Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CfHXEnwKpJXcPY6UyEwKsOURW7w.roa
File: CfHXEnwKpJXcPY6UyEwKsOURW7w.roa (raw, json)
Hash identifier: A9IVYx5W2AchPvfMZNUm/YCAWKf87IoL8j0N5JcsZmk=
Subject key identifier: 09:F1:D7:12:7C:0A:A4:95:DC:3D:8E:94:C8:4C:0A:B0:E5:11:5B:BC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3481
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CfHXEnwKpJXcPY6UyEwKsOURW7w.roa
Signing time: Mon 10 Feb 2025 13:52:26 +0000
ROA not before: Mon 10 Feb 2025 13:52:26 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 180.176.184.0/21 maxlen: 22
Validation: Failed, certificate revoked on Fri 22 Aug 2025 08:44:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13441 (0x3481)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:26 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=09F1D7127C0AA495DC3D8E94C84C0AB0E5115BBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bc:d0:b0:e0:f1:93:ba:e1:50:ed:6f:01:83:
45:53:de:75:2a:24:09:23:a5:67:81:de:bf:a7:de:
fe:ef:54:27:40:38:16:50:32:37:d7:a1:43:8c:87:
9a:d4:5b:f1:d5:7f:d3:dc:2a:1b:53:a4:56:72:a3:
96:22:3c:99:ba:e7:1a:29:93:36:19:7d:3d:2b:bf:
87:28:f7:38:50:7b:57:46:81:c5:34:ee:88:d6:4f:
a7:5e:49:ab:8a:50:2f:4b:05:32:44:31:47:9f:11:
2d:06:ae:8a:d5:15:c3:a7:d0:f7:8f:68:f1:40:52:
85:d6:37:17:0a:ca:a9:0b:90:03:52:86:d0:f7:b3:
8b:3b:9e:8c:be:49:b6:d7:47:8c:4d:b3:86:5e:49:
c4:42:0c:4b:73:8b:df:ec:1a:32:18:16:54:e2:74:
f9:ac:01:64:61:76:fe:be:2a:93:2c:16:84:54:4d:
3a:a1:7b:69:52:8d:a3:2c:43:15:0e:a2:a8:9f:1a:
5c:51:4a:7c:36:02:7b:b7:d9:03:b5:7e:92:07:2b:
bf:7b:25:fa:af:85:a1:cb:a1:45:c6:15:c8:98:ed:
07:19:65:36:ac:d6:08:63:f2:35:3e:11:0d:cf:25:
a2:19:7a:7f:b2:00:6c:e2:21:d7:fa:e1:63:1e:c0:
dc:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F1:D7:12:7C:0A:A4:95:DC:3D:8E:94:C8:4C:0A:B0:E5:11:5B:BC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CfHXEnwKpJXcPY6UyEwKsOURW7w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.184.0/21
Signature Algorithm: sha256WithRSAEncryption
9c:fa:2d:23:c0:9f:27:0b:5a:23:b7:b9:9d:47:ca:92:45:0b:
29:4d:e1:c5:24:e2:25:63:e5:89:59:5a:55:b2:9b:b0:f5:d8:
c0:4e:7d:b8:91:70:9c:94:d6:bb:fd:1c:85:5d:e1:dc:e1:bf:
b2:94:d0:22:5c:36:c1:61:9e:68:45:68:25:88:b7:02:fd:54:
66:c2:23:d7:1c:6a:e2:aa:17:17:6c:40:86:2a:26:9d:8c:02:
5e:67:20:ee:62:59:01:e0:0f:4f:9f:90:b1:8f:ca:86:55:8e:
ea:b7:32:87:c0:a9:ba:b5:65:4e:3a:15:fc:53:80:a3:73:36:
2e:41:fe:7d:be:9a:95:db:0b:40:09:8f:91:3d:12:eb:93:d4:
89:7f:e0:f8:0b:f3:01:ac:34:80:67:f3:1a:17:e5:78:92:cb:
2e:de:68:1e:5d:e1:c6:68:c3:2f:97:30:23:be:ed:ff:60:91:
8e:a5:76:d6:e7:4b:a6:82:9d:0e:f0:aa:73:b1:c0:6c:cd:fa:
72:b1:9e:43:34:94:9e:4f:12:ce:49:c5:b8:29:99:22:15:ed:
78:52:6c:5b:8b:c1:40:e6:60:94:62:5d:56:22:bb:f9:7b:8a:
b2:35:7d:d6:ae:b6:2a:21:f8:4a:b8:d0:99:28:50:82:a0:cc:
53:b9:04:cf
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICNIEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzUyMjZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA5RjFENzEyN0MwQUE0
OTVEQzNEOEU5NEM4NEMwQUIwRTUxMTVCQkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBvNCw4PGTuuFQ7W8Bg0VT3nUqJAkjpWeB3r+n3v7vVCdAOBZQ
MjfXoUOMh5rUW/HVf9PcKhtTpFZyo5YiPJm65xopkzYZfT0rv4co9zhQe1dGgcU0
7ojWT6deSauKUC9LBTJEMUefES0GrorVFcOn0PePaPFAUoXWNxcKyqkLkANShtD3
s4s7noy+SbbXR4xNs4ZeScRCDEtzi9/sGjIYFlTidPmsAWRhdv6+KpMsFoRUTTqh
e2lSjaMsQxUOoqifGlxRSnw2Anu32QO1fpIHK797JfqvhaHLoUXGFciY7QcZZTas
1ghj8jU+EQ3PJaIZen+yAGziIdf64WMewNw9AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUCfHXEnwKpJXcPY6UyEwKsOURW7wwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0NmSFhFbndLcEpYY1BZNlV5
RXdLc09VUlc3dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
sLgwDQYJKoZIhvcNAQELBQADggEBAJz6LSPAnycLWiO3uZ1HypJFCylN4cUk4iVj
5YlZWlWym7D12MBOfbiRcJyU1rv9HIVd4dzhv7KU0CJcNsFhnmhFaCWItwL9VGbC
I9ccauKqFxdsQIYqJp2MAl5nIO5iWQHgD0+fkLGPyoZVjuq3MofAqbq1ZU46FfxT
gKNzNi5B/n2+mpXbC0AJj5E9EuuT1Il/4PgL8wGsNIBn8xoX5XiSyy7eaB5d4cZo
wy+XMCO+7f9gkY6ldtbnS6aCnQ7wqnOxwGzN+nKxnkM0lJ5PEs5JxbgpmSIV7XhS
bFuLwUDmYJRiXVYiu/l7irI1fdautioh+Eq40JkoUIKgzFO5BM8=
-----END CERTIFICATE-----
Generated at Sun Aug 24 01:28:12 2025 by rpki-client