Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GaLouKQvMfbm5ORQJ-X91dUPt_o.roa
File: GaLouKQvMfbm5ORQJ-X91dUPt_o.roa (raw, json)
Hash identifier: FMSag5Zkjxfm2K4XP6he06eNiIPq5jWlnv0gmgXVv7s=
Subject key identifier: 19:A2:E8:B8:A4:2F:31:F6:E6:E4:E4:50:27:E5:FD:D5:D5:0F:B7:FA
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 31F0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GaLouKQvMfbm5ORQJ-X91dUPt_o.roa
Signing time: Mon 26 Aug 2024 05:31:06 +0000
ROA not before: Mon 26 Aug 2024 05:31:06 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 123.193.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:54:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12784 (0x31f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:31:06 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=19A2E8B8A42F31F6E6E4E45027E5FDD5D50FB7FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0d:8e:b0:39:fd:ad:52:bb:98:37:6f:8f:88:
df:a9:6e:25:ef:1e:5c:86:fc:10:d5:27:16:fb:bd:
24:3b:fa:78:2a:86:d1:69:de:85:38:3f:51:4d:fc:
04:cc:62:8b:a9:87:aa:f9:df:da:a5:c6:fd:d7:43:
17:06:74:12:de:18:e0:a5:1c:34:a5:a5:ae:dd:29:
d5:d6:85:41:a6:c7:ad:b0:d6:f8:63:ea:ca:e8:29:
7f:10:ae:76:23:a1:0a:ae:29:e5:5d:f4:dc:14:7a:
de:12:8f:b5:3d:63:a4:d3:63:f5:3d:c6:f8:fa:13:
65:7d:a3:14:c5:e0:4d:2b:33:bc:bd:cb:3c:cf:c8:
25:49:08:74:91:3c:06:55:fc:f7:06:97:d9:07:48:
96:02:29:9e:b5:ca:57:ed:5e:34:c6:a5:be:ea:ef:
cf:bc:95:ac:8c:18:00:05:d0:b7:45:de:9d:ab:c0:
30:15:63:43:c0:29:00:b4:a8:c2:50:24:59:21:60:
29:63:6d:fc:63:1b:35:22:a9:c9:7d:fe:f7:b0:0b:
1f:dc:73:c1:a9:1b:17:fc:08:4c:cc:fe:c8:5d:3a:
20:65:51:35:62:b7:d6:39:66:66:b0:29:af:4f:88:
df:ab:c3:47:03:cd:09:33:74:16:14:d0:cb:07:ee:
04:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A2:E8:B8:A4:2F:31:F6:E6:E4:E4:50:27:E5:FD:D5:D5:0F:B7:FA
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GaLouKQvMfbm5ORQJ-X91dUPt_o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.125.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:12:5b:93:e9:8b:8c:41:10:22:9a:a2:8e:e5:43:88:9e:21:
0f:97:a2:d5:91:78:f2:21:37:4d:e8:9d:2c:da:10:b3:2e:45:
59:30:12:f9:5e:14:9c:c7:f7:3a:c6:68:fb:67:a6:88:6a:6f:
97:68:6e:38:b5:7f:f5:e6:c3:f9:2d:fb:9f:68:19:b4:56:6e:
bf:82:ba:ee:70:27:b8:87:fb:ec:01:e0:36:f9:df:74:33:e1:
88:59:27:e6:bf:23:8e:fc:ee:3a:52:5c:6c:fa:f2:53:ca:77:
39:ea:11:e8:2c:88:9b:ab:bc:03:35:bf:af:bd:4e:b8:b3:9a:
00:1d:72:57:d4:96:c0:4f:8b:62:b7:86:d5:7f:2d:c0:f4:43:
cb:ad:86:62:27:21:32:37:39:8a:95:9a:8d:b1:b2:3c:1a:62:
19:72:6b:36:46:a8:c3:a1:3b:e7:3f:e8:a0:b9:4e:cc:a8:1c:
30:f1:3b:ab:4e:d5:db:6a:88:5a:5d:7c:e1:de:64:c1:6d:b5:
94:4c:a3:28:1f:3c:03:09:0c:e3:e0:c2:f7:88:76:8e:79:67:
cb:f1:75:6e:c0:e0:94:4a:1a:29:8d:63:c3:e7:88:2b:1f:2e:
43:82:a9:4a:24:c4:e5:34:fd:f2:d2:9a:85:9c:05:7a:3b:ed:
75:b2:42:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:35:56 2025 by rpki-client