Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jPSWibdoHeJl-L1UsdWESsE52lU.roa
File: jPSWibdoHeJl-L1UsdWESsE52lU.roa (raw, json)
Hash identifier: FZ36NUbfVn7g+b6cpCmqo4aerZRHHGuXpIWkZSWUmgE=
Subject key identifier: 8C:F4:96:89:B7:68:1D:E2:65:F8:BD:54:B1:D5:84:4A:C1:39:DA:55
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 318E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jPSWibdoHeJl-L1UsdWESsE52lU.roa
Signing time: Mon 26 Aug 2024 05:30:34 +0000
ROA not before: Mon 26 Aug 2024 05:30:34 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.193.232.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:52:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12686 (0x318e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:30:34 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=8CF49689B7681DE265F8BD54B1D5844AC139DA55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:94:4e:34:ec:e9:88:16:8a:d4:49:77:bb:9b:
85:29:87:c9:27:88:b6:13:fa:a6:e0:a8:04:56:3f:
7c:02:83:02:53:9c:29:ae:fb:ca:bd:60:66:30:a8:
a4:7b:b4:27:4c:01:a4:ac:c9:82:a1:fc:48:a2:06:
ca:e2:a5:8c:2a:c3:ba:f5:65:23:fb:d2:8f:c9:42:
50:77:2d:06:2e:41:22:84:e3:52:90:4c:9b:07:d8:
bb:57:1e:92:67:0a:ab:77:1d:38:c9:1a:cb:16:d8:
a4:d2:02:8b:f7:92:62:14:17:bd:b0:d7:bc:01:50:
1b:d6:20:ec:83:bb:4a:76:c7:28:bd:a9:36:da:c2:
c7:ce:85:ab:62:2b:3c:36:e2:35:56:3d:0c:fb:c0:
04:8c:77:23:d2:aa:30:39:2c:d5:76:17:1b:93:34:
ce:cb:8e:bd:a0:6c:d1:18:f3:66:31:33:de:2f:1a:
d1:68:48:f6:13:b3:00:78:4c:af:d2:b3:b4:02:ca:
4c:c6:e1:22:a5:33:88:40:54:20:0e:e8:20:96:7f:
ee:94:86:e3:15:b2:35:eb:b3:16:c8:e1:eb:c0:5d:
4f:5d:05:80:a0:b9:11:b3:b3:74:13:82:08:38:f2:
34:b3:f4:bb:a2:a4:b8:b8:e4:41:d4:9a:36:98:27:
12:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F4:96:89:B7:68:1D:E2:65:F8:BD:54:B1:D5:84:4A:C1:39:DA:55
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jPSWibdoHeJl-L1UsdWESsE52lU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.232.0/21
Signature Algorithm: sha256WithRSAEncryption
b9:36:72:fd:21:ca:b7:ba:1c:91:49:6c:92:cc:8f:ed:ca:5a:
a5:44:64:15:78:ca:4c:5a:5d:d2:34:b7:b5:e3:d8:96:bf:80:
68:e0:91:5f:42:c2:d9:3e:13:ab:5f:70:aa:b2:8c:36:92:ee:
99:36:a7:60:70:08:5e:85:36:0a:8d:00:fc:c9:6a:92:68:b4:
fd:51:55:3a:b9:6c:3b:c5:15:8b:19:43:d1:ef:7f:6a:66:68:
e3:ce:6e:ef:83:31:f1:ca:54:57:4f:66:02:fc:bc:e3:27:e3:
17:24:fe:6e:92:cf:c2:c9:56:d2:20:fd:d9:c9:0e:7d:31:43:
0b:7f:1b:dd:1d:b6:d6:31:69:fe:f5:5f:c2:8b:28:30:9a:0e:
db:78:e5:6f:ac:5e:e4:b8:87:03:18:aa:69:f0:45:a4:4d:b3:
40:67:a9:3a:88:c5:8b:c7:db:b9:fb:da:e6:ac:35:ff:e8:b9:
1f:2e:69:96:03:2b:15:ec:f3:51:d3:74:9e:f6:26:c9:2b:2f:
e0:31:d2:be:04:1c:ef:e0:d1:25:4b:6f:f2:e3:a0:8f:e4:95:
29:17:d7:8c:3c:2d:6b:a8:45:7d:c2:9e:f9:29:b9:40:3b:be:
b5:ed:1c:81:f2:93:0f:f8:78:be:f7:c0:16:88:e7:e2:54:38:
c5:1b:c8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:19:30 2025 by rpki-client