Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/ZbccFsShwwhu76VL-aE4QPq5jqo.roa
File: ZbccFsShwwhu76VL-aE4QPq5jqo.roa (raw, json)
Hash identifier: 0Vp5/6PtR2QAjWRYUCcSPNdtXVaZEbu0gZumH1mDTWw=
Subject key identifier: 65:B7:1C:16:C4:A1:C3:08:6E:EF:A5:4B:F9:A1:38:40:FA:B9:8E:AA
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0DA1
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/ZbccFsShwwhu76VL-aE4QPq5jqo.roa
Signing time: Mon 26 Aug 2024 05:10:17 +0000
ROA not before: Mon 26 Aug 2024 05:10:17 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18429
IP address blocks: 61.57.144.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:03:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3489 (0xda1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Aug 26 05:10:17 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=65B71C16C4A1C3086EEFA54BF9A13840FAB98EAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e5:7b:c5:50:ba:3b:c1:81:45:0d:7e:90:ea:
bd:02:52:14:b7:46:e2:78:ad:45:c0:3a:11:76:a0:
ca:86:4a:4b:94:90:98:77:e2:32:e4:d3:69:20:4e:
4c:f4:da:92:5a:fd:db:31:8e:9e:6d:fc:f2:1d:1d:
7a:93:1a:64:57:0c:75:78:09:7a:16:58:ee:aa:ee:
1f:27:90:4e:8d:07:60:9e:17:f2:d3:9f:c6:08:0c:
21:d3:42:8a:15:39:55:a1:60:36:37:65:62:85:39:
99:31:fa:17:11:5b:c6:7d:ae:41:af:1c:fd:0f:71:
ea:e5:54:b6:81:bc:fd:c6:05:c5:c4:e1:b4:58:66:
c6:60:3b:04:16:5b:1b:d9:9c:1f:2b:fe:b9:1f:bc:
bf:85:7d:6b:9c:2b:c3:87:82:b9:8e:fc:d5:9d:60:
2a:c8:28:92:71:cc:71:ab:a3:6d:30:a6:a8:d4:84:
aa:55:92:c6:d5:f9:00:68:87:9c:87:a5:a8:ee:77:
a4:cf:5c:86:7b:5f:b6:ca:8d:90:ac:a6:a2:cb:ad:
8c:90:69:32:b0:c9:41:d2:42:28:ba:36:03:ff:6e:
ff:07:87:6d:ec:2c:39:1e:a3:ad:91:9e:87:7e:56:
4c:b7:0c:b5:f8:19:3c:6c:5e:ee:5d:5a:eb:e0:a7:
25:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B7:1C:16:C4:A1:C3:08:6E:EF:A5:4B:F9:A1:38:40:FA:B9:8E:AA
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/ZbccFsShwwhu76VL-aE4QPq5jqo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.57.144.0/22
Signature Algorithm: sha256WithRSAEncryption
53:18:a9:aa:59:0c:e4:e5:ce:4c:7d:35:b6:24:ab:13:03:37:
0f:f6:4d:02:1d:82:3a:b2:42:fb:4d:88:35:2d:33:c5:65:38:
b4:21:cb:45:d3:af:00:e8:66:48:39:99:86:96:0a:f4:0b:20:
44:21:7b:24:e9:90:9d:f6:c1:3e:07:07:63:94:fa:44:88:93:
6d:f9:b1:43:52:aa:41:b8:09:de:8a:ed:89:85:9d:bc:5a:ae:
da:64:94:de:b4:e8:56:d6:5c:cd:01:ce:72:1c:c6:7d:d5:f5:
b7:0d:89:5f:62:1e:b5:19:8c:78:1c:e7:0a:a6:58:4a:ec:a4:
50:42:43:2e:72:5b:98:6e:23:c5:03:3e:1a:65:99:d6:2e:bc:
d6:1a:b1:a7:e6:56:42:15:e0:76:89:64:de:a5:5e:dc:4b:0a:
90:97:44:e4:fc:d3:95:db:6c:91:e5:c2:4b:1d:ef:ae:19:61:
49:b2:75:9b:b4:c7:ef:ec:64:d2:07:9f:70:8b:ff:97:3d:f6:
c4:91:15:14:0d:15:da:a8:01:a9:60:9b:44:34:05:82:89:85:
9b:3a:9c:9a:53:d8:17:50:7c:90:f4:d0:cb:c0:72:ef:08:86:
be:11:00:7f:ee:3d:8b:fc:8f:61:17:4f:37:fc:b1:8d:f5:f1:
37:03:00:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 23:07:28 2025 by rpki-client