Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/d5fGZjyBlCc8UP0jtwZAmmaoBjI.roa
File: d5fGZjyBlCc8UP0jtwZAmmaoBjI.roa (raw, json)
Hash identifier: Jhl26Gfp6JwcV8YUTgGutoZycjEYrlidwC70M0Ti0GM=
Subject key identifier: 77:97:C6:66:3C:81:94:27:3C:50:FD:23:B7:06:40:9A:66:A8:06:32
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 326F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/d5fGZjyBlCc8UP0jtwZAmmaoBjI.roa
Signing time: Mon 26 Aug 2024 05:31:39 +0000
ROA not before: Mon 26 Aug 2024 05:31:39 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 180.176.228.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:54:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12911 (0x326f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:31:39 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=7797C6663C8194273C50FD23B706409A66A80632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:25:a7:fa:6d:7a:5b:d8:33:94:d9:7d:61:1a:
0d:90:19:66:41:4d:ad:c7:c5:47:ea:e2:b4:4e:fb:
21:bc:5a:6b:c6:c1:25:01:f8:c6:18:24:2c:fb:6c:
b6:36:6a:69:ab:53:20:c1:49:68:d6:37:25:2e:7a:
5a:5e:69:8a:25:9f:74:e6:ce:1a:87:32:24:41:4b:
58:93:5e:a3:a4:48:c6:b9:39:9b:82:85:83:f2:23:
7d:5b:4a:89:bb:12:da:0e:45:d1:f7:4d:d8:50:31:
02:40:b5:e7:3d:b9:36:a6:6e:b6:52:e8:5c:aa:dc:
f3:d7:9b:d3:2d:56:75:8f:bf:8c:30:1e:01:a1:1b:
b9:f6:89:0b:e6:49:09:0b:0a:10:ed:fb:84:f6:95:
54:a3:8d:f3:21:96:80:7c:5d:33:50:24:78:b5:0a:
e1:4e:a2:91:9f:91:84:6b:25:26:3f:61:8a:63:7b:
d9:7e:0d:72:f3:bd:35:4a:bf:2b:bf:da:ad:2e:53:
c1:e7:d1:78:38:af:85:6f:46:03:7c:1d:79:01:68:
43:82:f1:e4:09:9f:c8:6b:8d:6f:87:e6:b3:69:a9:
54:fa:4d:b4:5c:05:9e:d6:43:42:ad:d7:18:2b:66:
53:5c:b1:1e:55:2d:de:89:d2:a0:1c:4f:77:f5:5e:
96:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:97:C6:66:3C:81:94:27:3C:50:FD:23:B7:06:40:9A:66:A8:06:32
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/d5fGZjyBlCc8UP0jtwZAmmaoBjI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.228.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:c8:7b:73:e5:8f:00:d6:3d:fd:3c:2e:d3:08:3e:8f:a0:23:
f5:7c:00:c7:2d:41:73:c6:64:d6:7f:d3:0b:6e:2e:88:0a:6b:
fa:b4:ed:09:e4:f4:84:d1:69:7a:50:14:bb:cf:a5:07:07:27:
d3:cb:cc:44:77:6e:08:f6:ad:7a:e2:1e:23:eb:2d:d5:4b:3d:
df:8f:e7:93:fc:dc:d7:a4:1d:38:a1:40:99:e4:f6:06:2b:52:
46:c9:6f:9f:17:4b:13:1c:dd:98:f2:84:6a:0e:d0:a2:55:9d:
49:5a:4f:7b:43:80:ac:83:34:32:89:6b:94:02:2c:67:53:e3:
e5:74:6c:80:8d:d2:51:00:38:e2:a5:c8:68:18:5d:36:f9:4c:
c9:ed:30:40:35:ab:37:d4:f1:4d:d8:ca:d2:f2:07:6c:d9:1f:
91:5a:76:41:40:d2:fa:07:25:29:e3:7e:2e:ae:9a:22:1f:00:
df:91:6b:a8:ca:90:5a:3d:ed:52:6c:f1:1e:e5:eb:6a:09:16:
8e:04:5e:12:ff:8b:a1:c5:91:07:7b:42:60:b4:d5:62:79:f0:
a9:07:c5:6b:0e:cc:be:76:24:7a:a8:7b:59:0c:8d:0b:f3:eb:
43:45:03:01:4f:15:61:1e:d3:b9:c2:3c:fb:4f:47:c2:0b:0a:
05:24:9f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:21:09 2025 by rpki-client