Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASNET/9ETl0qf4dtBMGDPkw5TMdaBnoks.roa
File: 9ETl0qf4dtBMGDPkw5TMdaBnoks.roa (raw, json)
Hash identifier: xm9+e5ND+YURgppgI9azco0LnjXudQiPlMxZraQqM4I=
Subject key identifier: F4:44:E5:D2:A7:F8:76:D0:4C:18:33:E4:C3:94:CC:75:A0:67:A2:4B
Certificate issuer: /CN=70984F008CA28F6475DB426353BFD1C433D8BC1A
Certificate serial: 0C46
Authority key identifier: 70:98:4F:00:8C:A2:8F:64:75:DB:42:63:53:BF:D1:C4:33:D8:BC:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/9ETl0qf4dtBMGDPkw5TMdaBnoks.roa
Signing time: Mon 26 Aug 2024 05:09:42 +0000
ROA not before: Mon 26 Aug 2024 05:09:42 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9264
IP address blocks: 2403:c240::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3142 (0xc46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70984F008CA28F6475DB426353BFD1C433D8BC1A
Validity
Not Before: Aug 26 05:09:42 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F444E5D2A7F876D04C1833E4C394CC75A067A24B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8f:a6:ae:56:e4:dd:69:3e:1d:b0:fb:bc:f7:
66:19:fb:67:ae:22:d5:4b:f2:69:80:9e:e8:b6:8e:
aa:27:cd:8a:b5:d5:c7:b4:fd:e5:e9:09:af:ad:66:
7b:b4:4a:ca:ad:6b:1f:df:14:0a:b5:ae:e8:b8:3d:
1f:f3:01:02:47:0f:b6:91:a7:07:0a:57:a5:26:a0:
55:f0:98:1c:11:97:7d:e0:3e:77:d6:b8:81:f6:b4:
8e:a8:6f:25:42:01:ba:e6:ea:24:79:59:4e:fc:39:
1b:a4:7e:d2:69:36:c8:64:89:0a:6b:e8:9e:c8:7c:
d6:21:c0:d9:c3:36:c2:d9:e3:28:84:ca:14:4f:7a:
c7:d5:ef:fa:d9:52:83:24:8e:b5:4b:81:ec:e5:63:
e8:03:47:06:ef:b1:76:9f:46:c0:35:b3:85:73:c0:
cf:38:48:16:b9:8d:8f:d9:0c:5e:ca:8c:7e:80:73:
b8:cd:b4:2a:7f:25:99:4e:43:34:7b:b4:e2:b8:9a:
02:3f:60:02:01:19:90:5d:f7:21:bc:ba:10:dd:75:
9c:de:9b:9a:dd:2b:d2:f7:10:72:f3:30:51:99:79:
5e:97:dc:63:a0:af:e9:ed:00:a9:24:1f:4c:79:7b:
36:2e:ef:ed:ab:ed:7c:a0:73:d5:43:4e:2d:92:99:
0b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:44:E5:D2:A7:F8:76:D0:4C:18:33:E4:C3:94:CC:75:A0:67:A2:4B
X509v3 Authority Key Identifier:
keyid:70:98:4F:00:8C:A2:8F:64:75:DB:42:63:53:BF:D1:C4:33:D8:BC:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/9ETl0qf4dtBMGDPkw5TMdaBnoks.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:c240::/32
Signature Algorithm: sha256WithRSAEncryption
d8:9e:96:78:b0:e0:6f:58:ea:ae:72:59:5a:ac:a0:43:39:e9:
19:9b:8d:68:b4:c2:9b:76:22:18:57:99:46:39:2c:af:71:ed:
b1:20:52:9b:0b:e7:38:8c:54:8f:e8:ad:65:2f:76:35:32:c4:
fd:ed:40:84:59:19:e0:38:de:c4:ac:ff:e2:e5:44:75:ea:c8:
24:7c:6c:7a:c5:b4:42:99:30:b1:39:dc:e4:7b:f2:7e:86:23:
87:b6:ad:a6:18:aa:c7:a0:33:a7:46:76:fa:89:e4:d7:cf:c7:
1c:7b:48:d5:27:12:cb:59:e7:38:ae:58:f4:42:c5:6b:80:51:
19:89:84:e2:2c:24:91:2e:19:1d:a9:01:2d:41:4a:28:91:b9:
3c:a5:d8:31:e3:bf:94:a9:e0:c1:32:4a:d2:c8:00:37:e9:20:
33:65:a7:18:12:f9:8e:68:2e:3e:2e:88:c1:5d:c8:de:de:9a:
40:da:2a:20:34:7d:ba:27:10:63:dd:97:44:f8:23:1d:e5:ba:
72:c9:17:54:be:4f:64:00:23:4e:bf:46:f9:10:4f:e3:e2:e3:
0d:72:67:73:cc:d3:ef:0a:da:c1:04:b8:2f:96:b0:bb:cb:6f:
02:97:af:14:0b:04:e0:08:65:06:bf:36:6a:b4:2c:87:cb:b6:
c0:97:ce:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:10:35 2025 by rpki-client