Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cBhJ4CCD_1m5zPn9NsxXgITdLOE.roa
File: cBhJ4CCD_1m5zPn9NsxXgITdLOE.roa (raw, json)
Hash identifier: H/ufT7XPnwHiWH03zuZfNdM65gZ2Qtp80LqQq/CDvDo=
Subject key identifier: 70:18:49:E0:20:83:FF:59:B9:CC:F9:FD:36:CC:57:80:84:DD:2C:E1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3058
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cBhJ4CCD_1m5zPn9NsxXgITdLOE.roa
Signing time: Mon 26 Aug 2024 05:29:22 +0000
ROA not before: Mon 26 Aug 2024 05:29:22 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.193.88.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:52:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12376 (0x3058)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:29:22 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=701849E02083FF59B9CCF9FD36CC578084DD2CE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:88:d8:22:b2:57:7f:9d:2e:09:1d:fa:0a:d8:
08:3c:ae:68:f4:9c:89:d8:b0:4f:dc:19:f7:e3:29:
09:54:3c:19:b1:b1:ac:19:9f:f6:25:91:c3:8c:a9:
b6:b0:1d:5f:1a:fb:db:4e:ac:98:4b:7f:6f:2b:2e:
e6:4b:aa:6a:81:3e:5f:8e:6e:01:db:95:30:f7:d0:
5e:30:6e:42:7a:ac:62:50:30:8d:09:34:52:d2:54:
63:b6:65:03:62:64:1d:f1:19:5b:aa:c4:d5:8b:eb:
eb:26:dd:4e:0e:5b:bd:90:3b:a4:46:33:f2:7e:3f:
90:e9:74:c0:8c:0d:bf:a9:0c:73:7b:0f:95:fe:ac:
57:5f:b5:17:93:b2:83:5b:72:90:db:b0:4e:41:33:
8f:69:db:67:41:dd:b5:9b:a8:0d:e1:7c:f6:70:95:
46:f2:84:d8:b0:d5:0e:17:e3:0a:15:60:71:82:f0:
f3:56:e6:89:66:80:93:73:7a:54:f2:6b:e3:b2:8f:
32:2b:8c:94:6c:b7:83:cc:20:45:00:01:71:ec:32:
b8:b4:83:43:55:a0:30:e9:0c:fb:7c:b3:a3:ed:3b:
09:32:fb:a1:15:04:62:f7:f2:f8:65:4a:e4:2e:c8:
72:09:30:74:09:a4:22:7a:35:2a:ba:b6:f5:36:7d:
08:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:18:49:E0:20:83:FF:59:B9:CC:F9:FD:36:CC:57:80:84:DD:2C:E1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cBhJ4CCD_1m5zPn9NsxXgITdLOE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.88.0/22
Signature Algorithm: sha256WithRSAEncryption
37:ba:96:18:60:53:ca:87:c3:5e:ca:8f:3b:c1:c2:30:85:81:
58:e6:8d:4a:58:a9:c8:71:92:2b:af:1d:f5:bf:b2:11:28:f2:
14:06:b3:b3:91:b0:0b:5f:fe:fc:ca:90:56:c7:d3:2d:79:78:
a0:27:7a:83:1d:75:86:01:86:b1:44:5d:37:ac:46:0f:1b:1d:
1e:60:5c:53:cf:8b:31:94:19:3b:59:c0:2d:26:bc:54:0f:cd:
d7:de:17:9c:cb:86:0a:1a:8e:fe:17:6c:d3:34:63:59:90:f6:
22:26:c6:59:af:2b:17:bd:28:e2:5a:0f:dd:d2:05:ca:82:02:
50:99:7e:a8:27:e5:2d:fc:e7:97:f5:4f:8e:84:a9:c2:3e:81:
9a:fe:0c:c1:3d:96:4d:93:a5:2b:a7:6f:0c:9a:4b:a7:9c:a9:
6a:59:6b:79:2c:fb:96:49:5e:ec:04:86:57:8a:c9:23:f9:15:
7d:a9:f1:f6:58:89:98:c1:ed:c8:5c:95:c6:ae:05:ad:f0:7f:
5c:df:8d:4a:63:aa:a8:3b:27:e9:4a:29:25:d6:df:7c:24:00:
fb:05:d1:d2:a4:3d:dd:fe:ff:9a:36:af:00:2d:7c:fa:b7:a2:
2e:2b:4f:3c:17:75:a5:fb:c3:4b:76:f5:20:f9:0b:33:7a:88:
ad:e0:63:f4
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICMFgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw
NTI5MjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDcwMTg0OUUwMjA4M0ZG
NTlCOUNDRjlGRDM2Q0M1NzgwODRERDJDRTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAiNgisld/nS4JHfoK2Ag8rmj0nInYsE/cGffjKQlUPBmxsawZ
n/YlkcOMqbawHV8a+9tOrJhLf28rLuZLqmqBPl+ObgHblTD30F4wbkJ6rGJQMI0J
NFLSVGO2ZQNiZB3xGVuqxNWL6+sm3U4OW72QO6RGM/J+P5DpdMCMDb+pDHN7D5X+
rFdftReTsoNbcpDbsE5BM49p22dB3bWbqA3hfPZwlUbyhNiw1Q4X4woVYHGC8PNW
5olmgJNzelTya+OyjzIrjJRst4PMIEUAAXHsMri0g0NVoDDpDPt8s6PtOwky+6EV
BGL38vhlSuQuyHIJMHQJpCJ6NSq6tvU2fQijAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUcBhJ4CCD/1m5zPn9NsxXgITdLOEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2NCaEo0Q0NEXzFtNXpQbjlO
c3hYZ0lUZExPRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wVgwDQYJKoZIhvcNAQELBQADggEBADe6lhhgU8qHw17KjzvBwjCFgVjmjUpYqchx
kiuvHfW/shEo8hQGs7ORsAtf/vzKkFbH0y15eKAneoMddYYBhrFEXTesRg8bHR5g
XFPPizGUGTtZwC0mvFQPzdfeF5zLhgoajv4XbNM0Y1mQ9iImxlmvKxe9KOJaD93S
BcqCAlCZfqgn5S3855f1T46EqcI+gZr+DME9lk2TpSunbwyaS6ecqWpZa3ks+5ZJ
XuwEhleKySP5FX2p8fZYiZjB7chclcauBa3wf1zfjUpjqqg7J+lKKSXW33wkAPsF
0dKkPd3+/5o2rwAtfPq3oi4rTzwXdaX7w0t29SD5CzN6iK3gY/Q=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:09 2025 by rpki-client