Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWT/AYCcglI15zG7FkfSolvfNj-yPzk.roa
File: AYCcglI15zG7FkfSolvfNj-yPzk.roa (raw, json)
Hash identifier: ih9QPry4s91CCDMoxdDdu7GvHs51gahQocJuq3Sgies=
Subject key identifier: 01:80:9C:82:52:35:E7:31:BB:16:47:D2:A2:5B:DF:36:3F:B2:3F:39
Certificate issuer: /CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059
Certificate serial: 0F10
Authority key identifier: D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/AYCcglI15zG7FkfSolvfNj-yPzk.roa
Signing time: Mon 26 Aug 2024 05:12:42 +0000
ROA not before: Mon 26 Aug 2024 05:12:42 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24168
IP address blocks: 2404:8cc0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:30:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3856 (0xf10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059
Validity
Not Before: Aug 26 05:12:42 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=01809C825235E731BB1647D2A25BDF363FB23F39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e7:4f:b4:b9:cd:0d:d6:6b:f0:f1:7f:f9:a6:
ac:d9:2d:ba:10:d8:20:a2:e3:56:44:d1:52:cc:46:
a7:93:13:fe:4c:c3:82:54:6a:98:b1:6c:45:70:87:
06:4a:b7:79:59:3b:5b:f8:9b:33:00:5d:89:3c:59:
f2:54:19:4e:9c:0e:5c:80:8c:0b:f6:95:c2:18:0d:
c5:2b:ce:fe:18:73:8a:25:29:9a:51:d7:71:6c:4b:
4f:f3:8c:0d:f6:c1:71:c4:32:8f:dd:66:3b:54:31:
39:53:2f:15:80:e2:86:f9:2f:8c:52:02:1d:77:3f:
67:3c:f4:58:24:73:f5:11:aa:47:b7:b3:e1:5e:b9:
79:64:a9:1c:8f:30:bf:61:49:39:cb:f4:3e:80:90:
83:18:20:ba:29:c3:7e:c5:10:78:40:5c:92:4e:7e:
ac:f8:4d:98:77:0e:10:e9:d3:6d:11:76:7f:d5:e7:
9d:2e:69:b2:1c:09:50:7a:c6:5e:b9:20:0e:b1:41:
a3:b6:33:6f:e0:0b:61:5a:5d:a6:c1:8e:e6:c0:25:
74:a9:3b:61:c5:32:36:d6:2a:cb:6a:3a:6a:a3:a9:
e3:dc:3a:a9:ba:ec:df:13:c4:5c:6a:5d:f6:8c:44:
52:ec:50:97:5a:fd:05:99:bf:88:20:47:12:74:8b:
f7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:80:9C:82:52:35:E7:31:BB:16:47:D2:A2:5B:DF:36:3F:B2:3F:39
X509v3 Authority Key Identifier:
keyid:D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/AYCcglI15zG7FkfSolvfNj-yPzk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:8cc0::/32
Signature Algorithm: sha256WithRSAEncryption
2f:20:ec:51:a8:f6:31:73:dc:10:db:fe:44:bd:ac:f6:c9:18:
ad:a2:a0:52:94:31:e8:0d:44:39:af:92:20:32:31:1b:01:4c:
3c:7a:7e:f4:b6:b2:b8:e8:87:47:72:b6:34:82:aa:57:87:36:
aa:6c:4a:99:16:1b:2c:f8:24:de:2a:a3:ea:bf:1c:32:30:48:
2e:92:41:04:d9:0d:34:50:ea:d2:dd:c7:ad:b4:a6:5f:58:58:
98:0b:16:88:3d:a7:1d:85:6f:da:da:00:7b:97:9a:5a:95:0e:
9b:b9:32:35:75:fd:ba:75:bf:64:5d:8e:19:e4:c1:15:b2:71:
b0:f0:89:f8:bd:9a:c2:b9:f6:91:d3:22:0f:47:f4:69:3d:94:
4f:12:1d:63:2d:d7:02:be:64:1c:ef:bd:2a:0f:12:3c:3a:cf:
2d:86:ef:07:63:33:f8:78:c3:20:bf:64:d6:8c:c2:74:e9:05:
4e:df:72:a9:c9:63:b3:b4:3b:23:0b:23:91:12:cb:b1:57:72:
89:d1:90:44:4a:bb:38:d1:a4:bf:ac:4d:86:76:a5:0f:22:a5:
9e:af:bf:09:4d:4a:da:ef:62:b5:ef:07:6f:1a:cb:40:82:85:
52:e6:e0:b4:40:24:fa:3d:1a:d2:ab:66:93:5f:a7:47:e1:35:
29:7c:13:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:47:56 2025 by rpki-client