![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Yduln4n-aiYylzxQIbc7xpU2P2k.roa
File: Yduln4n-aiYylzxQIbc7xpU2P2k.roa (raw, json)
Hash identifier: aQrBsyZVjzoInCR7euNStZqfw9rks15zBWXZfj7Wc7o=
Subject key identifier: 61:DB:A5:9F:89:FE:6A:26:32:97:3C:50:21:B7:3B:C6:95:36:3F:69
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 322C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Yduln4n-aiYylzxQIbc7xpU2P2k.roa
Signing time: Mon 26 Aug 2024 05:31:22 +0000
ROA not before: Mon 26 Aug 2024 05:31:22 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.233.100.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:54:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12844 (0x322c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:31:22 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=61DBA59F89FE6A2632973C5021B73BC695363F69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ff:79:30:d1:d0:7e:15:a8:47:d2:bf:45:14:
e1:55:a5:5a:a2:fb:3c:3a:f2:5d:57:4c:b5:5b:ba:
03:e6:1b:e4:5a:a8:02:ea:3d:18:f6:ab:9a:a5:ec:
9a:8b:e0:8b:ad:43:0f:ef:ca:99:61:9f:9e:0d:fc:
8d:ad:ae:a6:d7:28:3a:41:87:d3:2b:80:28:e2:ab:
19:55:ee:f3:23:d4:b9:31:9b:48:47:ca:77:a7:8e:
83:a2:2e:db:5c:24:43:8a:2a:47:a4:5b:49:d9:35:
e9:84:bc:cb:a5:98:2d:2f:d5:d0:d7:b7:d5:5e:b0:
0e:82:d8:76:d7:9b:8e:2a:4e:28:cd:46:13:23:18:
18:1a:bd:f2:09:ef:90:c2:22:ac:b0:42:df:27:eb:
9b:c6:5e:cb:54:0b:97:02:15:a2:d8:ac:2c:b4:35:
22:80:c4:f6:05:5c:96:70:4c:64:08:e6:6c:39:de:
95:6a:5f:4d:7a:74:76:69:52:ab:91:4b:67:29:d7:
87:19:f8:88:94:03:f7:ee:b4:a4:6d:c6:4d:6b:30:
f1:13:96:4f:4a:75:18:bc:33:63:07:19:fb:c0:f5:
db:39:81:0f:66:c3:d5:00:5b:fd:b0:c5:cb:3e:b0:
5e:f3:1b:4b:15:06:19:89:f6:47:b2:48:34:af:c5:
9b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DB:A5:9F:89:FE:6A:26:32:97:3C:50:21:B7:3B:C6:95:36:3F:69
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Yduln4n-aiYylzxQIbc7xpU2P2k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.100.0/22
Signature Algorithm: sha256WithRSAEncryption
14:d2:87:19:66:b3:bc:13:c8:b1:cb:af:dc:b4:39:42:bd:25:
81:bb:69:fe:bf:a6:fb:9a:ad:c9:0e:95:d8:07:4a:04:55:68:
77:1e:02:4d:1f:c0:b6:a9:50:5d:b8:f6:c8:d6:00:95:6b:5f:
8c:43:5b:69:33:e7:a3:84:23:4b:fd:36:89:10:21:34:65:11:
fd:2d:f8:0a:04:d2:5c:15:aa:8a:67:0f:3c:26:89:42:d2:ec:
dc:ec:a7:e3:aa:09:d1:e7:f3:e2:64:28:40:03:39:17:4e:e8:
6b:db:09:ad:03:34:9a:98:68:42:22:ca:da:b9:e9:2f:6e:16:
ea:4d:ca:c2:aa:64:87:ef:27:ea:ee:97:74:20:fb:39:fd:fd:
fe:44:56:46:a6:8a:a5:30:29:e6:6c:df:ed:b9:7b:e4:5f:b4:
b2:b9:4d:6d:c2:00:41:0a:4b:7f:f9:b2:94:ba:86:93:a4:1a:
ed:91:be:92:fa:7b:6b:c4:b4:21:ae:c9:97:81:99:77:dd:72:
f8:95:13:7e:c8:25:ab:63:28:bc:e1:13:46:f1:a6:2a:1a:d3:
2e:ad:f3:89:b0:d9:f5:e7:ea:ac:18:ce:4c:a6:5d:a4:5b:f8:
83:02:6a:0c:34:e0:59:6c:7e:7e:22:fd:cb:c2:ce:80:5e:89:
93:69:13:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:30:59 2025 by rpki-client