Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ijv9fS64_e7RrObY2KcvsCmVejE.roa
File: ijv9fS64_e7RrObY2KcvsCmVejE.roa (raw, json)
Hash identifier: Yp1zYVXdyc37HwH4CTz52Ag7XRldodf5MLHTRhkuSto=
Subject key identifier: 8A:3B:FD:7D:2E:B8:FD:EE:D1:AC:E6:D8:D8:A7:2F:B0:29:95:7A:31
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 34B4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ijv9fS64_e7RrObY2KcvsCmVejE.roa
Signing time: Mon 10 Feb 2025 13:52:38 +0000
ROA not before: Mon 10 Feb 2025 13:52:38 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 211.76.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Aug 2025 08:46:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13492 (0x34b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:38 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=8A3BFD7D2EB8FDEED1ACE6D8D8A72FB029957A31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:66:54:91:8e:42:09:9a:2b:96:19:22:6c:5c:
eb:99:0d:6f:19:80:d9:1a:08:b3:78:60:e9:00:69:
85:6e:ea:ff:91:87:0e:87:e2:bf:b7:2c:d7:1e:aa:
ea:4f:33:79:16:d3:37:6e:52:79:78:4c:28:08:29:
79:b6:8a:8b:a8:da:5d:62:a5:79:33:67:7c:44:ec:
c1:d0:7a:c5:a2:09:98:c4:6c:98:2b:7a:63:cb:09:
68:7f:50:f2:5d:0a:dd:c3:b9:f6:c8:dd:dd:82:9e:
45:0b:a9:bf:f0:9d:b9:9c:15:0a:d1:8e:65:7a:be:
85:b4:36:ed:fc:fa:84:c4:ed:11:22:a6:b7:5e:26:
a3:40:37:44:e4:40:89:e6:a6:6a:f3:d9:2e:5a:99:
11:ed:b6:a5:ed:ac:8b:46:6b:ae:a4:9e:dc:87:18:
7a:0f:29:00:04:8d:fc:ed:8b:5b:d9:34:4d:05:79:
5e:7b:8a:86:45:2a:1f:55:2d:f3:da:89:6a:05:ee:
e3:44:52:05:6c:1a:2d:7a:e8:d7:c6:95:13:5b:4a:
b0:b1:42:5d:e5:e4:98:4d:1f:bd:54:a5:1e:7b:c5:
31:cc:b7:52:c8:71:1a:79:a3:01:35:9c:75:2a:05:
72:17:01:32:d4:09:9e:b0:9a:72:6e:19:dd:75:85:
e1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3B:FD:7D:2E:B8:FD:EE:D1:AC:E6:D8:D8:A7:2F:B0:29:95:7A:31
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ijv9fS64_e7RrObY2KcvsCmVejE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.115.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:9c:87:9a:4f:79:77:5e:f0:e8:68:87:df:73:d3:11:dc:2b:
b2:6f:85:47:83:d9:e2:eb:ce:cf:de:3a:03:f9:76:99:49:d3:
45:1a:f3:6b:68:16:22:73:06:74:f8:1d:9e:18:e0:d9:d3:aa:
08:cb:36:54:ca:2b:ab:df:4e:59:9a:0a:ee:26:27:ed:e7:ac:
9c:59:2c:00:7d:62:b8:77:c6:7f:72:bf:b5:dc:02:71:8a:ff:
ee:f4:60:0e:20:41:3c:83:2e:85:0d:22:98:8a:6f:8f:bd:24:
f0:c7:67:6d:bb:95:70:ed:70:22:fc:6d:8a:13:15:43:85:57:
82:a5:57:7b:c8:bf:d5:e8:60:ae:09:f3:46:cb:a9:09:35:73:
da:fc:c0:a7:66:84:b8:02:80:5a:3d:87:28:1d:29:42:88:4a:
81:bc:e2:5a:d1:e3:de:2e:4e:8a:c7:f0:f0:f9:79:48:8c:53:
a8:a5:2b:60:ea:0b:56:02:d8:cd:00:28:a3:35:82:35:f4:54:
df:44:0b:78:09:ea:6a:7f:1a:2a:98:1d:b1:6f:4d:0b:d7:54:
f4:fa:67:f2:9c:57:89:bd:70:aa:7d:00:ed:9a:41:96:26:15:
41:92:41:32:70:83:e8:c9:5f:df:64:ea:1f:d0:fd:33:99:65:
e4:86:ce:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:29:35 2025 by rpki-client