Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5rRydo1q8si4c0ncRHkhWzyVfnU.roa
File: 5rRydo1q8si4c0ncRHkhWzyVfnU.roa (raw, json)
Hash identifier: zHnYxBnSHcCbLBbLte6sOdKd6me3rfd2FOD2VwAQWlQ=
Subject key identifier: E6:B4:72:76:8D:6A:F2:C8:B8:73:49:DC:44:79:21:5B:3C:95:7E:75
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 31C2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5rRydo1q8si4c0ncRHkhWzyVfnU.roa
Signing time: Mon 26 Aug 2024 05:30:54 +0000
ROA not before: Mon 26 Aug 2024 05:30:54 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.194.0.0/20 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:53:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12738 (0x31c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:30:54 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E6B472768D6AF2C8B87349DC4479215B3C957E75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c3:6e:6f:c4:43:5a:25:e7:a1:56:44:72:b6:
33:da:d5:55:e0:30:92:c5:2e:87:1d:24:ef:5e:6e:
67:5b:9d:c4:4d:de:ab:ea:c4:51:fd:4c:18:66:bd:
80:16:fa:6e:9c:5a:02:51:a0:6c:68:1d:64:93:5b:
4d:66:a9:6a:e1:a8:e0:68:e7:a9:85:a5:37:ca:f0:
1a:5d:b2:09:59:87:7d:c6:15:fe:f2:82:7a:c2:c3:
b2:55:af:62:b4:7d:92:0c:f5:90:85:f1:13:72:8d:
24:df:d2:be:b4:8c:32:07:29:23:8e:fe:11:48:c8:
5e:76:18:22:fc:ac:80:d8:25:42:4b:72:e2:87:25:
16:30:69:9a:4b:f8:cd:17:1b:9f:3e:19:8c:4c:70:
b3:24:bc:dc:68:af:6e:0a:78:7a:35:31:3e:29:33:
da:fc:88:99:c6:ea:7e:1c:58:4e:36:62:fd:d4:dc:
b6:fc:f7:39:66:89:f4:1f:72:fb:24:6a:da:9b:bc:
91:82:93:9d:7d:6c:e4:af:75:ab:a1:71:c2:60:92:
2f:96:41:03:be:39:79:23:25:24:85:95:64:5b:28:
56:dd:11:f8:87:b3:96:a7:de:f0:81:be:e1:eb:7a:
04:0d:31:3e:b8:a9:bc:af:b9:77:a7:e0:8e:d0:87:
b7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B4:72:76:8D:6A:F2:C8:B8:73:49:DC:44:79:21:5B:3C:95:7E:75
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5rRydo1q8si4c0ncRHkhWzyVfnU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.0.0/20
Signature Algorithm: sha256WithRSAEncryption
87:4b:94:87:7b:66:3d:19:9c:ed:5a:a2:f0:97:9a:f7:69:af:
25:9e:74:4c:18:8d:23:ee:d0:7d:e6:73:5c:1d:76:c9:fb:6e:
ab:87:cb:49:ac:2d:a7:22:c8:4d:b7:0f:62:49:16:68:fb:8a:
aa:fc:c7:ed:67:95:95:d7:64:ed:33:48:61:2a:c2:25:27:34:
9e:94:06:cc:aa:4f:5c:ae:bc:96:c7:7b:05:9b:5d:b2:a0:d7:
d4:9a:30:32:65:d9:aa:51:be:d0:c4:c6:83:46:d4:2e:75:a8:
82:88:59:52:e4:e3:75:eb:12:02:80:c9:c1:41:b4:89:9f:f2:
1a:e1:e4:1e:81:ad:86:b9:59:83:03:01:01:2c:33:d6:21:b5:
4b:92:81:fe:ef:e0:09:0a:3a:d1:bd:5b:1a:5a:00:8f:16:6b:
44:0c:30:85:98:c7:cc:97:b4:1d:6f:87:0e:c4:7e:19:9c:ec:
c2:83:4e:48:d1:2e:31:9c:01:96:bb:3a:54:78:43:60:7f:8a:
d5:90:6a:d9:38:14:7f:fb:be:7f:0b:d1:6d:f2:60:52:72:e2:
97:84:66:25:b6:80:94:cf:a9:b1:47:6d:00:b5:81:3d:f3:b2:
c1:54:fb:6e:d0:63:88:c4:bd:08:85:5f:75:9d:3c:95:07:5e:
55:44:91:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:13:30 2025 by rpki-client