Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yJj057362GP5OSgtveZkYsBx2y0.roa
File: yJj057362GP5OSgtveZkYsBx2y0.roa (raw, json)
Hash identifier: ibj9d00o/PwzaW51s99Hn3kCbMTczBnPYU1OBn6Sy0s=
Subject key identifier: C8:98:F4:E7:BD:FA:D8:63:F9:39:28:2D:BD:E6:64:62:C0:71:DB:2D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 30DE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yJj057362GP5OSgtveZkYsBx2y0.roa
Signing time: Mon 26 Aug 2024 05:29:54 +0000
ROA not before: Mon 26 Aug 2024 05:29:54 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.193.160.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:52:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12510 (0x30de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:29:54 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C898F4E7BDFAD863F939282DBDE66462C071DB2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:be:fd:37:78:c8:14:01:d5:67:5b:27:78:82:
44:67:ca:bf:0e:c6:b9:84:1e:af:03:c7:6c:02:99:
65:da:26:52:13:2d:73:0f:4a:5e:43:8f:09:48:14:
43:3a:28:c1:bb:a0:62:31:2e:71:f0:ea:2e:0b:00:
f4:49:73:aa:1a:1e:b7:ae:4a:c6:2f:cc:a4:df:82:
18:c3:8c:4e:2f:a2:84:ae:59:64:f8:a2:e8:54:8e:
e4:90:ab:5a:2a:07:a2:b0:ce:84:03:5f:17:64:dc:
d2:84:b4:a5:21:21:49:09:af:ab:ce:2d:f4:79:f2:
b6:f4:50:6b:99:76:e1:2e:a6:72:73:7c:b3:9b:bc:
23:fd:72:11:de:57:4e:01:23:1b:f1:da:27:8f:4c:
f7:15:7f:e5:17:b6:05:46:bd:61:d8:f4:56:5a:9f:
4f:69:81:02:1a:5e:0c:f6:63:8c:30:d2:33:af:d2:
aa:28:b3:a6:eb:23:c5:96:c6:81:cf:6d:85:3a:10:
8b:88:dc:6d:48:fb:f3:16:30:24:08:b5:da:a1:ff:
bc:75:9d:92:03:79:c8:87:6f:b5:26:af:c8:0d:df:
95:cf:f2:bd:0d:94:f4:3b:23:51:70:18:0a:52:a7:
ac:66:ea:a4:01:d1:44:32:2f:0c:c8:aa:1a:65:8a:
19:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:98:F4:E7:BD:FA:D8:63:F9:39:28:2D:BD:E6:64:62:C0:71:DB:2D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yJj057362GP5OSgtveZkYsBx2y0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.160.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:0b:8a:8a:ce:7d:33:84:57:e0:f8:b1:aa:01:74:d5:1a:79:
94:31:a3:46:95:f1:3c:ed:38:91:b4:97:72:b6:d5:10:38:d2:
7a:ea:4c:28:13:38:f5:c9:1a:0b:b9:33:f2:76:89:a4:90:41:
cc:a1:6c:c9:3f:dc:47:f9:cd:4b:24:24:02:7c:d5:43:c4:82:
a4:5c:59:a4:79:c3:af:06:5b:5b:d3:c8:05:ec:a5:85:00:5e:
6c:1d:59:18:5b:fc:88:7a:6f:17:36:7e:4e:5e:13:f3:05:ee:
33:fe:c5:f5:87:0f:20:70:51:32:54:e4:a6:15:09:55:19:ff:
cf:84:f2:a6:62:d9:47:3b:4a:b1:bc:3a:2d:a1:38:4c:72:a0:
d3:8e:8d:58:c2:c4:d8:12:58:7d:f8:18:6e:1e:ad:82:51:0b:
9f:c5:64:e7:b8:d8:30:15:4c:1d:8a:bb:39:82:2a:95:e6:cd:
c7:2a:fa:66:8d:50:28:64:26:7a:61:ea:91:ce:0d:46:2c:39:
69:79:24:ad:35:e8:11:db:4f:12:28:7c:7d:81:2a:52:51:68:
c9:8f:52:f2:0a:c1:f3:14:ee:fa:7d:6a:3d:a7:0c:4d:b9:e5:
95:99:7d:df:0a:79:ec:94:3c:4a:55:a4:f9:20:bc:e2:f6:5f:
f2:28:2f:ba
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICMN4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw
NTI5NTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM4OThGNEU3QkRGQUQ4
NjNGOTM5MjgyREJERTY2NDYyQzA3MURCMkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSvv03eMgUAdVnWyd4gkRnyr8OxrmEHq8Dx2wCmWXaJlITLXMP
Sl5DjwlIFEM6KMG7oGIxLnHw6i4LAPRJc6oaHreuSsYvzKTfghjDjE4vooSuWWT4
ouhUjuSQq1oqB6KwzoQDXxdk3NKEtKUhIUkJr6vOLfR58rb0UGuZduEupnJzfLOb
vCP9chHeV04BIxvx2iePTPcVf+UXtgVGvWHY9FZan09pgQIaXgz2Y4ww0jOv0qoo
s6brI8WWxoHPbYU6EIuI3G1I+/MWMCQItdqh/7x1nZIDeciHb7Umr8gN35XP8r0N
lPQ7I1FwGApSp6xm6qQB0UQyLwzIqhplihmhAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUyJj057362GP5OSgtveZkYsBx2y0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3lKajA1NzM2MkdQNU9TZ3R2
ZVprWXNCeDJ5MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
waAwDQYJKoZIhvcNAQELBQADggEBAA4LiorOfTOEV+D4saoBdNUaeZQxo0aV8Tzt
OJG0l3K21RA40nrqTCgTOPXJGgu5M/J2iaSQQcyhbMk/3Ef5zUskJAJ81UPEgqRc
WaR5w68GW1vTyAXspYUAXmwdWRhb/Ih6bxc2fk5eE/MF7jP+xfWHDyBwUTJU5KYV
CVUZ/8+E8qZi2Uc7SrG8Oi2hOExyoNOOjVjCxNgSWH34GG4erYJRC5/FZOe42DAV
TB2KuzmCKpXmzccq+maNUChkJnph6pHODUYsOWl5JK016BHbTxIofH2BKlJRaMmP
UvIKwfMU7vp9aj2nDE255ZWZfd8KeeyUPEpVpPkgvOL2X/IoL7o=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:17:39 2025 by rpki-client