Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dUhw88CAzdtugdjJif4IBGAHShg.roa
File: dUhw88CAzdtugdjJif4IBGAHShg.roa (raw, json)
Hash identifier: /VUDLjzx16VFQjA43BSNHDGRgWOsyV9qGpCDTP58dMk=
Subject key identifier: 75:48:70:F3:C0:80:CD:DB:6E:81:D8:C9:89:FE:08:04:60:07:4A:18
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3063
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dUhw88CAzdtugdjJif4IBGAHShg.roa
Signing time: Mon 26 Aug 2024 05:29:24 +0000
ROA not before: Mon 26 Aug 2024 05:29:24 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.194.96.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:51:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12387 (0x3063)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:29:24 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=754870F3C080CDDB6E81D8C989FE080460074A18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b7:16:ea:41:79:b2:08:2d:5f:ab:c1:67:bf:
71:e1:b8:89:67:66:e4:f7:63:43:b6:fe:2c:ce:0d:
47:33:84:dd:f6:02:84:1b:e4:fe:62:ac:3d:50:a0:
b8:c8:47:ba:2b:c8:c3:e1:53:21:41:84:61:8b:b8:
c4:07:a1:6d:09:8c:ea:c0:16:3d:65:50:08:6d:2f:
c2:5b:8c:14:81:52:29:23:2f:af:0c:d5:50:18:7d:
53:9a:d2:21:22:12:e0:e1:e1:b0:0f:8a:c5:b8:d7:
3c:1f:58:8d:e4:dd:1a:1e:aa:ac:1b:a3:74:ad:68:
01:0a:37:c5:e8:3b:aa:6c:dc:2b:cc:e7:b2:c8:9f:
0d:5f:b1:44:0c:38:02:02:be:b0:40:62:4c:89:f3:
f0:89:f2:a0:23:74:27:6c:d7:eb:bb:05:8d:d4:48:
cf:26:6e:89:71:06:f7:e2:7e:78:78:d5:8f:dd:72:
02:27:67:44:d0:4a:e7:04:6d:c0:97:bd:3c:72:f6:
a2:aa:56:60:11:2a:28:61:bb:12:29:7a:ef:54:15:
57:a3:97:20:08:9b:59:e2:3a:f3:0e:3c:8b:bd:04:
34:78:18:5d:48:84:b0:df:8b:8d:18:8d:6e:f7:ea:
73:75:2d:dc:eb:b4:2f:65:0a:0a:eb:44:90:e7:33:
cc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:48:70:F3:C0:80:CD:DB:6E:81:D8:C9:89:FE:08:04:60:07:4A:18
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dUhw88CAzdtugdjJif4IBGAHShg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.96.0/21
Signature Algorithm: sha256WithRSAEncryption
a5:33:85:d1:2f:94:00:e8:ed:69:eb:8c:71:f8:07:57:aa:b4:
6a:f4:d7:64:37:ba:b6:16:03:ad:50:fe:fc:2c:38:2e:0a:66:
b7:63:b5:91:cd:47:66:f0:39:4b:2c:37:93:ef:fd:53:d8:7d:
e7:80:85:f5:19:2c:97:f7:d9:b6:76:e2:b4:49:7c:c6:8a:c9:
5b:8e:66:20:0b:57:fc:34:81:a6:3e:13:8c:fc:a3:64:3d:e0:
5b:36:1d:f7:f0:56:0e:e8:1e:07:88:be:68:82:f8:5e:95:0d:
9b:1e:ff:eb:71:bf:1d:c8:e8:d8:0c:00:2a:5f:00:0f:28:37:
fb:c7:37:77:41:91:d0:d8:68:02:3e:3e:3a:f6:6c:7c:ff:e8:
33:24:cb:ec:57:8f:4a:62:f5:9d:ad:9e:37:cf:63:3d:cd:43:
d1:8f:83:13:dc:00:19:91:0d:57:f1:76:12:89:c5:25:2a:89:
3f:a6:59:c7:39:a0:67:e5:36:9f:84:87:62:2b:01:21:d7:11:
8e:ca:cd:67:9c:a9:88:1c:ae:36:39:05:22:87:a7:78:3c:6f:
f5:16:0a:26:b8:43:48:f3:bf:fb:16:76:35:6b:f4:ef:4c:a3:
6b:c7:9b:fd:e6:fb:1a:55:f1:66:d5:31:8c:ae:2e:98:83:27:
73:b4:9d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:35:56 2025 by rpki-client