Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/T3vWClOW-taQDYrwIrnHjCIyqqg.roa
File: T3vWClOW-taQDYrwIrnHjCIyqqg.roa (raw, json)
Hash identifier: +rk4WHQK1z573bz23IxYNpeBQ4IzaT0QOpT/2QC3+NU=
Subject key identifier: 4F:7B:D6:0A:53:96:FA:D6:90:0D:8A:F0:22:B9:C7:8C:22:32:AA:A8
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 31BA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/T3vWClOW-taQDYrwIrnHjCIyqqg.roa
Signing time: Mon 26 Aug 2024 05:30:53 +0000
ROA not before: Mon 26 Aug 2024 05:30:53 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.232.100.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:54:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12730 (0x31ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:30:53 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=4F7BD60A5396FAD6900D8AF022B9C78C2232AAA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:86:5a:93:5b:04:63:cd:bb:9c:b0:6a:a6:f3:
12:c6:c7:69:00:3a:21:c5:cb:cf:88:ab:72:0f:64:
54:47:e7:a2:32:74:17:81:6e:bc:3f:5a:fb:70:b1:
41:8c:df:98:77:ee:12:b8:13:50:ad:8d:c9:0c:95:
f4:62:87:d1:60:7b:0c:6f:e2:93:58:bd:51:0f:d3:
5d:49:4d:2e:36:d3:e7:8a:c6:3f:56:a4:6e:da:f6:
bc:ee:a9:97:eb:08:d5:c6:cd:9e:7a:2e:89:78:38:
08:59:f2:f9:b8:63:22:11:0b:18:14:f5:22:14:71:
f2:4a:ad:1e:11:cb:4a:0a:14:c0:3b:79:e0:a9:33:
e8:02:33:20:44:b2:f6:d1:e5:d9:da:63:a2:9d:9d:
c6:f4:ab:04:09:7f:b7:04:35:b2:e5:60:ef:82:60:
92:1d:c3:75:00:ad:64:3a:06:b0:99:25:2b:82:a2:
9d:5b:49:8a:c8:ed:f3:19:6f:3f:20:63:f8:03:17:
4e:50:68:44:a9:17:0d:ec:de:01:0b:e4:70:8c:b4:
c4:6d:76:bb:0a:95:71:60:cc:c2:b1:24:33:8c:a1:
06:1d:f1:02:25:c4:66:76:c6:d7:1b:c4:72:f2:75:
aa:15:2f:77:ee:6f:03:78:20:1a:07:ba:ae:6b:a6:
8c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7B:D6:0A:53:96:FA:D6:90:0D:8A:F0:22:B9:C7:8C:22:32:AA:A8
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/T3vWClOW-taQDYrwIrnHjCIyqqg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.100.0/22
Signature Algorithm: sha256WithRSAEncryption
66:bb:c3:64:82:54:5c:dd:4e:a7:3d:9b:ea:9c:2c:5c:d1:aa:
42:2b:a6:80:d5:1d:5b:62:12:aa:cf:9a:6c:72:5c:95:9f:1c:
4a:7f:ad:4f:6a:38:b4:91:2d:b5:76:9d:c6:76:1e:b7:ca:6f:
1f:46:62:68:8e:81:21:2d:d3:ce:17:5a:f1:a4:83:be:e7:fa:
6b:3b:2e:19:51:26:25:e6:9c:76:35:3b:a9:52:f2:6c:ab:f5:
09:a3:14:a8:be:fc:09:25:08:f2:2e:8e:da:40:65:71:d4:9b:
85:c3:a3:ec:ab:05:a4:52:bd:fe:4d:9b:c7:c0:c9:00:61:6a:
6e:1e:32:88:46:15:f7:01:a1:6c:6b:5e:08:45:f4:6e:03:db:
47:b5:0b:13:eb:2b:66:e1:10:57:46:7b:e5:2d:4c:0a:ab:a4:
76:25:8a:e5:c4:e0:32:1e:5a:ac:72:2b:14:df:bd:24:c3:9f:
68:5f:d7:41:bb:c2:c1:34:ed:e0:04:b2:4e:38:f3:90:1c:50:
9b:dc:f1:f3:a2:36:93:21:fd:8b:84:4e:45:ae:4f:f1:dc:3d:
51:ac:96:b7:c9:0b:16:1e:d0:07:96:03:49:42:e6:bd:82:aa:
d0:1c:34:f0:10:a7:9b:8a:b2:05:82:17:ed:73:89:30:0b:3c:
c4:60:e0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:23:08 2025 by rpki-client