Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FNDJ0jwGT2UzWzsBM8SHLPGmDUQ.roa
File: FNDJ0jwGT2UzWzsBM8SHLPGmDUQ.roa (raw, json)
Hash identifier: lgWtiXRJOpu3nRNp94rwC8UNZcwrCPmPYSFPhViYULg=
Subject key identifier: 14:D0:C9:D2:3C:06:4F:65:33:5B:3B:01:33:C4:87:2C:F1:A6:0D:44
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 33C0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FNDJ0jwGT2UzWzsBM8SHLPGmDUQ.roa
Signing time: Mon 10 Feb 2025 13:51:44 +0000
ROA not before: Mon 10 Feb 2025 13:51:44 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 211.76.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Aug 2025 08:45:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13248 (0x33c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:51:44 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=14D0C9D23C064F65335B3B0133C4872CF1A60D44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c7:1c:b3:66:98:7f:83:fd:c1:60:88:c9:31:
2e:a6:d6:1c:db:80:b1:28:8f:d8:2a:2d:f2:5a:11:
87:fd:05:32:56:36:de:c9:99:18:1e:d1:bf:9b:b8:
07:20:f9:2a:77:7c:89:54:7b:13:34:f6:be:05:3b:
1b:cc:55:be:41:c5:97:92:e4:ef:ed:c5:70:07:08:
2c:81:2e:84:3a:0e:0d:82:ee:58:57:66:8e:2c:09:
9d:ae:63:c0:e5:28:55:fe:f3:e7:a8:a8:bc:1c:17:
1e:63:01:8f:7d:1c:88:80:e0:1b:09:30:06:b1:0a:
f3:f1:0f:eb:95:37:44:ab:74:7d:bd:21:2c:8e:e0:
69:87:54:32:a2:fb:3e:28:3b:5d:28:3b:a5:1c:2e:
59:5a:8a:b2:95:ce:b3:b7:70:9e:97:b1:76:2f:fd:
b1:9e:fb:ee:cd:02:54:59:b2:21:d5:ed:60:e2:a0:
1a:54:4e:2c:c7:30:fc:ab:c3:46:18:e2:79:5f:0c:
10:b0:a6:cd:bd:6b:ca:9f:79:6e:52:cd:da:df:7a:
03:95:0f:ea:5f:8d:10:5b:de:b4:fa:a0:5e:e0:fc:
f2:7f:f6:dc:08:b4:03:57:f0:97:2e:ed:4c:09:1a:
2d:d7:b7:18:02:bf:39:d7:9e:82:f6:b0:4f:97:90:
62:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D0:C9:D2:3C:06:4F:65:33:5B:3B:01:33:C4:87:2C:F1:A6:0D:44
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FNDJ0jwGT2UzWzsBM8SHLPGmDUQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.124.0/24
Signature Algorithm: sha256WithRSAEncryption
af:49:b4:07:ef:c6:66:4f:76:f8:5f:c2:98:e8:19:15:bf:5c:
35:63:c0:63:db:c0:68:9b:0e:65:43:df:50:0b:54:df:4c:91:
f1:96:55:d9:94:e3:c3:56:64:85:73:63:84:97:c6:02:c3:e1:
7f:85:74:0e:3e:bb:1b:9f:b3:6f:dd:ee:fb:98:07:41:bc:d7:
83:8d:bc:cb:e5:4a:c0:0c:ae:c2:da:70:90:5d:15:0e:6a:5c:
82:1e:63:34:36:6d:61:71:01:01:a6:ed:de:26:4c:ac:a2:7f:
8e:9d:26:38:12:0d:4a:60:53:e5:85:4a:f2:d0:e6:af:1d:6e:
b7:74:36:56:70:4c:26:f7:85:1d:f7:a4:f3:a8:a7:66:75:89:
6b:42:69:e5:38:06:59:fa:ac:92:90:13:46:63:1e:c4:c5:95:
49:82:f3:d2:b8:90:29:49:77:bd:f5:a3:04:ef:ff:e3:e3:11:
2b:af:09:48:e4:8e:56:4b:81:41:88:ca:9f:23:bf:da:2f:0c:
c4:50:42:bf:96:38:fa:8a:50:4f:01:4b:d3:e5:60:d3:03:7a:
f0:d3:42:51:b6:2d:73:22:53:77:00:c4:4d:07:46:03:5d:4d:
2a:b0:48:f9:3a:50:ba:a6:43:c6:4d:ef:66:ad:39:54:90:13:
bc:42:74:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:41:49 2025 by rpki-client