Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IkxAvOizoVo4a2iOR-ehHWw3IW8.roa
File: IkxAvOizoVo4a2iOR-ehHWw3IW8.roa (raw, json)
Hash identifier: r/E8ZpQFkUrSnygFXmQH5tkNg+Ms9VixnJrjsx0bcnA=
Subject key identifier: 22:4C:40:BC:E8:B3:A1:5A:38:6B:68:8E:47:E7:A1:1D:6C:37:21:6F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 32A2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IkxAvOizoVo4a2iOR-ehHWw3IW8.roa
Signing time: Mon 26 Aug 2024 05:31:51 +0000
ROA not before: Mon 26 Aug 2024 05:31:51 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 180.177.48.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12962 (0x32a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:31:51 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=224C40BCE8B3A15A386B688E47E7A11D6C37216F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:86:e1:27:ef:7d:e4:76:1a:bc:8f:bd:a8:56:
d9:78:e4:c3:02:27:70:6f:13:95:57:f1:f1:27:19:
58:ef:95:9c:53:88:34:69:22:3f:d6:54:82:3a:20:
95:2a:aa:b4:47:47:78:4a:bc:61:d7:35:a5:c7:6c:
6e:5f:a7:84:6b:fc:c0:a7:ef:8a:b0:4b:60:26:37:
8a:be:9a:a5:60:11:8f:ed:97:b8:03:0e:c7:ea:2b:
db:b4:fb:0a:8f:28:40:c8:13:ac:22:e9:d4:48:57:
48:69:ed:03:01:39:55:9f:77:7f:a7:2c:4a:c2:b0:
08:9e:a8:94:b7:4a:4c:b4:f4:02:da:80:22:ed:b7:
fa:9c:fd:81:55:38:71:a8:de:bb:f0:8d:96:44:93:
3d:9e:ad:40:9e:f0:e2:44:be:d2:d1:b8:5c:5d:3d:
03:f9:50:44:bb:2a:a4:58:79:5c:86:56:95:c6:84:
3f:b2:3a:d5:b3:9b:59:ea:97:83:99:1a:aa:e3:2f:
3d:75:5d:b7:2e:05:ee:44:56:df:91:3d:46:aa:f1:
1c:41:9d:3f:28:1a:49:77:98:a8:43:5f:40:45:38:
89:a7:e6:99:6b:20:ea:1f:bf:3e:5f:40:46:fd:e2:
51:f8:83:e5:8b:48:1f:0c:f2:5b:e4:52:a4:b5:b7:
2f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4C:40:BC:E8:B3:A1:5A:38:6B:68:8E:47:E7:A1:1D:6C:37:21:6F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IkxAvOizoVo4a2iOR-ehHWw3IW8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.48.0/21
Signature Algorithm: sha256WithRSAEncryption
54:2b:dd:b4:d4:a0:d6:0b:0a:07:fc:a1:d8:4d:ab:d3:46:0f:
84:5f:a0:67:44:6b:7a:f0:4c:8f:a1:50:4e:52:21:13:65:4c:
e9:25:08:13:b9:e9:47:93:c2:a9:59:ba:69:87:f7:f2:59:d2:
fa:35:c1:80:20:e6:64:7a:cb:c5:cd:c7:d3:4e:e8:ef:2d:9c:
20:41:35:d5:1c:48:6d:75:bc:21:8f:7e:ea:29:5a:41:77:3f:
17:fb:4d:62:80:e7:1a:f7:a7:7e:19:c4:d2:96:e2:d6:21:4b:
ed:c9:fe:6a:5d:71:90:47:61:ec:3c:b0:c6:0c:a5:b8:74:3f:
2e:a3:e7:b9:c2:f0:08:ca:fe:50:92:31:46:2a:d6:c2:dc:6d:
87:ba:9c:81:d7:b1:73:16:80:30:98:7d:31:1e:69:c3:47:28:
fa:29:da:ee:e2:1c:ec:db:43:c1:86:c7:c0:87:30:ad:a3:9a:
5c:cd:98:5b:ad:56:82:db:9f:5c:87:37:41:75:99:0d:c3:81:
21:e9:b1:38:fe:60:e7:7e:3e:53:1c:74:35:8a:32:20:a0:cd:
c1:14:d5:34:ec:6c:cd:51:6d:2a:9d:8b:50:19:05:f3:ca:82:
e8:1f:2b:77:b8:c4:c8:81:bb:ab:17:95:cd:60:86:5c:d1:11:
e1:1a:e7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:03:34 2025 by rpki-client