Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C_5NbTX3Ph3XA5hw73oJK7maz9s.roa
File: C_5NbTX3Ph3XA5hw73oJK7maz9s.roa (raw, json)
Hash identifier: PPu4ClGMASdyQWtDLtCcYi0Sp0dGCMqxeFbZFoblBqk=
Subject key identifier: 0B:FE:4D:6D:35:F7:3E:1D:D7:03:98:70:EF:7A:09:2B:B9:9A:CF:DB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 31A4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C_5NbTX3Ph3XA5hw73oJK7maz9s.roa
Signing time: Mon 26 Aug 2024 05:30:47 +0000
ROA not before: Mon 26 Aug 2024 05:30:47 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.195.20.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:53:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12708 (0x31a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:30:47 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=0BFE4D6D35F73E1DD7039870EF7A092BB99ACFDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3e:39:0f:64:90:25:a8:e3:7f:89:de:e8:40:
76:8c:0f:3d:57:1a:9e:54:f1:aa:d6:b4:a2:2a:d7:
27:67:19:db:ff:da:8f:15:c1:00:dc:40:ea:a8:81:
85:bc:bc:dd:9f:cb:7f:fc:87:7b:1a:82:76:fc:f3:
71:1a:5e:55:0d:9f:51:51:cf:41:84:90:1f:56:40:
57:12:67:eb:3b:35:7d:6f:11:13:e3:d1:fe:91:19:
3c:1a:a0:6c:10:c8:7a:79:c5:fd:0d:c4:fa:2b:2c:
d7:6a:eb:ab:d2:4f:69:28:bf:36:e3:fd:d6:2d:57:
61:e8:83:aa:cf:63:bc:23:d2:0d:0b:7f:2c:be:35:
c9:c4:10:9c:83:66:fd:5e:74:5d:23:e2:ce:df:7e:
63:05:f6:48:be:2b:b0:48:36:a7:98:b0:57:ed:d4:
a5:36:05:1d:c6:00:43:99:3b:24:78:ee:25:29:bf:
de:46:59:1b:ec:b1:52:01:77:6b:7c:76:50:19:2f:
0b:7a:91:15:82:02:f6:fc:48:db:8f:5c:48:02:f2:
75:e6:6f:70:95:71:41:d1:db:d5:d9:92:bf:f5:d7:
70:1d:a1:7a:e8:89:d5:40:f1:c5:c2:ea:e6:70:f3:
ae:96:b7:86:e2:3d:60:a2:b1:50:f3:98:2b:61:d2:
f4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:FE:4D:6D:35:F7:3E:1D:D7:03:98:70:EF:7A:09:2B:B9:9A:CF:DB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C_5NbTX3Ph3XA5hw73oJK7maz9s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.20.0/22
Signature Algorithm: sha256WithRSAEncryption
90:62:a5:6a:54:86:f0:6c:bd:dd:cc:c4:e0:c0:89:72:70:3e:
45:54:75:73:92:6b:ff:6a:bc:76:57:c9:73:39:8a:f0:24:bd:
9e:ae:e3:a6:d3:6f:09:80:fb:09:14:f8:3c:e8:a1:91:f5:18:
98:5b:a7:ec:81:e5:55:ce:42:2a:85:4d:e3:b7:f3:4b:e9:3d:
19:aa:27:48:38:d8:31:8a:84:a2:03:ac:7d:38:85:f7:04:38:
cc:d2:84:4c:d2:48:5f:f7:62:3f:79:79:4a:a5:bb:02:91:a7:
35:80:51:34:61:18:93:d0:3d:dc:e1:d5:0d:3c:b6:37:ab:87:
90:ed:51:4c:7c:c6:9f:9a:ae:bd:fd:e3:f2:f2:95:0b:1b:8e:
39:6b:a6:be:9b:cd:c8:b3:ee:05:b2:c7:9e:a3:de:f2:e3:ce:
0c:7e:68:a9:ca:df:2a:f1:12:6c:45:56:8c:bc:1a:80:45:9f:
2c:ed:24:4e:2e:65:95:24:a6:e4:2d:e8:d0:70:56:97:86:98:
af:9c:55:64:b7:1a:ae:d1:5b:5f:51:02:2a:8e:a7:ab:bf:0f:
46:1b:b9:b6:20:b5:52:a3:8c:a2:28:3a:cc:10:16:04:d8:d8:
f0:4b:29:e9:f6:09:7c:be:c7:04:2a:df:99:de:08:95:96:81:
5b:13:fd:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:21:36 2025 by rpki-client