Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wg4nKMeXCdPQwP2dB65ouhhGNSk.roa
File: wg4nKMeXCdPQwP2dB65ouhhGNSk.roa (raw, json)
Hash identifier: LRPOgz2AB5tI0QDPZNUg0QedZXmHmAm4vmcSFawf348=
Subject key identifier: C2:0E:27:28:C7:97:09:D3:D0:C0:FD:9D:07:AE:68:BA:18:46:35:29
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 32FF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wg4nKMeXCdPQwP2dB65ouhhGNSk.roa
Signing time: Mon 26 Aug 2024 05:32:12 +0000
ROA not before: Mon 26 Aug 2024 05:32:12 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.195.238.128/25 maxlen: 25
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13055 (0x32ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:32:12 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C20E2728C79709D3D0C0FD9D07AE68BA18463529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:30:61:5c:f2:45:62:6d:84:ba:41:4d:04:a2:
c2:c6:17:8e:90:ae:7c:a0:31:03:6f:39:fa:2c:07:
ec:fd:98:e1:27:38:4f:9c:ca:46:5d:19:bb:6b:c2:
dc:dd:78:59:63:67:03:90:63:a0:4d:cd:a3:86:a7:
2f:97:1b:b5:60:46:53:52:74:39:fb:ac:12:38:32:
a4:8b:31:bf:03:27:bd:85:2b:1b:cf:e2:a0:36:51:
6c:ac:20:12:e0:c9:0e:47:4f:8f:2a:09:db:78:0b:
3a:6c:66:f4:39:2d:41:fe:09:99:cb:40:ec:88:88:
56:73:0a:76:65:f8:f9:7f:c3:20:15:18:e1:67:fb:
63:10:b1:24:5d:eb:6b:86:36:9b:b9:b2:3c:1c:5a:
16:73:76:38:0f:9e:21:bb:b1:7d:ec:46:4d:2a:45:
74:e8:12:ba:f6:20:cb:a0:af:f1:28:9f:e8:65:30:
ec:c8:bd:4f:8e:ab:1f:8e:db:63:f2:cd:44:ec:05:
40:56:2c:e5:6a:04:a5:78:20:e2:72:9f:cd:23:79:
b8:e3:86:33:c1:38:c8:3c:af:00:05:64:03:0a:2d:
48:ae:4e:67:c8:74:be:4f:09:53:c3:c2:b4:a9:a1:
ff:af:81:09:84:60:92:dc:a3:48:cb:54:d8:fc:72:
9c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:0E:27:28:C7:97:09:D3:D0:C0:FD:9D:07:AE:68:BA:18:46:35:29
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wg4nKMeXCdPQwP2dB65ouhhGNSk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.238.128/25
Signature Algorithm: sha256WithRSAEncryption
49:2e:1e:f6:d5:f5:50:d4:3d:be:13:20:1c:02:1d:e6:93:f1:
02:1a:b4:7f:a2:1d:1c:59:2c:b4:14:9e:ba:fe:20:4f:e7:84:
00:7a:83:b1:d1:dc:d2:aa:6a:67:6a:de:26:1f:c0:86:91:9e:
31:81:41:48:3e:5c:21:9b:f5:e7:3a:48:94:5e:1b:4f:8f:19:
92:5f:c4:c7:a4:87:1e:1f:81:f1:7f:56:5a:04:97:3a:b7:f4:
e4:50:30:6e:89:f8:39:af:09:f0:5c:16:c7:e2:68:35:2b:5e:
5c:50:00:5c:ff:ea:70:15:33:71:b7:31:02:17:96:e1:b3:56:
bd:57:1f:6c:18:12:2f:91:96:59:67:cb:08:91:ca:52:75:d3:
19:bc:ee:22:2c:57:db:99:0c:c7:e6:c8:0e:ce:36:af:7f:09:
04:b7:55:9c:98:3a:b4:09:61:bb:0d:d1:4a:12:15:cf:a3:b0:
bc:33:3d:4f:10:24:6b:44:90:15:70:ce:f9:2c:eb:5b:0c:c8:
79:87:8f:94:8b:d8:5d:90:2f:f4:7f:b9:45:00:d9:36:e2:00:
fa:4e:7e:58:c4:23:ea:52:9a:7e:70:57:4a:2e:4a:bb:69:48:
c8:66:83:42:68:7b:34:ca:38:af:50:73:4e:bb:8d:2d:7f:87:
12:14:8f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:28:42 2025 by rpki-client