Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qeC8E2BsS_9_TIMuuJtn3hYiQo4.roa
File: qeC8E2BsS_9_TIMuuJtn3hYiQo4.roa (raw, json)
Hash identifier: UNlTg2y+YGL21hBpMgjw4PWQiGCAnQn4N5Ey5Zm+Vuk=
Subject key identifier: A9:E0:BC:13:60:6C:4B:FF:7F:4C:83:2E:B8:9B:67:DE:16:22:42:8E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3237
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qeC8E2BsS_9_TIMuuJtn3hYiQo4.roa
Signing time: Mon 26 Aug 2024 05:31:25 +0000
ROA not before: Mon 26 Aug 2024 05:31:25 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.195.160.0/20 maxlen: 20
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:53:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12855 (0x3237)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:31:25 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A9E0BC13606C4BFF7F4C832EB89B67DE1622428E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:26:86:81:8e:cc:e7:49:ee:c7:af:ea:00:01:
96:79:20:9d:b5:3a:2f:41:15:88:5e:2a:08:cf:98:
3b:6a:51:44:70:2a:10:62:a5:9d:e3:75:a3:f6:13:
91:19:d9:f9:03:e5:4d:25:09:21:74:8c:61:59:b8:
49:e8:76:c3:f7:d8:87:31:fa:c0:4d:6f:e7:21:44:
36:d7:69:1e:c7:52:37:d1:13:dc:ac:2c:8c:68:0d:
2d:b5:7d:f7:3f:91:c1:f6:ff:ee:70:7c:3a:e3:83:
9a:88:91:da:ac:8b:74:31:39:bc:b1:4f:f8:89:ce:
c3:d1:15:35:d7:f1:d6:04:29:23:94:1f:c8:43:08:
ef:c4:02:a7:8f:28:03:89:86:e5:72:0d:76:d0:1c:
77:90:e2:33:35:74:f4:84:fa:fe:e2:91:19:78:d8:
8d:91:94:b3:6e:24:c9:9e:80:78:84:23:2b:6e:65:
a7:e2:dd:e0:e2:7a:17:22:11:05:fc:49:52:d8:25:
12:59:34:e6:e2:28:c4:7e:e1:5f:08:f7:30:7e:03:
a7:99:6c:eb:7c:07:bc:8f:e6:a5:4d:8d:e4:2d:c5:
11:b5:9d:b1:b8:91:c9:81:cd:d6:3a:28:96:0e:b0:
54:ad:57:b1:f5:c9:78:9d:34:1d:bc:3a:31:3a:a5:
7a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E0:BC:13:60:6C:4B:FF:7F:4C:83:2E:B8:9B:67:DE:16:22:42:8E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qeC8E2BsS_9_TIMuuJtn3hYiQo4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.160.0/20
Signature Algorithm: sha256WithRSAEncryption
2b:92:d1:af:02:98:9b:a3:f5:b0:58:e0:f0:dd:8f:b6:f0:46:
aa:34:04:dc:47:09:2e:58:36:c4:87:02:3f:6b:dc:4c:66:e7:
0a:3d:05:8c:bf:b2:f7:d6:ca:b1:2c:81:5f:81:79:f1:c0:41:
2b:e5:65:f6:87:14:c5:84:53:83:6d:83:a3:d9:f3:b1:06:0e:
ea:73:ac:55:12:32:31:9e:a3:0e:a9:e9:76:95:d6:6b:ab:c8:
c5:3c:cd:6e:bf:f5:df:b9:7a:ef:8a:f8:31:f8:cf:6c:af:eb:
eb:87:c2:80:37:fb:51:59:f7:48:9a:14:48:5c:a0:85:5b:12:
7c:bc:8e:26:9b:d5:41:e9:e5:8c:8c:a0:9a:d4:40:1b:15:f0:
d6:c1:19:15:da:d6:9a:5c:57:5e:2d:61:e9:38:fc:00:39:a4:
a0:fc:91:d7:0d:8d:ff:ec:d2:58:2f:ce:97:89:90:f4:44:e0:
2c:86:3e:72:ce:98:bb:c1:24:07:a7:32:09:7f:d1:60:f9:78:
1a:85:54:42:6a:37:6f:bb:28:78:48:df:3c:29:cb:8b:aa:15:
de:fe:dc:8f:65:02:ea:86:03:5d:2d:67:74:ee:fb:34:2e:bb:
08:5d:23:39:fc:da:d8:83:17:47:6c:ba:b5:11:14:26:7e:cd:
92:2c:0b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:27:38 2025 by rpki-client