Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Rd2OY4lI4RYvQmpHvJYyuOLfHkw.roa
File: Rd2OY4lI4RYvQmpHvJYyuOLfHkw.roa (raw, json)
Hash identifier: yC2BKQ6patc6pSLvDTmKvjjcPHbE615mDB3W21Urutg=
Subject key identifier: 45:DD:8E:63:89:48:E1:16:2F:42:6A:47:BC:96:32:B8:E2:DF:1E:4C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3259
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Rd2OY4lI4RYvQmpHvJYyuOLfHkw.roa
Signing time: Mon 26 Aug 2024 05:31:34 +0000
ROA not before: Mon 26 Aug 2024 05:31:34 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 180.176.156.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:53:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12889 (0x3259)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:31:34 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=45DD8E638948E1162F426A47BC9632B8E2DF1E4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6b:31:9d:3a:bf:8f:60:69:a2:a0:5e:91:60:
74:58:bf:a9:99:3b:22:20:6d:47:bf:5d:31:16:ce:
3d:80:11:46:d6:79:6e:73:55:15:fc:34:62:9d:d0:
3b:1b:6c:a4:95:00:2b:e1:ce:9a:33:00:f6:90:ea:
c0:f9:5e:88:15:fa:7f:13:63:ec:de:ed:f5:1f:0d:
e5:df:c2:16:5c:98:68:f5:1e:34:44:5f:12:78:6f:
f1:81:d0:aa:1d:2e:62:fa:11:0a:cf:1b:3e:3e:ce:
47:9b:b7:a9:2d:92:5e:54:15:b1:84:dd:e6:de:7e:
82:20:e3:52:64:48:45:04:63:80:22:dd:24:f2:27:
25:5a:c7:a0:c9:c3:b0:f2:4b:89:22:53:d7:06:4b:
fe:40:04:f8:5f:8a:f3:a5:8b:47:d8:4e:da:40:20:
ef:1a:60:23:12:f6:dc:ea:dc:27:0b:1c:e3:b7:43:
6a:be:8c:f3:93:26:8b:99:67:7a:52:a7:0b:eb:54:
04:b7:0b:7c:d5:c7:bb:cd:bb:7f:20:2b:df:3f:d1:
c6:4d:e8:a5:e0:e2:58:ea:16:70:aa:c1:eb:dc:66:
91:ee:3c:76:46:71:b5:17:0c:c9:bd:c1:bf:35:39:
38:49:fe:8b:56:c6:ce:28:10:24:c7:d8:45:e3:3e:
92:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DD:8E:63:89:48:E1:16:2F:42:6A:47:BC:96:32:B8:E2:DF:1E:4C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Rd2OY4lI4RYvQmpHvJYyuOLfHkw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.156.0/22
Signature Algorithm: sha256WithRSAEncryption
85:41:55:a5:1f:70:66:7f:06:98:6a:aa:2f:54:c0:59:f3:0f:
28:33:3f:94:5c:65:2a:f6:31:ca:fb:d2:52:43:f8:28:76:8f:
fa:e9:65:32:7d:74:cd:3a:24:5b:d7:09:f8:b6:79:0f:6a:0e:
d5:34:ee:70:d0:1b:e9:a2:64:0a:36:12:e1:fd:71:02:44:3f:
d2:66:1f:3c:de:ae:a6:b8:5e:df:de:1b:02:4f:49:07:d9:39:
1c:0f:e8:24:d7:05:fd:6f:38:83:a4:32:cd:c3:e7:40:ab:ce:
6b:32:ad:96:43:ec:30:72:c1:8b:3d:b2:eb:22:f8:0a:f8:2b:
ae:f9:ff:d0:33:f7:41:37:b9:b3:bb:3c:97:b3:06:a2:e9:0c:
7b:d4:3b:02:12:71:bc:af:98:3f:12:6e:e5:b7:ba:67:47:a7:
e8:f0:33:06:21:a7:ae:a0:e0:c3:f7:d3:2d:1e:a7:20:ae:59:
1a:ec:2f:c6:0e:9e:06:b4:f6:bf:fd:89:7f:32:54:c9:eb:1c:
7a:69:84:d7:c1:b8:77:21:53:60:53:5c:9c:0e:79:e6:55:97:
b3:92:43:c6:5e:44:9e:d9:3d:96:44:bb:14:0e:f2:50:26:ea:
31:eb:8a:85:2e:d4:50:b4:64:3c:d6:91:b2:fa:2b:8c:d6:a1:
e2:bf:eb:11
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICMlkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw
NTMxMzRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQ1REQ4RTYzODk0OEUx
MTYyRjQyNkE0N0JDOTYzMkI4RTJERjFFNEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVazGdOr+PYGmioF6RYHRYv6mZOyIgbUe/XTEWzj2AEUbWeW5z
VRX8NGKd0DsbbKSVACvhzpozAPaQ6sD5XogV+n8TY+ze7fUfDeXfwhZcmGj1HjRE
XxJ4b/GB0KodLmL6EQrPGz4+zkebt6ktkl5UFbGE3ebefoIg41JkSEUEY4Ai3STy
JyVax6DJw7DyS4kiU9cGS/5ABPhfivOli0fYTtpAIO8aYCMS9tzq3CcLHOO3Q2q+
jPOTJouZZ3pSpwvrVAS3C3zVx7vNu38gK98/0cZN6KXg4ljqFnCqwevcZpHuPHZG
cbUXDMm9wb81OThJ/otWxs4oECTH2EXjPpKxAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQURd2OY4lI4RYvQmpHvJYyuOLfHkwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1JkMk9ZNGxJNFJZdlFtcEh2
Sll5dU9MZkhrdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
sJwwDQYJKoZIhvcNAQELBQADggEBAIVBVaUfcGZ/Bphqqi9UwFnzDygzP5RcZSr2
Mcr70lJD+Ch2j/rpZTJ9dM06JFvXCfi2eQ9qDtU07nDQG+miZAo2EuH9cQJEP9Jm
Hzzerqa4Xt/eGwJPSQfZORwP6CTXBf1vOIOkMs3D50CrzmsyrZZD7DBywYs9susi
+Ar4K675/9Az90E3ubO7PJezBqLpDHvUOwIScbyvmD8SbuW3umdHp+jwMwYhp66g
4MP30y0epyCuWRrsL8YOnga09r/9iX8yVMnrHHpphNfBuHchU2BTXJwOeeZVl7OS
Q8ZeRJ7ZPZZEuxQO8lAm6jHrioUu1FC0ZDzWkbL6K4zWoeK/6xE=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:38:31 2025 by rpki-client