Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/nienazNQlgPf8saqYnpMRPG3c9I.roa
File: nienazNQlgPf8saqYnpMRPG3c9I.roa (raw, json)
Hash identifier: 4Yikl3HwZaHwU50b/nay7eoZSXkEp14ty0dyF4VnRIU=
Subject key identifier: 9E:27:A7:6B:33:50:96:03:DF:F2:C6:AA:62:7A:4C:44:F1:B7:73:D2
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0DB9
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/nienazNQlgPf8saqYnpMRPG3c9I.roa
Signing time: Mon 26 Aug 2024 05:10:22 +0000
ROA not before: Mon 26 Aug 2024 05:10:22 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18429
IP address blocks: 124.155.160.0/19 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:03:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3513 (0xdb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Aug 26 05:10:22 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=9E27A76B33509603DFF2C6AA627A4C44F1B773D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0c:41:ee:b7:8a:38:6b:3e:47:33:85:7f:af:
4e:84:8e:2a:dc:e9:35:de:67:23:40:ca:0a:da:7a:
66:dc:e9:dd:25:17:01:86:5e:9d:06:cb:ac:ea:fb:
ad:8d:ed:f5:8e:14:de:be:20:f1:63:82:0b:13:81:
28:b3:f4:ce:6b:97:06:76:43:bf:49:68:97:e1:33:
22:35:50:95:7a:63:82:e7:e8:ea:81:13:cf:d5:9a:
fa:9d:4b:5e:bc:8b:b8:f5:9b:02:c0:22:61:b2:bd:
5e:ca:ce:62:71:82:cd:db:ae:76:4a:36:1d:43:32:
85:7f:fa:59:90:ba:f3:dc:0d:c0:76:af:6b:ce:fc:
d2:a7:55:3b:da:2f:e5:c9:46:76:22:fe:51:50:87:
44:4c:52:3f:95:1a:21:87:1d:85:67:6b:cb:a2:1b:
97:c1:23:d6:a0:b2:4e:7a:63:e4:1d:47:4b:96:29:
20:7f:36:17:94:a3:3f:73:98:39:be:d9:39:ca:c0:
24:05:12:82:69:3a:95:e1:89:e8:d2:5a:16:7f:12:
ef:10:6b:f1:b7:3e:1c:a4:65:fb:b4:12:46:95:e8:
ba:75:f2:b5:a2:69:3f:67:28:2a:f8:86:83:89:84:
e4:46:5b:e6:47:8f:3e:20:7f:9a:36:f5:e8:69:e9:
f5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:27:A7:6B:33:50:96:03:DF:F2:C6:AA:62:7A:4C:44:F1:B7:73:D2
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/nienazNQlgPf8saqYnpMRPG3c9I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.155.160.0/19
Signature Algorithm: sha256WithRSAEncryption
4b:cc:55:1e:31:c4:a2:26:f6:41:e4:b8:95:8f:89:33:bf:bf:
89:07:ec:8e:5d:9d:a0:3f:2d:a0:23:b0:2d:e1:6d:14:76:5c:
86:6f:e5:3d:f6:ac:2e:34:4a:a5:90:a5:c9:2c:12:fb:cc:2e:
ee:b6:28:69:6b:5e:da:d6:f9:58:2e:37:1a:db:52:b9:cb:01:
08:01:25:0e:e3:51:d4:2d:2f:3e:99:4c:e6:ec:89:52:4d:09:
dc:86:b8:2e:d1:f5:c1:0c:db:c6:b3:02:4e:63:99:90:31:85:
13:aa:02:82:bb:52:71:98:7f:fb:2a:67:f3:a7:2c:f0:3a:d7:
4a:b5:3d:34:d8:ee:73:d3:88:74:51:a4:92:50:da:ed:26:3b:
c5:92:40:e5:e7:4a:18:2f:2c:97:27:c0:3f:9c:93:d9:bc:ac:
9b:6a:68:dc:aa:5e:47:d0:9c:f9:b3:5b:49:6e:b1:f5:b8:f4:
56:bc:b0:33:e0:1c:a9:20:1c:da:86:1f:16:9d:0b:03:4a:ca:
61:6a:73:47:9a:b8:0a:2f:61:80:2c:88:95:af:0c:1f:50:1c:
f4:97:b4:91:86:f7:39:f9:f5:17:89:39:07:41:96:b6:68:b4:
3a:e2:1a:44:d3:02:f8:3e:ff:b8:30:17:b2:e4:3b:10:d2:99:
8e:f3:9e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:49:16 2025 by rpki-client