Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Eeh8yeqALWlZKEh8pkUfj8b8Nvg.roa
File: Eeh8yeqALWlZKEh8pkUfj8b8Nvg.roa (raw, json)
Hash identifier: oDXQLReku+f96xZbSvOK5BYEuTINHuXInjiVoiHGzBw=
Subject key identifier: 11:E8:7C:C9:EA:80:2D:69:59:28:48:7C:A6:45:1F:8F:C6:FC:36:F8
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3069
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Eeh8yeqALWlZKEh8pkUfj8b8Nvg.roa
Signing time: Mon 26 Aug 2024 05:29:25 +0000
ROA not before: Mon 26 Aug 2024 05:29:25 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.194.168.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:51:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12393 (0x3069)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:29:25 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=11E87CC9EA802D695928487CA6451F8FC6FC36F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cf:9f:81:15:3b:6d:e1:0f:2c:6c:ee:a7:39:
c0:6b:82:f1:79:f1:04:7e:97:f4:36:59:c6:68:e7:
38:12:15:92:48:c1:67:6a:4e:05:e5:5d:4c:2d:e8:
01:76:a9:03:ab:8d:08:25:57:cb:d7:73:78:60:e6:
ff:a7:6f:17:27:7e:26:42:05:27:a2:31:36:23:21:
0e:5c:8d:a5:63:5c:1a:ad:2e:f3:25:12:01:cc:8d:
b8:f0:51:a1:06:89:85:8e:a8:7b:21:e6:58:f3:8e:
02:c5:5c:9b:79:cc:c6:61:11:27:3b:2f:0f:6e:71:
be:84:db:5d:de:06:6d:54:b6:d7:5b:30:c9:64:44:
81:4c:99:31:75:42:c2:e2:07:8a:4e:ac:11:93:7b:
b8:1b:3d:1e:62:20:1c:03:56:1b:aa:48:1f:9d:29:
be:cb:bb:43:0f:41:f9:c3:0f:ae:1a:cf:1e:49:6e:
0b:00:8a:f5:6c:c2:4d:1e:f5:24:53:85:ec:81:50:
96:d9:f7:f2:90:f5:6f:68:c4:3a:ff:e6:df:58:a4:
e2:67:c2:19:3e:ef:3a:9d:11:16:94:b5:ae:7d:da:
9c:84:98:eb:9b:d0:bc:33:3c:94:1c:bb:34:38:ff:
94:9e:27:fc:52:54:36:5e:0d:b1:11:9f:d1:72:65:
6d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E8:7C:C9:EA:80:2D:69:59:28:48:7C:A6:45:1F:8F:C6:FC:36:F8
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Eeh8yeqALWlZKEh8pkUfj8b8Nvg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.168.0/21
Signature Algorithm: sha256WithRSAEncryption
4d:df:d0:88:cf:9a:8d:ea:9f:a1:c8:2b:25:b8:9a:b9:53:78:
b4:ec:65:c8:7b:98:c2:fe:63:41:3b:0f:f4:a0:3e:85:55:52:
1f:c4:81:82:d1:b5:71:18:61:2a:61:96:71:a2:0b:17:5f:fe:
a1:24:67:34:36:bd:95:42:22:91:9d:44:02:44:0e:05:0c:2d:
88:77:66:34:ab:86:a9:50:fa:c7:cb:08:86:1e:e0:aa:b3:9a:
72:50:4c:06:c9:80:e2:35:7e:b9:6f:46:98:48:72:3b:1b:9e:
ad:c8:c3:27:e7:72:28:83:b6:0c:08:8c:33:90:04:31:41:c0:
d1:89:f8:e4:d6:78:e1:e3:21:53:2c:d5:e5:1a:44:c0:52:88:
02:a5:e7:f8:71:03:0d:68:8b:a4:f7:9e:ad:1f:5a:a3:eb:9b:
2a:c4:9b:8d:75:75:8b:bf:c1:6a:78:d2:67:ff:20:a5:9e:79:
bc:36:36:6f:48:39:32:13:44:34:3e:c7:a1:b9:c8:ac:1b:6f:
c3:c8:0a:2f:99:ff:a2:52:23:71:6d:51:68:61:41:53:cb:c1:
47:1f:6a:57:ff:9a:8e:53:af:98:27:3c:a7:bb:9f:5c:e8:af:
0b:cc:2f:50:36:4b:99:75:8c:e2:03:e9:87:15:4c:a7:91:9d:
eb:e7:c0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:17:35 2025 by rpki-client