Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3jlqxE_ZSwz4VIZ-8bpwBp8H5TI.roa
File: 3jlqxE_ZSwz4VIZ-8bpwBp8H5TI.roa (raw, json)
Hash identifier: 0jo7V/+2ptYMT279bCfQNoiu5w6QhZ9EyzUHohU+DWw=
Subject key identifier: DE:39:6A:C4:4F:D9:4B:0C:F8:54:86:7E:F1:BA:70:06:9F:07:E5:32
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 343B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3jlqxE_ZSwz4VIZ-8bpwBp8H5TI.roa
Signing time: Mon 10 Feb 2025 13:52:11 +0000
ROA not before: Mon 10 Feb 2025 13:52:11 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 118.232.0.0/18 maxlen: 18
Validation: Failed, certificate revoked on Fri 22 Aug 2025 08:44:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13371 (0x343b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:11 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=DE396AC44FD94B0CF854867EF1BA70069F07E532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:df:a6:d5:dd:eb:48:48:38:22:70:5a:60:8e:
a1:ea:5e:16:7c:b4:21:e4:ed:f0:f9:7d:13:17:ad:
57:39:6d:95:ba:dd:a7:7f:6c:10:bb:b4:ab:37:d5:
80:57:81:c8:d6:20:5e:75:43:ef:a4:dd:45:7c:a5:
b4:8f:38:eb:df:eb:07:a1:54:72:f0:5b:2d:df:36:
9b:12:75:68:3b:73:13:65:80:3e:99:b6:48:9c:94:
87:cd:57:0a:a1:30:d7:65:6b:0d:a3:3a:93:64:28:
00:3f:8f:73:b9:35:89:85:b7:ed:01:f7:c7:6d:d0:
bd:a1:b1:ab:33:d4:7f:04:d4:93:e8:6e:af:a3:41:
97:4e:a7:8e:da:7b:7d:a1:c6:5c:cb:9b:a0:c6:e9:
ec:6d:0b:d0:b0:3d:49:27:f1:15:94:20:f4:4a:b9:
7b:aa:2f:8d:66:2f:b1:2a:19:2a:2e:c1:4b:55:99:
4a:68:30:84:92:46:91:58:b1:0a:4b:b9:e8:68:a3:
9d:81:2e:47:3e:2b:12:29:da:75:13:04:43:b5:db:
55:fc:5f:fa:05:1d:7e:c2:b9:c6:97:ae:ab:fc:bf:
7a:98:44:d9:77:48:a8:cb:38:10:ac:1a:f1:8f:97:
93:2c:cf:a0:3a:c1:9e:4c:d9:74:e4:c0:52:3d:15:
33:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:39:6A:C4:4F:D9:4B:0C:F8:54:86:7E:F1:BA:70:06:9F:07:E5:32
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3jlqxE_ZSwz4VIZ-8bpwBp8H5TI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.0.0/18
Signature Algorithm: sha256WithRSAEncryption
1f:fe:5d:ce:71:eb:ab:41:96:ad:ef:82:0e:0e:d9:e7:e4:e8:
80:eb:63:ee:bb:fa:80:4c:65:48:01:b1:28:75:91:cd:02:e2:
a3:17:ae:3f:53:44:cd:34:be:a3:76:2f:8c:ef:96:59:db:ce:
63:a4:33:39:b2:b9:48:af:7b:a3:37:4f:20:6b:c9:0b:ff:ad:
33:73:f0:15:11:ab:6c:36:91:9a:ee:7d:df:7f:ec:06:eb:06:
20:83:01:6d:59:d3:91:17:2b:bf:c2:ea:32:e1:a8:cf:58:a4:
c8:2c:02:a9:5f:24:44:d5:f3:6e:81:20:fa:3b:22:db:67:59:
ad:bf:57:83:db:ee:2d:01:26:58:bf:3c:f1:3c:57:b0:03:94:
21:66:c1:77:ce:53:e3:9e:58:1e:6c:f0:fe:a4:e8:c9:52:e2:
1a:67:45:a1:a6:c6:e9:76:44:e0:6e:a7:95:05:d1:76:0c:89:
c3:38:6a:65:a6:6f:39:15:61:db:23:b5:63:2c:d7:e2:9c:c8:
bb:53:45:31:00:96:82:67:71:96:ae:8f:f2:48:2b:3c:e4:8e:
71:b4:e7:8e:17:36:66:70:d2:aa:98:44:1c:71:4a:2f:db:54:
85:87:e1:3f:38:46:6a:59:78:22:98:70:c8:ae:95:f8:02:b4:
d5:10:89:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:42:10 2025 by rpki-client