Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TW2ezmytLYYE7vLmitGofV7a6OU.roa
File: TW2ezmytLYYE7vLmitGofV7a6OU.roa (raw, json)
Hash identifier: cCXx8DKLNbmDnWC4ioMCOwXKFSpGiaGZOKzYczmovu4=
Subject key identifier: 4D:6D:9E:CE:6C:AD:2D:86:04:EE:F2:E6:8A:D1:A8:7D:5E:DA:E8:E5
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 31DF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TW2ezmytLYYE7vLmitGofV7a6OU.roa
Signing time: Mon 26 Aug 2024 05:31:02 +0000
ROA not before: Mon 26 Aug 2024 05:31:02 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.195.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:53:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12767 (0x31df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:31:02 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=4D6D9ECE6CAD2D8604EEF2E68AD1A87D5EDAE8E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:cf:04:a2:64:5a:1c:4e:aa:a3:af:e1:b5:70:
21:b9:2a:a7:61:85:8f:96:50:a5:bd:58:aa:4a:e2:
5e:4d:cb:72:3d:42:d6:a5:9a:5e:d8:fe:0f:3c:00:
18:04:54:1a:4b:3c:0b:ea:0c:97:8c:20:58:ff:a7:
90:4b:34:54:67:84:17:b3:d5:29:a8:d4:d8:3b:cb:
7c:31:0b:c7:dd:1a:2c:0e:40:e5:7d:60:0f:8c:c7:
bc:ac:3c:e9:8b:09:d8:94:68:65:7b:cc:1d:16:19:
e2:96:83:b0:88:57:0d:3a:2d:ca:c4:54:28:b2:98:
dc:0b:0e:4d:8f:15:c6:e7:ab:d1:00:44:31:e2:c7:
6e:71:58:02:1e:08:03:bc:f2:be:52:4e:de:08:17:
3a:7b:41:78:79:42:07:e8:4e:20:0f:80:d3:d3:76:
05:c6:b4:c7:f6:6b:a8:4e:9d:eb:75:6c:ad:19:29:
86:96:47:66:47:f1:b9:fa:88:cc:5e:96:2c:49:b2:
9c:91:e8:b1:93:80:d7:31:12:9b:a0:c8:b2:6f:26:
97:58:1d:da:0e:dc:00:60:b4:74:ab:98:ed:15:61:
58:95:46:32:63:02:28:c5:bc:d8:2d:7d:b6:a5:44:
46:2d:68:72:62:97:dd:96:81:42:63:0d:7f:6c:c8:
0a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:6D:9E:CE:6C:AD:2D:86:04:EE:F2:E6:8A:D1:A8:7D:5E:DA:E8:E5
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TW2ezmytLYYE7vLmitGofV7a6OU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.237.0/24
Signature Algorithm: sha256WithRSAEncryption
75:f0:73:be:ac:96:dd:19:83:f6:4b:6c:eb:77:c9:34:7d:d1:
b3:90:ec:af:d0:67:72:70:dd:b9:6d:f8:8c:e9:78:f6:ff:5a:
88:d5:8a:fb:63:49:aa:eb:57:f6:eb:9e:7c:4b:b5:0e:36:a1:
d0:59:60:c4:c9:60:ac:33:30:e1:73:64:b6:5c:82:2b:82:38:
73:2f:56:44:21:94:27:f1:27:4a:70:1e:d7:eb:b9:be:a1:1e:
d7:e3:45:53:7e:0d:fb:32:8c:12:5a:a6:8a:92:2c:5d:2c:2e:
de:c2:e5:c9:32:dd:ff:12:40:27:09:ab:0d:7b:a5:d3:01:23:
b8:a5:e3:a3:ad:b0:f8:5c:c0:51:46:a1:7f:a0:a6:0c:f7:30:
c8:17:18:fd:34:6a:37:70:4c:19:a9:93:17:80:ba:4a:6c:bf:
8e:5c:08:56:54:06:95:36:aa:94:5c:87:6a:16:8d:32:a4:38:
f1:49:d5:fe:8e:3d:bd:f3:7f:49:ee:6d:fd:92:bf:a8:66:5d:
9a:ac:b9:ee:c4:47:b1:36:3c:ed:ec:9e:c0:44:de:df:b3:24:
5d:a5:11:d3:15:16:48:4a:fa:1b:eb:bb:80:4e:3c:52:9e:31:
5c:f3:87:48:0c:7f:49:ca:3f:f4:29:2a:b1:b9:28:b7:d5:30:
33:03:47:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:32:46 2025 by rpki-client