Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/G7vFvJ5jE74tkOjbZbcLCeVWcGU.roa
File: G7vFvJ5jE74tkOjbZbcLCeVWcGU.roa (raw, json)
Hash identifier: /O4UEj2Vwerc9a8/LecrVLiWYM3t39cXXkoeFQVoznc=
Subject key identifier: 1B:BB:C5:BC:9E:63:13:BE:2D:90:E8:DB:65:B7:0B:09:E5:56:70:65
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 31B1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/G7vFvJ5jE74tkOjbZbcLCeVWcGU.roa
Signing time: Mon 26 Aug 2024 05:30:50 +0000
ROA not before: Mon 26 Aug 2024 05:30:50 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.233.232.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:53:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12721 (0x31b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:30:50 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=1BBBC5BC9E6313BE2D90E8DB65B70B09E5567065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a5:d4:7e:9b:91:bf:01:07:fe:bc:d5:73:f1:
83:2e:74:cc:82:c0:90:b8:12:59:88:bc:09:b7:4a:
19:f3:72:5c:10:f0:7e:36:25:e0:24:7e:6d:19:5b:
be:ff:52:a5:56:0b:45:46:13:38:da:54:00:ad:d5:
b4:f8:4d:25:48:fd:51:48:44:22:37:08:c7:bd:97:
a7:09:2f:85:20:80:46:d6:22:3d:46:44:b2:34:05:
da:35:7d:4d:45:50:50:4e:cb:44:e9:6e:ca:40:40:
53:08:4e:aa:19:b8:73:57:6c:c7:c9:0e:01:83:be:
ca:c8:b6:3d:b6:f4:d3:52:b0:58:b9:d2:3c:be:34:
54:32:5d:a7:49:2b:26:d0:2d:c0:cd:ae:17:86:3c:
fc:34:0e:2e:0a:e1:7a:fd:d4:b1:52:b5:72:a4:b7:
72:86:a7:54:db:4c:50:64:e8:04:2b:07:ee:b0:85:
dc:31:18:02:94:2b:88:ac:ed:cd:52:36:60:fe:a7:
97:b5:5f:04:e1:18:be:48:30:79:8a:f4:0e:a8:6d:
93:96:2f:70:57:bb:05:d0:fa:dd:b3:90:e7:fc:b5:
7d:c0:e6:78:66:da:6c:99:f3:b3:1e:8b:db:8c:76:
ef:e6:9b:0b:e5:21:73:7b:75:02:b1:db:ac:10:f9:
6f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:BB:C5:BC:9E:63:13:BE:2D:90:E8:DB:65:B7:0B:09:E5:56:70:65
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/G7vFvJ5jE74tkOjbZbcLCeVWcGU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.232.0/23
Signature Algorithm: sha256WithRSAEncryption
25:ca:c4:2c:1a:99:fa:15:f8:a5:81:82:61:0e:2f:95:f8:b5:
69:17:35:da:0a:42:b9:89:6e:57:ea:c0:ff:71:44:9f:6d:4c:
b1:c8:9f:ca:3e:44:18:57:c4:5d:62:5c:24:0d:62:ad:4f:b2:
94:c4:27:54:99:84:45:5a:95:8f:21:5a:c7:ae:56:95:0a:8e:
7c:16:b6:66:2f:e7:ba:47:0b:2a:9d:a8:c1:d8:84:95:cd:49:
7c:e8:75:27:85:79:88:91:20:29:bc:41:35:87:22:2d:30:54:
a8:78:20:25:b4:0c:fb:6a:66:e2:e7:86:bc:64:c0:02:6b:5c:
ae:9c:ad:93:d9:cf:14:7d:e3:02:04:6e:62:c4:53:bd:e1:ac:
49:2e:47:1c:a3:b8:22:0e:d0:57:a3:8e:ee:19:e2:7c:0c:f0:
c4:9f:78:9c:2a:80:5e:2b:1a:ea:7f:04:a1:65:78:83:d0:38:
4d:c1:08:b9:1d:6e:d3:58:e5:76:b5:b5:18:f3:b2:f2:50:bf:
1c:f7:12:83:e7:e7:56:a9:bd:b6:e8:a0:d9:03:98:89:53:3f:
b3:03:b3:fc:54:4b:b2:82:d5:3c:c0:9a:ec:03:e0:44:ab:b2:
ef:b4:04:48:ca:17:ff:53:7a:84:f3:a8:56:73:83:01:a4:28:
13:84:f9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:33:39 2025 by rpki-client