Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gwkRtei3jkpf8XAWTJls5RYU7nw.roa
File: gwkRtei3jkpf8XAWTJls5RYU7nw.roa (raw, json)
Hash identifier: Edpa1+V++Ox3X0uNIuS8z5MJdBEsEOigaNE1H4LP6bY=
Subject key identifier: 83:09:11:B5:E8:B7:8E:4A:5F:F1:70:16:4C:99:6C:E5:16:14:EE:7C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 36BC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gwkRtei3jkpf8XAWTJls5RYU7nw.roa
Signing time: Mon 10 Feb 2025 13:54:37 +0000
ROA not before: Mon 10 Feb 2025 13:54:37 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 118.232.244.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 22 Aug 2025 08:48:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14012 (0x36bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:37 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=830911B5E8B78E4A5FF170164C996CE51614EE7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:de:8f:40:6a:33:8c:11:35:d8:71:b3:d1:d4:
6d:be:1f:7a:8e:49:10:4d:97:61:69:20:0d:d9:ed:
7f:4a:7b:7e:ce:a6:e5:dc:49:ce:a4:6c:cd:46:44:
58:89:e1:f1:8f:bf:88:57:fe:63:47:fb:3f:fd:15:
66:77:33:27:2f:c5:59:9b:55:21:72:08:63:0f:27:
f4:f0:99:27:c5:15:89:a9:cb:02:cb:49:30:fe:50:
a7:33:95:98:ef:99:fa:b7:69:36:a9:16:73:9d:87:
1a:6a:6c:40:f9:64:17:ec:00:a9:6c:eb:bd:76:ca:
fb:70:47:b0:9b:6d:94:09:b5:af:cd:9e:4e:26:ac:
c2:da:bf:b7:1d:bb:7c:c7:2f:81:61:49:4d:d9:00:
85:66:81:ba:6f:44:27:bb:c4:af:a5:5b:09:1a:bb:
c9:87:68:05:a0:20:ee:83:34:f0:f4:88:bf:7b:c7:
51:cc:8c:db:d3:d6:73:39:b0:f1:3d:39:09:e7:b7:
d7:c0:d3:0e:96:cd:fa:9b:cd:f9:f4:2e:d2:2c:b7:
75:52:5a:6d:c3:4c:c3:66:94:f1:6a:56:54:95:9c:
85:52:eb:75:0b:ad:48:90:71:0b:53:64:dc:87:28:
03:11:ac:d3:7b:3d:df:2e:fc:0d:f2:d4:03:ba:e9:
39:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:09:11:B5:E8:B7:8E:4A:5F:F1:70:16:4C:99:6C:E5:16:14:EE:7C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gwkRtei3jkpf8XAWTJls5RYU7nw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.244.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:4a:c8:52:3e:cb:c1:01:55:dd:c4:cd:0f:94:75:5c:61:65:
35:8b:ab:16:d0:b3:d7:dc:68:ae:03:c7:99:6e:c8:10:20:57:
06:ac:de:33:fd:62:ab:02:8e:7b:b6:6c:23:5e:d6:d9:8d:64:
d5:52:6d:28:97:2d:fd:b3:c9:71:56:45:70:08:5c:7a:79:38:
ca:97:6a:32:9c:87:bd:14:8b:98:0a:fa:11:ab:69:4c:24:a7:
f2:30:d9:a7:b2:79:c9:96:73:79:f3:6a:3a:48:07:77:02:44:
80:9b:aa:20:d8:c8:25:9a:89:ed:12:58:04:fd:4b:f2:77:c4:
7b:55:32:83:ba:8f:6b:20:fd:ab:b8:3c:21:42:66:72:8e:7a:
da:c7:98:bc:57:76:0c:6e:89:7f:49:5a:f5:57:81:d4:14:0a:
e2:1c:e2:fa:37:3a:41:23:cd:36:64:ac:b7:e0:28:86:38:8a:
6b:f7:19:dc:f1:b4:84:a6:bb:fe:28:c2:df:5f:61:5f:df:bb:
52:99:78:b0:8a:06:79:4d:89:ca:f3:29:0c:e8:66:4e:be:80:
56:4e:f3:13:1e:bd:fa:5c:a6:7f:84:e7:18:0c:68:1b:05:ca:
24:05:83:9f:c8:0a:26:54:72:1d:ef:27:e0:dc:f8:b9:5e:48:
f6:cf:a2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:26:18 2025 by rpki-client