Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/csMMXfeBEBCF8scehDmPxS23BrQ.roa
File: csMMXfeBEBCF8scehDmPxS23BrQ.roa (raw, json)
Hash identifier: Nd25kKy2/u1eWKzoWYTvm73OpDCxyvWC2zuIjm5fW6c=
Subject key identifier: 72:C3:0C:5D:F7:81:10:10:85:F2:C7:1E:84:39:8F:C5:2D:B7:06:B4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3227
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/csMMXfeBEBCF8scehDmPxS23BrQ.roa
Signing time: Mon 26 Aug 2024 05:31:20 +0000
ROA not before: Mon 26 Aug 2024 05:31:20 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:53:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12839 (0x3227)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:31:20 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=72C30C5DF781101085F2C71E84398FC52DB706B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e0:cb:03:47:7d:b5:af:18:ff:29:53:4a:0d:
5b:b1:06:db:e8:15:05:c7:84:a6:77:de:86:82:ce:
e8:f2:2e:88:cc:8e:e2:97:b5:34:68:1a:e2:c4:53:
7a:ea:f6:06:8c:44:8a:25:b8:8e:5f:f7:b5:96:54:
0a:b7:61:97:f7:0c:b8:4f:e8:d0:fb:f6:9c:ae:88:
3d:2d:43:89:1f:1b:db:8e:dd:a4:4a:5e:74:b6:b1:
c8:f1:13:cf:59:64:7c:12:9a:47:35:5d:16:6d:e7:
62:38:f2:d2:1d:39:e8:69:3a:e1:81:95:10:81:57:
e6:84:9a:a5:b5:96:ea:2a:1e:f7:7b:4b:3f:9f:eb:
63:1b:12:b9:63:1c:4e:a5:8f:39:d5:d7:57:87:56:
7f:80:b1:96:1b:36:3f:76:ef:64:e8:f5:f9:cd:b5:
94:7e:61:fa:7e:39:4c:d0:1f:21:27:be:f0:11:62:
70:3a:3a:db:08:df:68:a5:88:d5:5d:c4:91:cd:39:
c1:f2:0a:04:69:43:77:fb:c3:e2:13:87:03:87:e1:
7a:65:c2:95:cc:35:03:88:50:4f:b0:72:c9:92:03:
d1:67:93:30:fd:3f:86:53:d2:47:c3:b7:6a:79:43:
f8:36:ce:50:d2:ea:8a:88:d4:85:09:d1:23:39:4a:
72:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C3:0C:5D:F7:81:10:10:85:F2:C7:1E:84:39:8F:C5:2D:B7:06:B4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/csMMXfeBEBCF8scehDmPxS23BrQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.170.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:6c:72:72:7a:9c:0b:78:ee:de:39:20:8e:92:91:a2:53:02:
d1:f5:cf:3e:e9:94:d8:2c:8a:04:f0:73:c9:cb:c6:ea:d0:c5:
4a:c2:12:e2:c3:64:cd:d8:29:b8:d0:40:d8:f8:fb:60:fe:af:
4d:a6:ca:f6:07:bd:22:01:1b:21:63:0e:1d:1c:bf:dc:47:9d:
0e:60:83:3d:cd:9f:78:1c:7c:fa:ae:6e:f5:4a:dc:98:ec:e5:
d9:f3:bd:e5:65:f4:52:09:d5:0f:e4:e4:7b:14:0c:3b:ea:8c:
71:6a:b3:ee:c4:56:1e:ff:24:cb:d3:41:6a:40:fb:38:47:37:
ac:8c:ac:e8:fc:d4:8e:06:4d:4d:8b:c2:0a:94:e4:6f:86:ca:
b7:ed:fc:01:02:3a:50:3a:49:bb:43:b3:36:e9:50:b9:6e:c5:
dd:2e:fb:d2:00:82:d5:33:b1:c3:44:d3:f8:27:67:9a:13:3e:
0d:b7:e1:34:6c:2a:db:24:10:e0:91:5a:0d:b7:ce:f9:60:dd:
8a:b9:c8:9f:48:dc:73:0c:70:4b:50:9e:d9:ac:2d:b5:8f:ff:
ee:3a:93:56:29:c8:bd:45:dd:00:4d:66:b0:6e:69:91:ba:b6:
8f:4b:b8:64:15:b4:d4:e6:19:b1:c1:73:bb:1d:de:4a:b0:03:
2f:ee:34:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:33:38 2025 by rpki-client