Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3aRcUlsjdQpKJxIZCoKLqqzskA0.roa
File: 3aRcUlsjdQpKJxIZCoKLqqzskA0.roa (raw, json)
Hash identifier: XwlLELF0CUdXzgOuvbfsX37UeQyfASm7pB0YPpqpMvo=
Subject key identifier: DD:A4:5C:52:5B:23:75:0A:4A:27:12:19:0A:82:8B:AA:AC:EC:90:0D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3549
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3aRcUlsjdQpKJxIZCoKLqqzskA0.roa
Signing time: Mon 10 Feb 2025 13:53:12 +0000
ROA not before: Mon 10 Feb 2025 13:53:11 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 118.232.0.0/15 maxlen: 15
Validation: Failed, certificate revoked on Fri 22 Aug 2025 08:46:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13641 (0x3549)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:11 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=DDA45C525B23750A4A2712190A828BAAACEC900D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:40:74:a5:42:de:5a:ab:cd:f2:0a:44:85:c5:
3d:73:9c:35:f6:a7:ff:d5:34:af:e4:fa:7b:ed:00:
9a:d2:a9:82:95:46:51:5e:d4:bb:07:08:6f:7e:e3:
2d:7a:50:d7:83:3a:fb:07:24:a6:20:7a:fd:7c:0e:
a1:99:01:6b:f0:71:87:e7:56:e1:31:85:31:80:dc:
ec:f6:a8:53:cb:88:1a:da:cc:a5:41:c0:bf:a3:f0:
ce:7c:94:2e:75:5c:70:e0:5a:d1:01:bb:89:4d:d2:
b1:8b:6b:d9:6a:d1:34:6e:9d:85:ec:37:77:5d:03:
a3:2a:9a:8c:44:fd:f3:a7:30:a3:f7:f2:ee:c1:77:
e8:39:c7:d3:8e:11:5a:ee:ed:99:c6:6d:a5:c2:95:
ae:a5:35:a8:54:42:a0:7a:95:d4:aa:e7:86:b7:ac:
ed:79:93:05:4f:51:71:74:93:0f:a3:a3:f7:69:9f:
15:90:20:69:b4:31:0e:16:0f:06:8a:09:a7:d0:01:
e1:f8:7e:57:e4:7c:21:46:3a:d3:02:cb:9f:f0:0a:
bc:04:de:26:ed:82:72:f1:29:fe:9d:b8:9d:1b:88:
ba:5f:01:71:f5:c6:4b:03:74:c4:d6:ec:49:3a:71:
6f:f8:9f:4f:ae:13:df:61:f3:10:8f:bd:5f:d5:77:
54:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A4:5C:52:5B:23:75:0A:4A:27:12:19:0A:82:8B:AA:AC:EC:90:0D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3aRcUlsjdQpKJxIZCoKLqqzskA0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.0.0/15
Signature Algorithm: sha256WithRSAEncryption
60:a3:82:35:18:82:9a:81:a9:f8:9b:84:81:ab:a9:11:aa:94:
1d:21:4d:df:43:24:57:ce:41:8c:5c:63:61:c5:f2:de:15:97:
3d:99:e7:3e:3c:2a:a4:25:55:c6:e7:9d:9e:d3:c9:bd:56:e9:
6f:65:76:b0:10:b9:cb:d3:62:d7:8a:96:61:55:12:f8:70:64:
db:f9:f5:88:fd:e2:2b:2c:d6:25:aa:83:06:e4:4a:56:da:38:
67:6e:74:27:45:f4:46:ea:be:cd:7a:7f:4f:70:9a:aa:ca:c9:
8a:21:25:da:ac:87:31:66:14:8d:47:ea:b1:a0:56:13:de:fc:
11:07:e9:30:6f:8f:4b:02:62:b4:5b:05:b0:3c:7d:e9:e0:46:
9b:9b:7a:1d:70:91:c8:cf:36:dd:9c:43:bf:8b:f9:2f:f7:07:
1c:25:80:ad:e3:ba:b0:af:3b:41:21:7e:a1:6d:9d:74:03:80:
d9:3e:65:08:71:6b:ad:f7:7f:23:1f:69:89:28:e3:12:10:27:
75:af:d3:4f:2a:3e:b9:74:41:0a:30:a1:45:1e:fe:63:67:ca:
a2:90:8b:e8:85:ed:a8:00:b8:5a:45:c3:b4:53:0d:7a:c4:2a:
e2:66:8f:94:34:7d:a4:c5:9c:52:4c:7e:52:12:40:c1:ab:69:
5f:a1:0a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:28:40 2025 by rpki-client