Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mbPg6bgUlf2eYy8DXOAnr0444Vs.roa
File: mbPg6bgUlf2eYy8DXOAnr0444Vs.roa (raw, json)
Hash identifier: LrKkWXw+47rtw0gXg65A9d/fcXArT//en7wdxzeUzkw=
Subject key identifier: 99:B3:E0:E9:B8:14:95:FD:9E:63:2F:03:5C:E0:27:AF:4E:38:E1:5B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 34EE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mbPg6bgUlf2eYy8DXOAnr0444Vs.roa
Signing time: Mon 10 Feb 2025 13:52:50 +0000
ROA not before: Mon 10 Feb 2025 13:52:50 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 123.193.160.0/19 maxlen: 22
Validation: Failed, certificate revoked on Fri 22 Aug 2025 08:46:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13550 (0x34ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:50 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=99B3E0E9B81495FD9E632F035CE027AF4E38E15B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:69:12:ca:4a:95:51:79:cf:76:d5:03:f0:08:
88:ab:e6:c8:ed:99:70:cf:6b:b6:c6:ab:21:82:7b:
47:67:3f:b5:ed:e6:a3:2d:ef:86:42:13:9b:e1:a4:
58:cf:1a:f1:4b:a1:61:45:cd:64:2f:a1:d0:56:c9:
ba:ab:fb:9d:26:12:4f:63:53:38:4d:a3:a5:b0:c2:
80:82:93:af:6a:8f:3d:f8:74:9b:32:b4:80:b3:73:
41:be:c8:4e:c0:2c:21:2b:a7:96:dc:9d:a2:ae:dc:
48:89:22:e7:1a:a4:39:fc:c8:ec:9f:d5:0d:5e:34:
10:74:d1:a1:3f:e2:96:7f:40:95:c3:e4:40:cf:20:
25:f5:d3:ac:6d:df:de:68:ec:63:2d:50:33:e9:b2:
36:3d:ad:c9:65:50:38:3f:e6:6a:d3:cb:38:19:62:
26:09:07:ba:f3:d3:5d:06:37:28:33:93:e8:17:09:
56:a8:72:f0:f4:30:98:cd:25:5e:07:c7:ee:14:34:
67:1c:9e:a7:c6:ff:c9:ff:46:46:c6:cc:6d:fe:d7:
1f:42:72:ec:16:f8:ef:4d:34:4c:4e:9d:e8:d5:5d:
f2:50:4c:64:cb:86:67:87:92:a9:c6:48:3f:37:f4:
c8:ed:42:7c:c0:5e:3d:90:d5:1c:c5:c8:23:0a:71:
2f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B3:E0:E9:B8:14:95:FD:9E:63:2F:03:5C:E0:27:AF:4E:38:E1:5B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mbPg6bgUlf2eYy8DXOAnr0444Vs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.160.0/19
Signature Algorithm: sha256WithRSAEncryption
ac:5b:de:44:df:ac:cc:7c:a9:f2:b9:26:87:e4:04:a5:d7:00:
c2:c2:70:cc:a1:04:d3:4b:59:6f:a6:86:16:5b:59:51:6e:b9:
94:b4:13:06:a0:17:b5:b9:c7:0f:ed:6c:c1:6e:a4:c1:65:c5:
f1:e7:a2:d7:59:99:7e:12:30:61:b2:97:ce:43:2b:ba:8a:23:
dc:04:c1:cb:e2:88:41:52:ee:3b:56:77:1d:46:dc:f0:b3:fa:
81:b9:3c:f4:1b:55:c9:af:63:e0:ea:f7:c2:5d:7b:e2:a6:64:
a9:3d:28:d8:ed:ed:74:30:06:34:66:a2:07:ac:e2:df:53:fb:
fc:17:bf:9d:63:ea:16:33:a5:27:14:1c:10:69:d8:ff:16:19:
b6:c4:f9:af:0d:c2:cb:54:60:37:30:2b:b6:0b:4d:d1:ce:3e:
67:f3:63:a7:af:fc:bb:03:56:90:63:9c:72:ae:fa:d4:f6:94:
40:2d:39:ae:a8:85:e9:a0:ba:e9:41:4e:32:bb:45:14:b1:f2:
c5:04:f3:ca:84:4f:0d:30:fc:14:c5:06:59:3c:f2:ff:83:d9:
bc:50:3c:cc:b7:5a:ea:2f:f3:b6:76:b5:33:a0:42:11:9d:ec:
db:ed:9a:9c:c9:ff:a2:0c:6d:a3:0c:4f:be:27:e2:d5:0a:d7:
3f:9f:1d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:43:17 2025 by rpki-client