Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kA3gPm19XIv4MNSZXH6WPJRCNzc.roa
File: kA3gPm19XIv4MNSZXH6WPJRCNzc.roa (raw, json)
Hash identifier: wJAZ/md+e/Q2U2+1QmahwHNuHNSQfWT5EhYmiHFLPRo=
Subject key identifier: 90:0D:E0:3E:6D:7D:5C:8B:F8:30:D4:99:5C:7E:96:3C:94:42:37:37
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2F9D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kA3gPm19XIv4MNSZXH6WPJRCNzc.roa
Signing time: Mon 26 Aug 2024 05:28:40 +0000
ROA not before: Mon 26 Aug 2024 05:28:40 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.195.237.0/25 maxlen: 25
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12189 (0x2f9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:28:40 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=900DE03E6D7D5C8BF830D4995C7E963C94423737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:88:ef:65:d8:72:e1:7a:67:22:82:a8:5f:38:
fb:c1:13:fe:c1:31:0e:3d:44:0f:92:0f:15:29:17:
de:ae:9f:e3:b4:bf:66:d6:24:18:0d:7c:15:f4:fe:
1f:e1:08:ae:cd:15:02:39:6d:9d:93:64:92:0c:99:
d2:ec:7a:f3:94:c1:53:fd:76:d9:07:08:4a:54:3a:
f9:59:ca:0b:2e:1d:f2:21:91:cf:40:f9:80:2b:e8:
17:83:bf:b5:77:2d:e2:ef:2d:14:d8:0c:a3:af:c9:
e3:eb:90:6a:99:42:2c:6d:26:a9:9a:be:ec:1d:db:
8b:ac:47:d1:2f:3a:f1:82:30:7f:60:f3:e4:d8:04:
d9:81:2d:77:b2:0d:ef:3f:01:db:c4:a5:43:b2:75:
52:97:01:5b:e3:d2:a7:9b:ed:f0:90:20:d3:ac:69:
a9:b3:17:c7:20:64:2a:50:f5:9e:5e:f4:e6:34:53:
59:13:36:96:4f:09:87:9f:68:d1:23:ba:8d:3d:ac:
a8:93:a5:eb:6a:b1:60:83:ab:26:fc:7c:05:03:fd:
68:cc:b1:c6:d4:21:94:42:d0:30:8e:2a:47:39:34:
2c:33:cb:d0:d0:29:73:82:d3:3b:5b:9d:c0:a9:3a:
d2:ee:bd:82:95:e3:38:c1:9c:00:27:a6:76:cd:df:
d9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0D:E0:3E:6D:7D:5C:8B:F8:30:D4:99:5C:7E:96:3C:94:42:37:37
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kA3gPm19XIv4MNSZXH6WPJRCNzc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.237.0/25
Signature Algorithm: sha256WithRSAEncryption
96:d9:da:51:11:92:0c:16:bc:6d:44:d6:f7:da:b7:cc:2a:87:
27:74:9d:5c:e3:78:af:fb:98:a7:14:8d:6e:1c:53:d5:86:88:
01:8f:d5:f1:02:04:11:8c:bf:d6:3a:6c:b5:3e:ca:c3:46:7c:
fe:f7:db:95:ba:76:d9:8d:a5:36:15:e7:81:2c:09:11:4d:e1:
88:50:92:25:b9:74:9d:32:3f:f1:f1:40:82:5f:33:86:a6:b8:
ff:6c:a5:3c:5c:b1:28:8c:da:bc:2a:51:09:1b:2e:d1:52:7c:
d4:68:b1:ec:bf:62:7f:8b:7e:2a:a3:16:b8:d6:0f:be:a8:15:
e8:04:03:86:85:8e:0f:4c:98:4b:4a:f2:27:4b:1d:42:ad:17:
1c:c2:7a:63:69:4b:41:a6:2e:dd:3e:29:5a:9b:8b:c6:b0:ee:
09:5c:a5:df:a4:b8:c1:c1:91:c9:02:8d:45:f2:4c:21:8c:01:
12:e9:fd:a4:42:0d:12:79:8f:ff:b7:5f:b3:0c:1e:14:23:99:
88:d4:cf:17:a1:a2:70:e4:f0:6c:3f:52:d6:79:75:62:99:7b:
a6:fc:b4:62:03:2f:d6:d0:6d:97:16:8c:a2:01:75:5e:19:2d:
82:e6:f0:27:b9:41:bd:c3:e4:13:8c:fa:2b:ec:56:9b:7a:df:
0b:3f:95:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:11 2025 by rpki-client