Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4ilxeMJspMHgcPyXA0U--PteWsE.roa
File: 4ilxeMJspMHgcPyXA0U--PteWsE.roa (raw, json)
Hash identifier: ILU/FXkQQVz8zsuZrYL4aC/fy990woG9PvU/nbSDQGA=
Subject key identifier: E2:29:71:78:C2:6C:A4:C1:E0:70:FC:97:03:45:3E:F8:FB:5E:5A:C1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3222
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4ilxeMJspMHgcPyXA0U--PteWsE.roa
Signing time: Mon 26 Aug 2024 05:31:18 +0000
ROA not before: Mon 26 Aug 2024 05:31:18 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.192.0.0/17 maxlen: 17
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:53:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12834 (0x3222)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:31:18 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E2297178C26CA4C1E070FC9703453EF8FB5E5AC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8a:41:50:dc:a7:ed:31:8e:b4:29:98:27:e7:
3c:d9:ac:8a:43:40:74:63:b2:0c:04:ee:fc:3c:94:
2a:0f:38:9c:f6:f5:69:93:22:ff:a2:a1:73:2d:d9:
cb:46:80:f0:f4:db:32:e1:25:3e:1a:9f:43:d6:c3:
71:95:31:01:a6:ef:cb:5b:0c:c1:33:ca:36:81:04:
41:a9:cd:71:da:5d:0d:ca:39:08:98:58:df:af:64:
da:20:90:cf:35:74:c4:f7:1f:fa:a5:86:f8:f8:76:
b7:8a:12:d5:1a:91:9b:07:70:a6:a8:b6:3b:44:7d:
20:8c:94:dd:be:6a:4b:a8:ed:ea:f0:ea:cd:4f:58:
00:f2:18:59:c1:c0:2c:c1:f4:af:25:d2:84:a2:58:
13:14:84:33:b3:97:fa:dd:9f:4b:9e:ff:7a:b2:83:
9d:ba:bc:03:f8:a8:ec:e7:ae:58:72:09:6f:c5:f0:
a1:5c:bc:55:d8:a4:0b:bc:fd:d7:88:c2:0f:18:63:
15:cb:79:11:83:b5:5e:86:f4:5c:80:cb:be:1a:4e:
95:8c:f6:2b:48:6e:bc:12:83:a4:79:49:e0:a1:e3:
b6:7d:65:18:2d:f4:22:96:f8:42:ff:58:69:c6:a9:
ae:25:06:83:ac:9a:4e:cc:7c:19:15:4f:8d:b7:81:
ee:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:29:71:78:C2:6C:A4:C1:E0:70:FC:97:03:45:3E:F8:FB:5E:5A:C1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4ilxeMJspMHgcPyXA0U--PteWsE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.0.0/17
Signature Algorithm: sha256WithRSAEncryption
6f:c2:5e:96:76:e1:73:74:83:9a:d1:25:dd:a0:31:c8:cd:67:
c7:89:6d:47:23:44:47:ae:5c:c6:1d:af:62:0c:fa:57:b9:7a:
c8:1d:f2:cd:b9:28:79:1a:b9:16:49:ee:ab:14:60:d9:f9:eb:
f9:3f:87:cb:ab:a4:5f:42:4a:26:78:cb:fd:8d:23:8e:b5:7f:
60:97:0e:1c:bf:3a:bf:3b:ba:59:cb:e4:50:ad:24:55:c7:40:
cf:e9:2c:58:ed:d1:f8:26:7d:f4:74:6c:5f:6e:24:97:80:c1:
c2:0b:d3:e9:be:2f:b7:be:e8:82:d4:bf:f4:83:2a:b1:28:86:
43:98:ad:3b:07:e3:50:0e:f7:51:75:f4:31:0c:72:03:e2:9e:
54:f7:41:c7:61:1c:c7:5e:a4:27:b9:ba:83:53:84:f7:6b:b3:
f7:96:f3:fb:0d:29:12:e5:73:5f:fd:67:1d:60:bb:88:78:cc:
88:a9:b6:19:d9:f4:c7:4a:45:21:5f:c6:ad:cc:e2:d3:4e:55:
93:c4:c0:2c:81:d1:3f:87:c8:4f:3e:08:49:a2:b5:20:13:53:
81:59:97:8c:54:7f:2b:9a:64:88:60:05:2c:29:3b:6a:73:61:
9b:c7:cb:21:59:17:24:a2:70:35:3e:38:92:88:81:e5:1c:05:
91:fa:56:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:31:27 2025 by rpki-client