Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QBfNP6yGeVLpZUVXbJC8B2wGg4s.roa
File: QBfNP6yGeVLpZUVXbJC8B2wGg4s.roa (raw, json)
Hash identifier: L2fOVjhC4BGIcnU3LlL8nVztgzDzEGxeZeQed5r8glA=
Subject key identifier: 40:17:CD:3F:AC:86:79:52:E9:65:45:57:6C:90:BC:07:6C:06:83:8B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 31E1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QBfNP6yGeVLpZUVXbJC8B2wGg4s.roa
Signing time: Mon 26 Aug 2024 05:31:02 +0000
ROA not before: Mon 26 Aug 2024 05:31:02 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.172.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:53:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12769 (0x31e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:31:02 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=4017CD3FAC867952E96545576C90BC076C06838B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0e:ce:3c:a2:85:cd:0c:95:fd:96:4a:64:f3:
72:3d:b5:7d:41:3a:a6:ae:b7:98:8a:fc:61:5e:86:
60:94:34:fc:82:c5:58:f2:c0:e1:b8:06:42:70:14:
49:85:18:be:8c:1a:fb:13:08:8f:b4:cd:39:ed:73:
9c:fa:5b:93:58:d4:0b:73:f3:aa:cf:29:47:54:b0:
ab:31:a3:a4:be:0e:61:7a:00:cf:b5:7b:2e:0e:73:
7f:04:9c:5e:98:ef:c1:57:88:59:f0:cb:7f:4c:0e:
e7:d9:a3:a2:ff:92:55:cd:89:c6:a8:ee:e2:77:61:
ef:56:f4:38:9f:30:c7:a5:a5:b5:e9:98:96:8f:d8:
f1:09:65:a6:2c:1c:64:12:3c:a3:34:b8:91:cf:66:
40:33:c0:37:e7:e3:45:51:e7:38:00:5e:35:6a:fd:
9a:75:e9:63:5f:ea:bb:bd:2c:20:da:a0:74:2e:9c:
5b:06:bd:aa:5b:2a:6c:70:bb:d6:e8:c2:d5:6d:d3:
72:c7:95:65:42:10:f6:98:4d:0f:b2:7c:0a:d5:31:
ad:30:de:cd:87:eb:8f:5f:8a:b2:c7:76:ba:ee:14:
b4:e8:21:6a:a9:45:36:06:bc:c9:f4:2f:3a:ac:e2:
6c:be:44:fb:26:e1:4a:fc:48:ea:df:f2:c9:28:f2:
a4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:17:CD:3F:AC:86:79:52:E9:65:45:57:6C:90:BC:07:6C:06:83:8B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QBfNP6yGeVLpZUVXbJC8B2wGg4s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.172.0/22
Signature Algorithm: sha256WithRSAEncryption
99:d1:e5:87:f2:86:28:9f:91:ed:0a:61:31:ed:c7:02:33:be:
30:c7:72:1a:c5:2d:0e:05:fc:f7:c9:e2:49:c2:f9:fe:b4:23:
da:bb:a2:c1:f0:67:e8:21:dc:9e:a2:3c:12:50:c2:75:18:d0:
b3:92:03:82:9b:3d:91:d7:b6:dc:c4:18:98:3b:6e:d6:bd:5d:
41:42:1e:be:f6:8d:be:f7:9a:9f:58:45:8e:16:3d:2d:14:ed:
35:8d:d8:e2:b0:c6:f0:b7:4b:2f:3d:7f:b8:9b:77:5f:a1:93:
4e:d0:1c:5b:21:12:08:42:54:df:7f:e4:ea:0f:c3:20:f6:cc:
08:1c:72:92:9d:6e:1b:b1:f5:08:65:81:5f:8e:98:e2:fd:9b:
60:2b:74:63:22:44:ae:6b:14:65:6d:53:8b:8d:22:bb:1e:a4:
fd:b8:5c:c8:57:82:c1:01:8d:97:5a:96:76:5f:c2:41:da:03:
4d:8e:97:d9:61:7b:58:dd:53:3e:e3:a3:19:91:5b:a5:2f:f7:
3e:9f:e6:9e:3d:a0:02:65:14:86:bb:13:17:8c:8e:c0:e5:5c:
bb:43:2e:2b:b8:57:d0:c0:4b:67:0f:e0:6f:47:5f:c1:b3:c1:
64:7e:0c:42:c7:ec:4c:3f:f0:df:b2:fc:12:aa:87:82:db:e9:
16:e3:7c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:36:57 2025 by rpki-client