Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/va_1_2OP01YzwOwL4R52LKG41wU.roa
File: va_1_2OP01YzwOwL4R52LKG41wU.roa (raw, json)
Hash identifier: 4T7zYNZhjc69HZsV4psmX+pFEDlQ+9U/5ncqnqozR/c=
Subject key identifier: BD:AF:F5:FF:63:8F:D3:56:33:C0:EC:0B:E1:1E:76:2C:A1:B8:D7:05
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3027
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/va_1_2OP01YzwOwL4R52LKG41wU.roa
Signing time: Mon 26 Aug 2024 05:29:11 +0000
ROA not before: Mon 26 Aug 2024 05:29:11 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.232.80.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:53:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12327 (0x3027)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:29:11 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=BDAFF5FF638FD35633C0EC0BE11E762CA1B8D705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:69:ec:df:85:52:b6:d5:3d:d5:aa:3a:1e:74:
b2:88:1b:4e:1f:d0:9f:f8:e1:49:71:46:ed:25:22:
66:f5:22:59:30:f6:83:71:42:b3:cb:c7:5e:6a:02:
9c:df:c3:b3:55:64:56:31:a7:66:2b:4f:e3:ab:6e:
53:1d:06:8a:7e:a7:36:f5:5e:e5:ea:d3:37:e4:9f:
1b:f5:7d:1c:55:78:d7:0f:3f:1f:93:80:98:48:67:
fc:95:60:71:df:ad:38:3e:84:c9:d8:7b:97:c9:52:
5d:6d:bf:8c:3e:a0:96:bf:67:60:10:a2:fe:ee:ae:
bf:61:29:45:8f:26:32:46:5f:fe:cb:86:9f:d2:01:
4a:b1:96:3b:50:75:ee:b1:48:42:ef:52:cb:02:a1:
ac:91:48:78:ec:40:eb:91:9f:a2:b8:02:5b:54:70:
25:2f:2b:da:b3:5b:04:67:8b:6a:fa:ea:65:38:fb:
1d:e5:10:de:96:17:a9:62:32:d6:b1:d4:a8:a1:b7:
12:03:ff:cd:67:4a:72:15:c7:11:6c:b1:f7:6f:5c:
a9:81:d8:49:cc:d6:f8:40:40:dc:e8:35:b3:d0:ab:
9a:c0:44:fa:6f:bf:a7:0d:33:91:23:15:c9:73:64:
ec:d5:c9:e2:6d:bd:87:2e:a0:6a:f3:87:74:ee:57:
fe:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:AF:F5:FF:63:8F:D3:56:33:C0:EC:0B:E1:1E:76:2C:A1:B8:D7:05
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/va_1_2OP01YzwOwL4R52LKG41wU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.80.0/21
Signature Algorithm: sha256WithRSAEncryption
7a:d0:a7:02:fa:c4:91:b8:00:d2:42:d9:0b:95:46:4e:dc:13:
cb:41:e6:79:5d:25:66:2c:21:fa:5c:57:79:0d:4a:85:c3:ff:
30:75:03:d3:17:2a:67:a8:00:87:54:5f:b0:b4:65:e9:e7:15:
9a:7c:ea:c5:10:2f:e9:49:98:08:68:a4:d5:6a:e4:d4:dc:64:
a3:8a:d3:a5:72:fa:f1:77:f8:97:43:3b:19:da:72:18:e1:3c:
24:ce:c7:50:72:8d:0c:4b:d2:94:bb:32:3b:28:95:d2:9e:e7:
8e:4a:11:d0:31:f8:92:57:0e:f8:2f:c2:0d:ed:42:8f:1e:cb:
d5:9f:62:fa:8d:da:06:32:ad:5d:06:bf:d8:21:47:aa:02:1a:
23:9b:31:fc:80:2f:ad:21:a0:8e:28:a9:1d:bb:94:fe:4e:fa:
db:17:2e:79:c2:a9:95:c9:7a:6c:b2:fb:ba:2b:1f:1f:77:72:
f2:4b:14:92:41:ed:32:b2:96:bd:c1:15:9d:1e:fb:ed:8c:02:
f0:00:3d:c9:44:7a:ed:ef:67:94:87:1c:79:c6:a7:82:00:88:
11:40:ff:30:12:6c:63:bf:91:e1:cc:65:84:46:93:00:76:ae:
2b:51:f4:d8:78:59:65:82:d2:f4:c5:f4:bc:ba:e8:cd:80:6a:
f5:15:c0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:28:49 2025 by rpki-client