b:08:
71:2d:ca:19:4f:fe:b5:bc:9a:c4:b0:66:1a:49:e8:
58:38:1a:d1:99:57:64:50:ca:ba:55:da:48:87:8f:
96:d5:2d:6a:2d:74:e0:ac:51:d3:f1:03:4a:ae:85:
b7:e2:de:00:b5:aa:e5:ae:32:42:47:34:2e:2b:38:
ad:b5:7a:a0:11:04:62:d9:9e:ac:10:62:5c:46:f6:
0c:65:6c:e7:89:49:7c:4a:37:11:18:da:dc:54:1b:
c9:00:3e:bd:6c:b8:6e:1f:0a:c2:28:c2:7c:d3:18:
2b:88:60:24:64:98:90:e4:8a:11:d3:79:ca:ad:a4:
98:5f:2f:56:b3:07:8c:c5:7e:8c:3f:d3:21:6c:af:
ac:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:07:6B:50:32:EC:D5:03:AA:B5:B6:22:92:43:EF:4D:E5:E3:7C:32
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0gdrUDLs1QOqtbYikkPvTeXjfDI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.32.0/19
Signature Algorithm: sha256WithRSAEncryption
73:b9:34:5d:b3:5f:e5:43:17:dc:57:c9:50:47:97:da:b2:1a:
85:73:2e:5e:26:19:0b:e2:a7:b8:ac:89:d8:c3:6d:56:bf:96:
70:75:b5:2c:32:c6:8d:0a:e8:05:a0:41:f8:77:48:69:ed:d8:
19:50:a1:92:2b:de:42:ec:e7:08:78:68:c4:f1:89:47:99:fa:
96:67:7a:5c:c3:6d:df:09:d6:77:f6:e5:82:98:da:de:db:99:
17:ac:88:65:a3:9d:e6:94:bd:95:5e:9a:08:c2:b1:ab:8f:45:
ae:99:b2:f6:04:05:0a:16:bd:eb:6a:91:1d:ee:61:5d:45:12:
e6:56:a3:61:b9:b5:a8:16:1e:3f:35:be:79:48:1c:22:1a:40:
88:a0:6e:57:d1:68:fa:2a:c3:98:f6:71:57:e2:1e:96:d8:5d:
e2:7e:e7:36:09:0e:7d:d1:3c:f5:17:2c:98:b5:0d:24:d9:af:
6d:a7:0c:cd:77:05:07:d8:ee:5b:a2:6c:e7:6c:cd:0a:23:7c:
15:5a:64:71:b8:57:f0:a2:03:65:9e:a5:e7:56:14:2b:0d:a3:
b0:44:f0:70:b4:21:1c:47:52:65:83:b5:34:67:12:44:a2:8e:
19:96:a3:ff:e2:82:b4:3a:17:41:3d:d3:8c:a7:2c:f9:b9:3e:
87:7f:94:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:33:56 2025 by rpki-client