Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xjhnDrCC6u0VSRKr8WdPA07NgOY.roa
File: xjhnDrCC6u0VSRKr8WdPA07NgOY.roa (raw, json)
Hash identifier: eH4idBRD7tfNW02E70sElt+lvVrkOjCv+eAZj0fQETQ=
Subject key identifier: C6:38:67:0E:B0:82:EA:ED:15:49:12:AB:F1:67:4F:03:4E:CD:80:E6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3249
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xjhnDrCC6u0VSRKr8WdPA07NgOY.roa
Signing time: Mon 26 Aug 2024 05:31:31 +0000
ROA not before: Mon 26 Aug 2024 05:31:31 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 180.176.0.0/15 maxlen: 15
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:53:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12873 (0x3249)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:31:31 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C638670EB082EAED154912ABF1674F034ECD80E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cb:41:1e:d8:be:ea:48:f2:d5:9f:61:12:f1:
1c:16:fe:44:6a:69:b4:25:32:47:63:42:30:f6:42:
68:49:60:48:a0:39:e3:00:1a:5c:08:44:53:32:72:
fc:15:7e:ef:a3:63:b1:0e:93:10:d4:31:76:7a:88:
55:31:60:4e:39:16:a2:a5:df:9d:cf:6f:59:6c:f0:
ce:ce:2b:68:3d:74:7f:da:39:ae:23:53:a7:05:4d:
6f:fd:48:1b:68:60:51:b4:6f:af:ae:46:b1:c7:1c:
4a:0c:40:cd:0a:24:6d:89:da:fc:55:8b:5b:bb:5f:
0c:4f:a1:0e:ab:e3:2a:d8:63:a0:c4:f2:11:41:71:
1a:51:69:b1:4f:a4:be:9d:cd:b2:43:c3:0b:53:ff:
e6:95:1f:0a:d6:d5:27:73:9a:1c:5b:b0:dd:37:25:
1d:4c:c5:a8:35:82:44:2b:cb:ea:ce:c3:4f:d9:1c:
4c:cc:12:84:9e:9d:5a:25:08:55:c4:92:3d:31:35:
41:1d:1e:32:5d:88:73:da:19:f3:4b:09:2a:62:70:
d2:e1:70:c0:15:fc:14:e4:a5:b8:22:bb:10:03:70:
b9:ea:a4:a6:3e:f2:cc:19:4e:5e:91:5c:87:a9:e4:
6b:45:73:2a:e9:62:63:72:47:39:33:36:0e:9a:29:
04:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:38:67:0E:B0:82:EA:ED:15:49:12:AB:F1:67:4F:03:4E:CD:80:E6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xjhnDrCC6u0VSRKr8WdPA07NgOY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.0.0/15
Signature Algorithm: sha256WithRSAEncryption
46:83:0f:85:10:01:f9:ca:5f:c1:58:8d:48:dd:ba:8f:71:8b:
b9:e2:24:46:de:67:49:e4:46:5b:47:5a:24:72:28:31:eb:21:
0c:3c:be:95:5d:e6:8d:f5:da:25:d2:f3:59:96:ad:92:89:2c:
07:ca:11:15:0c:af:eb:7b:61:c3:9e:e8:87:6c:29:2d:f2:ff:
99:20:9f:f3:e0:9c:cf:f1:de:bc:c1:92:65:fc:9d:06:97:9c:
fd:35:3e:74:ff:13:b0:93:46:fe:9d:12:0d:12:49:7e:6b:0f:
a1:3d:0b:5d:ac:7c:b8:ed:be:2b:01:12:68:64:f0:b0:6b:38:
06:85:70:89:77:9e:96:6d:97:cc:80:a3:d4:9b:6b:ac:dd:06:
0f:74:9e:cf:fe:bc:eb:14:ff:2e:f2:d6:19:0f:fc:2b:bc:0b:
43:a5:5d:32:68:09:32:bb:a7:10:f7:d2:47:a6:94:60:51:8a:
fd:03:25:00:35:43:d2:9c:af:86:dd:3b:05:fc:5b:59:c8:22:
f1:e0:c4:67:49:54:e0:86:40:c6:ba:ee:b7:c3:f4:74:e5:47:
8b:ee:38:1b:33:fd:ae:9f:1d:a4:59:21:10:cb:17:60:6e:74:
29:7b:67:2e:e6:04:85:b3:0a:15:fa:5d:35:f1:48:71:e1:79:
ca:c8:77:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:32:39 2025 by rpki-client