Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/pDdV4_gXA9o1Py2FQa3nNy8LbTM.roa
File: pDdV4_gXA9o1Py2FQa3nNy8LbTM.roa (raw, json)
Hash identifier: gMDt5R45pUX7oBC7qxlMrjNVG+w2CzuYD6XHWCxNEnM=
Subject key identifier: A4:37:55:E3:F8:17:03:DA:35:3F:2D:85:41:AD:E7:37:2F:0B:6D:33
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0DA7
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/pDdV4_gXA9o1Py2FQa3nNy8LbTM.roa
Signing time: Mon 26 Aug 2024 05:10:18 +0000
ROA not before: Mon 26 Aug 2024 05:10:18 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18429
IP address blocks: 61.57.144.0/20 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:03:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3495 (0xda7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Aug 26 05:10:18 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A43755E3F81703DA353F2D8541ADE7372F0B6D33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b1:d3:34:20:d1:77:e8:8f:0e:8f:a3:54:9a:
93:03:83:c4:1a:66:f8:eb:dc:0f:85:9d:61:20:46:
f2:67:89:57:7c:15:fd:ec:a4:0e:38:a5:80:b0:13:
0e:94:48:69:e6:bc:27:d3:88:7b:88:30:68:1e:72:
5f:de:3e:1d:56:9c:db:34:30:82:62:25:66:03:0e:
5a:20:b6:35:1e:33:73:c7:83:0d:81:9b:99:77:6f:
50:15:9f:c7:85:cc:4c:06:43:b8:cb:11:cc:12:ab:
8b:fe:31:cc:81:67:f5:21:8f:ce:ef:21:af:87:d2:
cf:99:26:e9:8f:a8:83:fc:24:80:a3:45:c0:d2:f8:
29:d7:d6:52:3d:a5:ee:00:6e:cb:3d:60:aa:61:0d:
c1:af:56:88:cd:82:b7:58:67:30:20:cf:9c:a5:ea:
fd:38:d0:93:75:52:21:da:80:9e:c8:72:1c:bf:e6:
e7:4e:6e:f7:d3:8b:c4:5f:5b:3e:3e:68:b4:c2:70:
a5:40:71:30:76:42:97:ba:3f:13:d0:d7:69:d6:d5:
44:de:13:8e:c1:a2:23:0b:53:53:99:d5:60:46:5d:
bd:eb:47:a2:d0:1b:ba:a8:a9:cc:48:21:77:0b:65:
19:2e:39:87:da:30:19:bc:55:dd:98:75:b8:88:df:
96:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:37:55:E3:F8:17:03:DA:35:3F:2D:85:41:AD:E7:37:2F:0B:6D:33
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/pDdV4_gXA9o1Py2FQa3nNy8LbTM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.57.144.0/20
Signature Algorithm: sha256WithRSAEncryption
98:c6:a7:b3:a5:24:09:8f:ff:05:1c:9d:69:e5:a5:3c:fe:17:
2f:eb:22:d9:a5:d5:52:28:4b:5c:ac:97:43:97:a9:41:54:6c:
01:1e:04:2c:66:66:f6:22:95:25:fe:42:1f:2f:2f:ac:6a:37:
b5:32:89:95:7a:95:e7:3a:89:ea:f1:c7:70:2a:e5:14:ce:39:
41:83:e8:de:8b:9a:49:6e:2c:88:d9:74:98:a8:5b:65:c7:ba:
64:6c:0c:7f:fa:11:9e:4f:be:51:4f:9b:39:b1:82:12:46:87:
78:a8:07:c4:3e:62:ba:3e:bd:59:23:cb:3f:f0:41:25:94:25:
a4:b1:fb:9f:b8:fe:a7:86:ef:98:7a:bc:6c:35:7c:b1:50:21:
74:dd:81:6e:c0:ff:49:b4:67:fe:fc:98:c8:1a:a1:5e:90:46:
ea:73:72:2e:09:36:a3:01:eb:25:8d:f1:a9:44:e1:82:3c:6e:
ae:d0:bb:e8:a0:9b:99:77:fb:5f:8f:db:5f:a8:86:40:7c:0e:
05:88:bf:f4:de:9b:84:17:61:b1:35:87:00:a0:89:d2:bd:5f:
b7:b0:e5:fd:76:8e:40:0f:28:b3:9e:41:a5:62:17:cb:ca:bc:
42:81:48:9a:f7:20:14:7f:99:6d:d5:45:f4:01:cb:a3:29:42:
d4:a0:9c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:17:36 2025 by rpki-client