Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uiHuCoSQylYxvec12We33E85q0Q.roa
File: uiHuCoSQylYxvec12We33E85q0Q.roa (raw, json)
Hash identifier: M19Gv6IAIZ9P+EzAYiUR62RwzRHw14/Wfbfn7ufcxD4=
Subject key identifier: BA:21:EE:0A:84:90:CA:56:31:BD:E7:35:D9:67:B7:DC:4F:39:AB:44
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3072
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uiHuCoSQylYxvec12We33E85q0Q.roa
Signing time: Mon 26 Aug 2024 05:29:27 +0000
ROA not before: Mon 26 Aug 2024 05:29:27 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.233.248.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:52:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12402 (0x3072)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:29:27 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=BA21EE0A8490CA5631BDE735D967B7DC4F39AB44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9f:82:ff:2c:85:c6:21:60:e6:9c:97:a5:9f:
2d:61:05:a6:24:d9:c2:d1:67:f5:a7:b6:31:a3:0f:
12:1f:88:26:8c:39:ea:8d:46:b0:4b:87:1d:0c:b9:
26:79:81:b9:5c:db:25:93:ad:6d:ee:8e:05:71:bc:
51:07:2b:96:57:30:69:62:b1:5f:0a:6d:23:b8:99:
90:a2:8f:fa:2c:40:9e:1a:b6:22:b5:e6:fa:2f:ae:
a1:77:cd:ff:e5:c1:d6:ce:21:8e:70:6e:6c:8a:69:
59:b1:d1:bc:62:2c:e3:58:ba:8d:12:25:3d:80:5a:
2a:7a:05:73:67:07:c9:60:b2:25:e8:68:98:c7:a1:
bf:ee:b9:6a:6b:53:53:8c:75:cf:e8:c7:9a:ed:fd:
ea:a3:bc:a2:de:2d:e6:e7:ee:af:86:eb:90:7c:a9:
e3:fa:f9:b4:96:f2:05:ce:aa:35:20:bf:1b:86:64:
20:ad:dd:cc:e9:e5:30:4a:6c:d0:81:f7:0b:49:08:
09:90:75:49:3f:b0:9c:17:86:dd:30:ef:31:1f:5a:
d0:ef:e1:58:5f:7d:85:6f:c1:21:a6:2a:bb:0d:6d:
6c:bb:a7:e8:1b:53:a0:a3:fd:c7:25:2e:45:1c:95:
f9:4f:68:3f:e2:43:06:11:6c:fd:83:a0:2e:36:04:
6a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:21:EE:0A:84:90:CA:56:31:BD:E7:35:D9:67:B7:DC:4F:39:AB:44
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uiHuCoSQylYxvec12We33E85q0Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.248.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:bc:c3:81:a2:90:9d:64:63:08:a8:79:c6:e8:1d:a2:e3:ea:
43:6b:3d:31:92:1d:f4:dd:3f:9c:d2:61:4c:2f:50:c6:2f:2b:
23:fd:ca:9b:b0:40:89:17:51:4d:ab:4a:88:60:cb:8c:36:6b:
6a:dc:57:20:f4:21:f0:82:fd:90:82:c1:81:07:59:28:93:0e:
8e:07:a5:33:b6:e4:4e:70:62:73:55:c5:c2:1a:b7:b7:e9:62:
2c:a9:e6:89:2f:79:79:43:10:40:0a:05:0e:3a:d1:4d:3d:71:
ac:ff:77:06:ad:e2:6f:74:cf:94:c6:1d:3d:5e:87:e9:8d:28:
dc:60:21:1a:97:cf:31:e7:f9:a9:24:50:ff:fe:50:4c:f0:87:
03:7d:8b:28:17:75:58:e1:72:b0:17:29:2a:e7:07:de:9a:f3:
a1:c4:aa:01:2c:2a:05:0b:60:db:89:a5:1b:24:d8:a7:1a:52:
73:2c:d9:55:e7:8a:68:84:04:75:c0:e5:a0:0c:78:10:64:33:
a1:3c:cc:ca:63:2e:35:db:59:bd:cd:2d:26:34:9a:bb:fe:c2:
1d:be:8f:01:9d:9f:db:5b:bb:28:85:84:1f:79:e8:88:b2:02:
9f:9e:4a:a1:b7:eb:a0:db:82:78:ea:42:2c:f8:18:8d:79:cf:
e9:af:d0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 11 03:42:56 2025 by rpki-client on console.sobornost.net