Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OWOwb4qlbhza8GzVhfBCa1cFqmQ.roa
File: OWOwb4qlbhza8GzVhfBCa1cFqmQ.roa (raw, json)
Hash identifier: iwgZJbmBRyNVclr+ZUG8aBjAX1rDR1/QbmG5WMP+a8g=
Subject key identifier: 39:63:B0:6F:8A:A5:6E:1C:DA:F0:6C:D5:85:F0:42:6B:57:05:AA:64
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2FB0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OWOwb4qlbhza8GzVhfBCa1cFqmQ.roa
Signing time: Mon 26 Aug 2024 05:28:45 +0000
ROA not before: Mon 26 Aug 2024 05:28:45 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 118.232.64.0/19 maxlen: 19
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:52:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12208 (0x2fb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:28:45 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=3963B06F8AA56E1CDAF06CD585F0426B5705AA64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fe:ae:1a:6b:7f:25:6a:e1:60:05:d7:76:bb:
1a:5e:5f:b9:a7:a8:41:f3:ae:ce:9c:0d:7e:45:fe:
f7:0c:5e:96:37:75:f2:57:36:1d:9a:c3:30:c6:02:
f6:2c:85:ea:19:f5:61:86:f3:25:77:2c:bd:fd:ae:
02:d4:6f:9a:d4:aa:6d:77:ef:e7:1d:35:53:65:c9:
60:27:1b:d5:c3:d3:ea:ae:63:b1:d4:b3:43:e7:08:
82:6c:51:7b:3a:1a:73:01:e3:c3:77:fc:5b:17:c1:
d3:19:dc:56:a8:d8:48:f5:0e:5a:00:06:cb:32:39:
9d:a1:63:55:3b:9b:4c:b5:02:73:df:c4:b9:4e:18:
11:cb:13:58:81:d2:5a:c4:ac:ca:48:c0:28:11:e7:
ec:82:d5:7e:fa:2f:c4:75:6f:2e:a1:52:7c:e7:27:
80:8b:05:6a:0e:7b:8f:a3:ea:b8:3f:35:b2:3d:36:
06:f9:c7:dc:f2:ff:50:46:d6:8d:24:27:0a:9d:9f:
c0:61:7f:6a:ff:32:d6:ad:6a:3c:36:d4:55:04:82:
c9:37:47:77:49:19:41:2e:09:d5:45:d0:20:fc:a7:
fb:75:4b:36:70:6b:3d:08:61:60:37:97:b9:36:55:
14:14:1d:38:c4:39:34:a3:26:49:11:0e:ea:0c:bb:
69:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:63:B0:6F:8A:A5:6E:1C:DA:F0:6C:D5:85:F0:42:6B:57:05:AA:64
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OWOwb4qlbhza8GzVhfBCa1cFqmQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.64.0/19
Signature Algorithm: sha256WithRSAEncryption
59:a6:dc:e9:0b:e2:c2:20:28:9d:1c:80:43:47:69:b6:0e:e7:
55:84:84:70:df:76:b0:76:25:45:87:b3:83:e6:8d:03:18:0d:
91:09:9d:eb:c2:26:5d:97:69:95:68:35:06:b5:5e:d7:ee:23:
ab:de:62:7c:b3:a4:dc:44:b8:4a:55:40:21:fc:dd:bb:b0:30:
4b:37:b1:69:41:d6:3e:24:1b:d4:5c:45:e3:a7:84:81:b4:69:
e8:aa:f3:cf:e1:3c:23:31:42:ac:c6:f2:cc:10:e1:49:5f:d8:
a8:a1:79:0a:e7:4d:6e:a6:96:60:1b:fe:a4:1d:68:d6:f4:c1:
aa:a5:fd:97:b3:96:e0:61:21:e5:a6:00:9d:60:43:68:9e:f2:
a1:72:14:92:93:c2:0e:37:31:1c:0e:ba:4d:fa:11:2e:a3:3f:
92:c6:7a:c4:4c:53:1b:05:3b:98:26:88:5f:0d:3c:54:e2:ed:
b9:83:a8:71:23:96:18:e9:b3:c5:e4:75:df:0b:1d:fa:a0:50:
b6:36:8c:b1:31:f7:ba:06:84:ea:86:39:62:5d:eb:0f:6f:4d:
53:9b:02:2d:34:f9:87:c9:11:bc:6c:91:ee:0e:51:49:a4:b1:
29:1e:6c:91:3f:83:ac:f9:54:de:2a:07:39:89:29:1d:fd:52:
be:ee:12:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:24:52 2025 by rpki-client