Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Yv1EK2RWk_lhnH2qmpCgPW5AgJ8.roa
File: Yv1EK2RWk_lhnH2qmpCgPW5AgJ8.roa (raw, json)
Hash identifier: 29YZDFSo0v1IRlEX/CdC1bZtmk5LHJiUIx2S5ZAPbkk=
Subject key identifier: 62:FD:44:2B:64:56:93:F9:61:9C:7D:AA:9A:90:A0:3D:6E:40:80:9F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 329C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Yv1EK2RWk_lhnH2qmpCgPW5AgJ8.roa
Signing time: Mon 26 Aug 2024 05:31:49 +0000
ROA not before: Mon 26 Aug 2024 05:31:49 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.194.12.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:54:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12956 (0x329c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:31:49 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=62FD442B645693F9619C7DAA9A90A03D6E40809F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:27:e3:d2:01:ce:db:ac:87:2a:30:53:fb:ec:
2c:d4:67:be:a0:e9:09:c1:52:7d:a3:57:15:92:09:
0d:7b:7b:f2:f7:6f:36:d2:7c:00:20:86:8e:36:d0:
3d:2e:8e:ae:6f:95:c5:bf:ac:dc:50:d2:65:13:a2:
a3:c5:ed:d9:1d:bb:a8:38:84:b1:9c:c6:3a:d7:3f:
d4:c2:23:68:74:c3:30:96:ea:f7:32:5f:1e:21:9c:
58:13:dc:93:cd:b9:39:13:8b:6c:76:52:88:74:d6:
fa:c8:92:4c:23:87:04:36:c4:9d:57:61:09:dc:03:
23:74:18:a0:fa:39:20:1b:1b:35:e4:a0:dd:05:2a:
ee:83:b3:e3:91:94:e9:59:69:34:d7:82:5c:b5:00:
ce:f3:f7:32:1a:bf:2e:a8:a2:b5:a5:5c:57:8f:7d:
f6:d1:cc:64:d6:b5:6b:c8:35:39:06:a5:c3:e1:93:
60:af:31:11:7e:4e:9b:1a:01:c0:fb:4c:c7:af:c4:
0d:13:a5:8f:01:a6:42:6b:07:46:db:b4:a7:e7:9e:
11:d6:ba:c4:04:b1:7e:e0:c0:77:8f:40:da:c6:50:
b5:62:c2:2d:37:40:bb:f4:dd:bb:ba:21:2f:12:cd:
58:d7:46:b3:22:e3:68:08:74:27:4a:b5:d6:30:d8:
2d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FD:44:2B:64:56:93:F9:61:9C:7D:AA:9A:90:A0:3D:6E:40:80:9F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Yv1EK2RWk_lhnH2qmpCgPW5AgJ8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.12.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:72:e3:14:2f:fa:92:66:f6:45:c2:76:fd:61:96:bc:be:e2:
43:9f:20:c9:13:32:dd:1c:8a:53:08:52:45:31:5e:c6:d5:48:
da:b2:e0:19:7b:34:47:90:11:05:e6:7e:87:94:69:fe:04:48:
df:c1:0a:21:6f:3f:a2:c3:77:db:ad:56:50:ed:01:87:7a:cc:
d9:c4:1d:d5:7c:c0:7b:4f:99:6a:c8:b9:3b:b8:1f:a1:bd:d9:
bc:a3:7f:6a:1e:27:00:ce:cc:68:09:d9:c3:d4:ec:8a:a7:db:
8f:d4:ad:ea:df:78:d1:47:ab:55:7c:5b:5c:3c:5e:b5:90:58:
ea:fd:91:51:50:6b:19:de:26:b8:f7:c4:62:f7:4b:fc:88:5c:
06:6c:92:6f:42:e6:5b:ea:f6:14:df:1f:fa:2e:d5:39:8b:bf:
ef:9e:4e:92:4f:41:d7:e5:57:7d:ac:f6:5f:a6:d6:df:0d:19:
02:e6:f2:5e:b6:b9:cb:c1:12:1c:6f:b9:1a:fc:3b:c9:33:60:
8a:58:cd:bb:ee:7d:57:70:1f:33:3b:db:da:3b:50:a8:04:0b:
8c:6a:39:f8:d3:77:46:1d:0e:29:05:b6:1f:b1:90:f1:28:e2:
18:bb:86:5c:a7:12:fd:cf:e0:b4:89:bf:b9:51:36:db:9d:88:
ec:13:17:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:21:32 2025 by rpki-client