Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/yPlkF-0YRRmjv4y76S8gjsqzKyI.roa
File: yPlkF-0YRRmjv4y76S8gjsqzKyI.roa (raw, json)
Hash identifier: zpH/cLSpZnYPn/inSnoSLg69/1NdWygqf3pb/jeyki8=
Subject key identifier: C8:F9:64:17:ED:18:45:19:A3:BF:8C:BB:E9:2F:20:8E:CA:B3:2B:22
Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial: 0CFB
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/yPlkF-0YRRmjv4y76S8gjsqzKyI.roa
Signing time: Mon 26 Aug 2024 05:12:54 +0000
ROA not before: Mon 26 Aug 2024 05:12:54 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9244
IP address blocks: 210.67.96.0/20 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:50:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3323 (0xcfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Validity
Not Before: Aug 26 05:12:54 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C8F96417ED184519A3BF8CBBE92F208ECAB32B22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:86:f5:02:30:28:95:9d:49:d3:48:af:6c:35:
da:a7:59:de:9c:69:e2:9e:92:5e:f6:03:4f:fa:70:
de:7b:41:bd:ab:d9:72:7d:39:96:98:d9:3a:ec:53:
d7:df:73:99:1a:e8:c0:19:1e:1e:be:fd:74:75:64:
33:b9:6e:b0:78:bb:fa:43:1a:16:72:66:57:8b:6b:
54:f5:11:83:dc:cd:f2:68:88:45:9e:ff:9e:dd:6f:
71:2a:35:19:99:74:54:f3:4d:09:43:47:74:50:c8:
74:66:b4:23:70:10:54:bf:c6:bd:0d:c9:38:01:6e:
28:cb:fc:4c:13:de:5d:e3:18:90:c6:13:de:f9:73:
16:d0:66:61:78:4e:11:70:78:dc:c0:fa:60:52:9c:
65:81:5c:34:3c:05:bc:b4:77:8d:df:1f:fe:d2:ad:
04:d4:3e:74:f0:3f:a0:bc:02:03:4e:7a:52:80:5b:
d1:52:49:26:a9:2e:07:73:de:d0:44:4e:38:db:2c:
43:69:9a:70:9f:55:15:72:97:25:78:b3:92:78:6a:
26:8b:b5:fa:1a:0f:3e:60:7b:08:72:da:fb:58:2c:
73:f9:6d:33:61:cc:4b:f2:7b:fb:76:2f:36:f3:36:
7d:f1:16:3f:ca:a9:97:bd:0a:46:12:86:8e:b2:28:
de:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F9:64:17:ED:18:45:19:A3:BF:8C:BB:E9:2F:20:8E:CA:B3:2B:22
X509v3 Authority Key Identifier:
keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/yPlkF-0YRRmjv4y76S8gjsqzKyI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.67.96.0/20
Signature Algorithm: sha256WithRSAEncryption
8c:37:21:e0:eb:f0:f5:06:74:ca:d9:a1:ab:3e:42:7a:47:d8:
2c:d5:5c:26:24:18:3e:67:6a:8f:b4:45:69:a2:82:58:17:f7:
27:df:e4:46:2b:ca:98:fa:56:32:05:65:31:05:64:89:69:7a:
c8:4d:17:19:f4:6a:00:26:e2:fa:94:08:52:06:82:a2:d1:38:
3c:44:55:b9:7d:12:9f:6d:04:25:73:60:1e:12:1d:94:8a:62:
78:cd:08:60:b7:68:bd:a1:dd:ad:f2:14:29:4f:54:31:09:51:
9f:37:54:02:7a:b4:ec:a6:e4:fd:dc:23:a2:ec:b1:73:a6:e9:
0d:9f:a5:33:94:1b:b3:cb:6f:b4:93:e6:a9:7a:5b:ef:f7:fb:
7f:90:5f:41:a8:dd:51:1c:03:0b:8d:c4:d7:0c:df:79:a4:4f:
9b:74:22:5f:d4:f1:70:b8:56:c0:4f:8f:92:e8:49:e5:c7:3c:
15:27:51:6c:b8:58:e6:0d:a4:cb:3e:27:6b:23:59:f6:e0:62:
85:23:cb:08:a6:a7:21:dc:71:c6:e4:a5:77:be:2e:51:68:70:
dd:7b:a2:63:d9:f2:db:bb:37:b9:a0:ea:8e:ff:8f:09:47:06:
dc:30:e4:2a:2b:ea:af:34:1a:b5:97:92:51:db:eb:53:33:4c:
30:49:af:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:03:57 2025 by rpki-client