Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KgbSUmnWprjQdijhrdlPwWzVG44.roa
File: KgbSUmnWprjQdijhrdlPwWzVG44.roa (raw, json)
Hash identifier: u6PVRxNlkquOZjMIVqqxAUIsEwhvRF36NkYZurrym9E=
Subject key identifier: 2A:06:D2:52:69:D6:A6:B8:D0:76:28:E1:AD:D9:4F:C1:6C:D5:1B:8E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 363C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KgbSUmnWprjQdijhrdlPwWzVG44.roa
Signing time: Mon 10 Feb 2025 13:54:07 +0000
ROA not before: Mon 10 Feb 2025 13:54:07 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 123.195.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Aug 2025 08:47:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13884 (0x363c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:07 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=2A06D25269D6A6B8D07628E1ADD94FC16CD51B8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9a:34:d6:46:7c:cf:87:9d:88:4a:c1:69:f5:
be:07:05:9f:26:1e:b0:d7:e1:16:6f:ee:e7:7e:ca:
ed:67:c4:09:0c:e1:c0:89:20:0b:9d:6f:0e:ce:9e:
72:eb:90:70:d4:03:aa:9e:b9:c9:18:be:4a:10:50:
72:a3:77:ee:78:69:a4:d0:05:55:09:d4:b6:39:aa:
4c:a1:78:d6:6a:7e:81:b5:0d:88:c1:5e:e1:b0:ae:
38:9b:d5:b2:51:d8:40:b2:13:e9:00:71:20:a7:8c:
0b:76:44:16:ab:0a:1f:f4:d0:dc:9d:70:af:2c:25:
60:45:44:c8:78:87:85:48:94:65:27:c3:73:bc:df:
c7:3c:cf:a5:6e:30:e3:fa:06:c0:ea:35:dd:69:d3:
1d:0b:19:1f:da:86:79:b7:f6:45:d9:0d:11:62:92:
e1:11:32:00:04:93:53:87:fe:ab:21:ab:d5:6e:f3:
c4:b2:af:28:e5:ab:17:27:2c:7c:c6:5b:b3:04:7d:
bf:2a:9d:4b:3f:33:77:24:71:03:10:37:5d:d3:4c:
5e:21:88:48:db:a7:28:ab:9b:aa:22:c7:0b:65:80:
49:13:f2:a1:0e:d0:f9:aa:f3:47:17:b2:85:6a:fd:
38:2c:0a:6e:ab:97:5c:c5:26:ea:45:90:ae:6e:7c:
3b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:06:D2:52:69:D6:A6:B8:D0:76:28:E1:AD:D9:4F:C1:6C:D5:1B:8E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KgbSUmnWprjQdijhrdlPwWzVG44.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.236.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:08:fe:4a:d9:88:5f:91:85:04:48:54:c1:6c:be:bf:be:b9:
98:c7:fc:b2:09:5c:b0:c7:02:fa:8a:4e:7d:99:f9:17:7a:cb:
2b:35:ff:05:73:46:43:5b:2a:e2:0f:d0:0c:6f:67:43:93:fd:
56:eb:38:e6:34:e6:3b:3c:02:6b:04:4a:15:cc:d2:bb:6d:01:
53:f2:c2:58:f0:1c:43:9c:2c:5e:71:b9:ea:27:b1:eb:60:fc:
79:f1:9e:f4:96:4c:3c:72:da:07:61:80:be:56:cc:ec:27:f2:
ad:4e:c2:b0:48:9f:33:cb:b8:42:e3:59:c4:bc:6b:d0:16:6d:
6f:c9:fa:a6:60:5e:d1:9e:c7:8a:a3:b2:c6:b7:db:2b:57:c1:
97:4c:87:95:3f:6c:52:a4:19:54:c7:58:9a:d2:28:9f:f5:26:
21:12:06:4e:79:0f:f5:86:46:f7:3e:25:c5:9a:30:90:b1:89:
db:c2:3f:f5:cd:90:9f:b1:84:43:be:35:c0:2e:49:f4:d9:d2:
9c:e6:d1:71:92:18:61:5d:0a:42:f8:a6:aa:27:c0:6e:f4:b3:
04:cf:d6:02:05:60:31:f2:99:57:59:c7:51:11:dd:d7:b8:c0:
05:c1:b0:a7:eb:4b:ef:26:65:93:87:9a:0f:7b:65:f2:81:aa:
31:d5:80:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:42:10 2025 by rpki-client