Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/ZuYfElbzREIJ-ZOsF_lXaav4mZo.roa
File: ZuYfElbzREIJ-ZOsF_lXaav4mZo.roa (raw, json)
Hash identifier: Wv3CR2J7kK3at6Wc2iPc5eJNjWRP9nJrqctgUZ7Pk1M=
Subject key identifier: 66:E6:1F:12:56:F3:44:42:09:F9:93:AC:17:F9:57:69:AB:F8:99:9A
Certificate issuer: /CN=058662B8DA05E4029F3FA4D56A5121DD4BD68989
Certificate serial: 0C2C
Authority key identifier: 05:86:62:B8:DA:05:E4:02:9F:3F:A4:D5:6A:51:21:DD:4B:D6:89:89
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BYZiuNoF5AKfP6TValEh3UvWiYk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/ZuYfElbzREIJ-ZOsF_lXaav4mZo.roa
Signing time: Fri 25 Oct 2024 03:01:05 +0000
ROA not before: Fri 25 Oct 2024 03:01:05 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 147035
IP address blocks: 2403:8ec0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3116 (0xc2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=058662B8DA05E4029F3FA4D56A5121DD4BD68989
Validity
Not Before: Oct 25 03:01:05 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=66E61F1256F3444209F993AC17F95769ABF8999A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:67:c1:06:91:28:cd:08:7b:a6:16:c1:a3:e4:
e1:d4:01:9b:6d:fb:04:90:40:62:ed:fe:86:2d:86:
f4:54:9d:83:44:91:30:0d:4b:ba:9f:b0:f9:df:ca:
0f:35:dc:e6:3c:1e:41:87:8e:01:59:70:d7:7c:68:
6a:e3:27:84:85:38:bb:3d:c6:85:59:fd:9f:96:74:
7e:26:9d:c8:9c:39:ae:7e:22:d4:77:80:03:2c:f2:
5d:9f:69:5e:d3:2e:5e:8b:cd:37:3e:8f:9a:f6:2c:
14:2f:57:f8:65:15:c7:f5:fc:09:b1:39:e3:d3:5a:
85:25:d8:0a:7a:c0:09:c8:78:b7:99:ee:91:57:2e:
d6:1e:e9:09:71:0b:fe:60:a8:b4:19:26:ec:dc:64:
ac:40:15:2e:08:47:cf:c7:e5:98:ac:85:7f:94:66:
8e:62:06:19:12:65:34:f2:5d:b4:43:5b:70:83:a6:
bc:1b:c2:c9:cc:66:a4:b2:f6:25:68:74:4b:17:31:
7d:71:b1:bb:1a:33:5f:dd:ea:8d:fd:3d:40:74:e9:
f6:f5:ac:a3:62:5f:8f:14:ce:26:94:d2:48:ad:30:
65:76:80:1d:f2:a3:5e:e3:54:3e:b0:26:c4:d9:25:
c1:a9:dd:1a:b5:d4:ea:fc:dd:99:b3:cf:2a:58:6a:
48:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E6:1F:12:56:F3:44:42:09:F9:93:AC:17:F9:57:69:AB:F8:99:9A
X509v3 Authority Key Identifier:
keyid:05:86:62:B8:DA:05:E4:02:9F:3F:A4:D5:6A:51:21:DD:4B:D6:89:89
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/BYZiuNoF5AKfP6TValEh3UvWiYk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BYZiuNoF5AKfP6TValEh3UvWiYk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/ZuYfElbzREIJ-ZOsF_lXaav4mZo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:8ec0::/48
Signature Algorithm: sha256WithRSAEncryption
7c:07:cb:12:0a:e1:e7:42:21:d4:cb:46:57:d9:7a:54:cc:74:
ce:41:7d:d6:c9:1d:f3:ff:9a:b3:c7:12:73:d5:cb:09:c4:1e:
4e:32:a8:29:7a:6b:67:7d:fa:bd:47:07:20:55:e9:28:62:bc:
5b:8f:49:e5:b3:78:fa:0e:f8:75:c7:12:65:d4:cf:fa:5b:f1:
1a:96:2a:c4:f5:2d:e9:34:81:24:54:a3:ae:66:00:67:8d:c4:
e4:05:ef:81:cd:5d:05:f3:3d:00:dc:37:db:f9:db:7e:ff:0f:
86:d0:03:0d:b8:6b:dc:e7:1d:aa:f3:81:57:cc:e7:f4:b3:a2:
66:3e:df:1e:00:ba:e4:2d:86:90:71:ae:78:9e:76:40:92:02:
24:6f:34:7e:fc:54:5a:87:1d:c6:88:bc:f5:36:a4:db:0b:77:
64:44:38:61:98:92:4a:91:9a:57:eb:75:2f:9e:46:99:d1:a7:
8b:85:ea:a1:65:ba:52:94:79:5f:a1:71:60:a2:ed:24:65:7d:
ee:77:57:1e:3b:9e:65:bc:c1:0b:d0:e8:c3:f5:9f:ba:5f:51:
4b:a5:b9:b8:b1:b5:6d:2d:de:cf:2f:88:75:6d:40:bd:84:93:
93:53:e8:82:67:59:b3:05:e3:40:a2:99:ea:47:0b:8a:dd:17:
92:df:1d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:41:36 2025 by rpki-client