Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hq7dSFHsqhpDhQpDbYf9zj3uDek.roa
File: hq7dSFHsqhpDhQpDbYf9zj3uDek.roa (raw, json)
Hash identifier: Atnnjt+ONG3kw8kpnn1drSQkop4cDlKCwC4OmZa/jeA=
Subject key identifier: 86:AE:DD:48:51:EC:AA:1A:43:85:0A:43:6D:87:FD:CE:3D:EE:0D:E9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3048
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hq7dSFHsqhpDhQpDbYf9zj3uDek.roa
Signing time: Mon 26 Aug 2024 05:29:19 +0000
ROA not before: Mon 26 Aug 2024 05:29:19 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.140.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:51:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12360 (0x3048)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:29:19 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=86AEDD4851ECAA1A43850A436D87FDCE3DEE0DE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c6:6e:51:70:00:a3:ca:d8:a7:ac:cd:61:7e:
87:02:36:be:ae:68:2f:4e:fd:94:ee:7a:14:49:08:
a4:1f:28:07:df:29:13:64:1a:85:6a:af:80:54:2e:
02:c0:c2:6f:01:45:0e:7f:c0:6b:16:a4:5d:89:6b:
f1:24:2f:79:b7:7c:65:4b:f4:ea:a1:83:bf:3e:71:
43:fb:9d:2a:c6:2a:e7:b6:f5:63:32:aa:44:2a:fe:
1d:19:08:9e:f7:dd:21:78:53:c9:77:4a:67:69:d9:
2d:26:0c:65:54:b6:8d:3e:d8:56:b5:29:5e:76:a9:
64:f4:5b:43:fc:58:22:50:0f:15:09:74:31:2d:0b:
d1:36:1d:10:e7:6f:15:fd:4a:d1:b9:48:0a:56:af:
58:2b:74:b5:5a:ee:21:fb:54:29:d2:0d:b8:f4:ff:
94:ac:60:01:5c:de:79:06:11:3c:a8:44:cc:de:ba:
e3:ca:01:00:b5:e8:db:a8:e5:9f:8d:22:b1:4d:84:
96:c7:34:c6:a1:8c:74:c6:0b:c0:0a:31:02:50:74:
3c:02:47:0e:49:f7:73:0a:06:8e:cd:94:e7:9f:12:
0d:76:1d:de:b0:b6:15:20:9f:4f:6b:13:3e:c4:ee:
92:e1:82:39:18:27:1a:c8:00:98:4e:85:3c:6b:4f:
ca:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AE:DD:48:51:EC:AA:1A:43:85:0A:43:6D:87:FD:CE:3D:EE:0D:E9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hq7dSFHsqhpDhQpDbYf9zj3uDek.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.140.0/22
Signature Algorithm: sha256WithRSAEncryption
25:e8:82:56:36:3c:66:e8:a0:5d:61:2a:38:06:77:1b:6f:27:
44:65:71:d4:c4:69:b6:e1:6d:3d:65:10:10:92:a3:d0:0d:45:
1e:74:99:ff:e4:62:91:99:a1:9e:04:40:05:bc:56:3e:ee:dd:
a0:68:db:df:71:cf:d8:b4:d6:f8:33:e5:b7:2e:8a:1d:b9:59:
2b:fa:be:dc:a3:44:b7:46:e7:e3:6c:a4:76:a5:bb:10:d5:7d:
ee:4e:63:86:77:bb:73:ff:e6:46:ff:ea:49:b0:65:b2:4b:c3:
8a:b4:68:dd:a1:0d:3f:ba:27:c5:77:29:b0:c4:ef:18:6f:c7:
4e:ee:84:fd:f3:f5:a9:0a:5c:e4:01:cf:e4:d9:99:6c:92:4e:
7a:c5:05:a1:4d:46:74:9e:ea:d4:8c:f4:46:46:13:d1:d3:f8:
76:74:6d:f2:e9:af:73:44:62:87:e9:90:6b:b9:b3:4c:43:11:
32:e5:95:24:1b:7e:dc:0b:70:6e:c3:c5:fc:22:ae:cf:16:db:
05:ac:02:f0:6e:7e:7c:0b:27:bb:2e:eb:71:72:34:de:98:b3:
9b:24:d9:44:df:9f:00:4c:6d:40:3f:fb:16:f8:c0:be:a3:ab:
3e:c7:f7:ae:a2:fd:3f:ea:de:95:f8:f9:e8:d4:17:20:86:5f:
a1:a1:2b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:42:37 2025 by rpki-client