Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/vOpAEXPgkqwheuiGpVNPsiQQvuY.roa
File: vOpAEXPgkqwheuiGpVNPsiQQvuY.roa (raw, json)
Hash identifier: aXPWK0QaPm2ihvIcx1OmZa6CLFVr7Up+lYxtb3R4MJE=
Subject key identifier: BC:EA:40:11:73:E0:92:AC:21:7A:E8:86:A5:53:4F:B2:24:10:BE:E6
Certificate issuer: /CN=44F8DCF66B25B719056D1ED65C16EA9257E5553D
Certificate serial: 0C
Authority key identifier: 44:F8:DC:F6:6B:25:B7:19:05:6D:1E:D6:5C:16:EA:92:57:E5:55:3D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/vOpAEXPgkqwheuiGpVNPsiQQvuY.roa
Signing time: Tue 13 Aug 2024 04:24:02 +0000
ROA not before: Tue 13 Aug 2024 04:24:02 +0000
ROA not after: Fri 08 Aug 2025 15:30:25 +0000
asID: 152611
IP address blocks: 160.30.78.0/23 maxlen: 32
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44F8DCF66B25B719056D1ED65C16EA9257E5553D
Validity
Not Before: Aug 13 04:24:02 2024 GMT
Not After : Aug 8 15:30:25 2025 GMT
Subject: CN=BCEA401173E092AC217AE886A5534FB22410BEE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:dd:07:e8:59:a8:89:c1:4c:3a:ff:c8:04:75:
b0:0f:94:2a:22:e9:41:d8:57:4b:e0:24:0f:49:c3:
e8:7d:da:d6:f3:fa:52:49:f0:1f:11:e6:c0:a3:b6:
d7:f7:1a:ad:ad:85:d6:a4:19:48:ce:07:1b:97:e3:
59:60:23:dc:16:29:3c:75:ed:36:ff:fc:ae:30:de:
e8:f7:69:39:34:0b:16:2e:ca:1a:3d:8a:9a:93:27:
de:45:6a:2b:0c:9f:53:85:0d:05:03:0f:f8:51:98:
cc:56:1e:bc:ae:8c:52:bc:35:19:34:62:ea:2f:60:
df:6e:43:60:28:33:e1:1e:d1:b7:25:bf:fa:90:5d:
28:4c:fc:f8:d2:27:11:bb:bb:2c:e4:b9:e1:ba:c7:
4a:6b:04:a7:d9:64:14:57:b0:23:56:94:b6:95:f8:
3e:8c:db:4a:49:24:fa:1a:de:0b:90:b9:53:4e:01:
43:c1:9b:fd:16:85:17:c4:43:56:7f:e1:3c:e2:78:
e7:e7:aa:8c:0c:0e:28:7f:7f:16:a5:d3:77:86:99:
90:ff:e6:b1:92:8b:ab:cd:d0:92:43:fc:07:a4:70:
f8:00:1d:ea:e3:b7:39:c6:9e:b0:8e:69:ac:5f:fb:
a9:d7:61:5d:c4:05:df:14:e2:1b:9b:28:f7:3e:c8:
9d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:EA:40:11:73:E0:92:AC:21:7A:E8:86:A5:53:4F:B2:24:10:BE:E6
X509v3 Authority Key Identifier:
keyid:44:F8:DC:F6:6B:25:B7:19:05:6D:1E:D6:5C:16:EA:92:57:E5:55:3D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/RPjc9msltxkFbR7WXBbqklflVT0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/vOpAEXPgkqwheuiGpVNPsiQQvuY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.78.0/23
Signature Algorithm: sha256WithRSAEncryption
36:5d:03:1d:75:67:95:fa:61:cd:63:16:3e:c9:8e:83:b5:c3:
d3:c3:ee:49:37:39:81:bf:56:38:8e:f1:02:b7:26:b3:ab:a3:
87:8f:01:e3:37:f7:34:43:78:fb:f0:cf:cb:bd:56:b9:c0:e5:
78:8d:46:bf:30:a4:f8:3d:99:69:37:c7:22:31:d5:7e:06:de:
76:35:2e:a8:9d:98:1b:e0:c3:75:15:eb:9b:fa:f9:0c:f7:7b:
ad:b4:1f:51:b8:cb:fa:a9:c7:57:9b:47:28:1e:cc:51:bc:8d:
a3:fd:ea:9e:40:da:80:af:9e:04:4b:42:f9:47:8c:ad:65:b0:
64:a7:bf:8f:06:05:55:03:05:eb:24:08:92:cc:11:ca:9a:0d:
07:d0:6c:db:97:0f:97:0e:84:a2:af:d1:9d:58:93:8f:10:e8:
45:20:c8:83:90:a8:f1:4e:ea:36:a5:9c:92:1e:50:18:ca:55:
24:1e:8b:1a:a3:b7:fc:28:61:ba:c1:f0:4f:b3:e0:2d:04:10:
79:a3:88:5d:95:5e:a9:b9:32:02:c6:de:34:c0:f9:c8:96:64:
ca:13:2c:be:3a:d0:d5:93:76:3a:b1:45:5c:f8:3b:d6:cd:65:
06:93:61:eb:7e:51:6e:0b:32:23:55:31:33:db:df:65:9b:7f:
80:fb:80:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:46:53 2025 by rpki-client