Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qQoDTARsiRc6ZJFbdoUAdLZRhOY.roa
File: qQoDTARsiRc6ZJFbdoUAdLZRhOY.roa (raw, json)
Hash identifier: JBOg3sKhxc0Z9rtLhUep8lcFTsiXnK00sW8Ym3O9mM4=
Subject key identifier: A9:0A:03:4C:04:6C:89:17:3A:64:91:5B:76:85:00:74:B6:51:84:E6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3164
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qQoDTARsiRc6ZJFbdoUAdLZRhOY.roa
Signing time: Mon 26 Aug 2024 05:30:24 +0000
ROA not before: Mon 26 Aug 2024 05:30:24 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 180.177.48.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:52:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12644 (0x3164)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:30:24 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A90A034C046C89173A64915B76850074B65184E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:91:91:17:c2:18:fc:31:94:18:e5:87:95:c8:
5e:0a:6f:13:14:3e:78:d5:f8:73:50:42:ed:13:2d:
1b:11:99:a7:9d:d6:1b:d6:07:a7:35:a4:d1:ef:da:
05:17:be:b4:35:eb:4b:2a:ba:72:94:d1:db:ae:29:
e6:82:0e:18:7a:74:e6:2d:bc:06:a8:53:49:90:a1:
d2:54:d3:c9:ad:85:f8:83:8c:e6:fe:2f:b0:df:b1:
5f:b7:4b:52:b5:9a:c6:a6:d6:87:91:fa:17:a0:6b:
16:59:7e:17:71:ca:85:5a:60:5a:00:15:59:75:ff:
fe:0e:1e:48:75:71:45:4f:9f:9a:87:58:37:ec:e9:
00:7b:d8:b5:36:8f:db:0a:98:8b:ec:4f:b3:51:94:
81:20:3e:e6:b2:39:88:3e:2b:3e:c8:43:92:00:37:
3f:f4:79:f3:2c:39:28:e9:74:e4:03:3d:65:03:f8:
7c:4c:6e:40:70:8b:a3:4d:3a:b9:e7:b6:7d:48:a8:
67:6c:c0:64:56:1e:96:33:2e:f7:a1:89:95:91:71:
69:b2:e8:9e:9b:be:89:58:42:a2:02:b9:e9:bd:dc:
5b:74:02:71:08:fa:b6:69:15:98:c2:cd:be:21:ea:
b6:6a:a7:fe:d0:67:91:e7:93:8d:4d:38:7f:4f:31:
59:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0A:03:4C:04:6C:89:17:3A:64:91:5B:76:85:00:74:B6:51:84:E6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qQoDTARsiRc6ZJFbdoUAdLZRhOY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.48.0/22
Signature Algorithm: sha256WithRSAEncryption
93:93:e6:5a:6a:07:1b:f5:ab:2f:f6:48:c7:27:74:8a:60:ff:
3c:6d:14:19:80:8c:a1:9e:7a:91:bf:ab:2f:c3:66:84:0f:bf:
1e:f7:49:88:8c:28:34:2e:ee:99:c3:96:d9:84:96:ab:49:3e:
be:83:d8:d2:65:bb:f4:6b:2c:58:bb:9e:68:32:bb:4d:3b:e4:
84:23:e8:2c:67:a0:8b:ce:88:97:24:82:ed:17:9b:f9:1c:ec:
6e:30:6f:2a:da:a6:53:63:6d:cb:94:23:87:1a:8d:db:54:57:
cc:62:fb:61:30:7f:12:9a:3f:8a:1e:91:c6:f1:42:62:a1:16:
2e:37:48:eb:f6:88:9d:a4:e6:53:2d:ed:c4:3e:9c:e4:83:56:
be:c1:88:df:ef:1f:f7:f4:3a:27:36:c3:5b:38:b8:b0:50:01:
a0:83:01:d0:05:17:4a:0a:4e:ad:a1:b6:2b:85:03:59:fc:67:
cf:d3:22:d8:6b:d7:a2:80:ac:8e:c9:ee:28:c8:4d:e2:4c:26:
6d:82:58:e7:90:08:31:d3:bb:fa:8b:83:7b:c0:3b:68:b6:9f:
9d:92:6a:12:c1:a6:43:5a:f6:71:01:0a:b2:74:d1:83:47:30:
2e:1f:ee:30:cb:9b:18:bf:04:c6:ff:76:b4:8a:1e:1a:94:a1:
2f:78:05:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:25:54 2025 by rpki-client