Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EASPNET/TGyxLiFanI4WKj3NQvaVHsDZqYU.roa
File: TGyxLiFanI4WKj3NQvaVHsDZqYU.roa (raw, json)
Hash identifier: 4gk3kMMNslq3iXjetLzSTBZQHUCz/M5e2b5CSQIfvoc=
Subject key identifier: 4C:6C:B1:2E:21:5A:9C:8E:16:2A:3D:CD:42:F6:95:1E:C0:D9:A9:85
Certificate issuer: /CN=552B16164C361040D88F32D36509448CF3BB9D25
Certificate serial: 0C32
Authority key identifier: 55:2B:16:16:4C:36:10:40:D8:8F:32:D3:65:09:44:8C:F3:BB:9D:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VSsWFkw2EEDYjzLTZQlEjPO7nSU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/TGyxLiFanI4WKj3NQvaVHsDZqYU.roa
Signing time: Mon 26 Aug 2024 05:12:59 +0000
ROA not before: Mon 26 Aug 2024 05:12:59 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 10135
IP address blocks: 61.64.48.0/20 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:55:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3122 (0xc32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552B16164C361040D88F32D36509448CF3BB9D25
Validity
Not Before: Aug 26 05:12:59 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=4C6CB12E215A9C8E162A3DCD42F6951EC0D9A985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7a:15:d4:cd:3e:d5:82:ca:f6:43:cd:db:c2:
2f:ab:74:47:88:b0:31:05:ce:22:5e:7c:1c:33:a8:
ef:fd:54:8a:f0:11:59:b1:29:e1:f7:72:bd:51:71:
4f:a3:51:b4:d5:fe:cc:7f:c9:ef:0a:57:c9:84:d8:
ce:cc:50:5d:d6:62:68:d2:d3:9a:fa:53:e6:ed:f8:
a6:27:2f:38:06:a3:27:2a:5a:a6:39:55:ea:7e:79:
7b:11:d7:4c:34:8f:e4:25:d6:42:95:e7:9d:1c:bb:
61:8f:ac:6a:f0:d5:b2:1f:30:78:0b:2b:18:ca:20:
7a:83:9d:ee:25:8f:b7:b4:df:be:e9:9e:e5:ac:00:
66:5c:35:d9:83:90:50:f8:16:14:dd:c4:1f:b8:13:
b9:50:c9:99:3e:2d:df:12:84:16:88:65:19:d0:64:
6d:32:74:fa:d0:97:31:7e:28:e1:b1:92:60:cf:c0:
84:c7:0e:89:9c:bc:e4:53:ed:18:31:9e:f5:2f:cc:
6c:fe:b2:5e:b1:1f:0c:40:d0:c4:b5:ee:b3:89:b6:
ec:72:55:0e:76:bb:20:5d:07:12:1d:d0:91:06:bd:
1e:81:78:0e:22:af:30:3f:d2:b6:98:64:c3:bd:a5:
6d:a8:c2:3e:6f:fd:c4:eb:14:e8:87:cd:eb:83:03:
d6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6C:B1:2E:21:5A:9C:8E:16:2A:3D:CD:42:F6:95:1E:C0:D9:A9:85
X509v3 Authority Key Identifier:
keyid:55:2B:16:16:4C:36:10:40:D8:8F:32:D3:65:09:44:8C:F3:BB:9D:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/VSsWFkw2EEDYjzLTZQlEjPO7nSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VSsWFkw2EEDYjzLTZQlEjPO7nSU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/TGyxLiFanI4WKj3NQvaVHsDZqYU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.64.48.0/20
Signature Algorithm: sha256WithRSAEncryption
32:e9:80:1a:a3:52:5a:b6:07:37:bf:35:97:94:9f:60:2d:15:
1b:1e:c1:cf:88:75:92:50:d8:0d:b5:f9:cd:c6:42:f4:2c:41:
62:8f:54:82:f9:e5:f5:c4:92:d5:7c:f4:39:d2:c0:70:2a:8c:
d0:ee:5d:6b:98:48:4b:ac:d9:15:d2:86:aa:40:b9:24:52:fa:
ff:2f:4c:ac:5c:48:31:94:27:5e:00:cc:52:4e:1c:94:d3:40:
f5:5f:c6:6c:ae:a1:4f:ac:cf:91:7e:4d:12:6e:39:0d:8f:d7:
cd:42:f9:c0:43:ab:1a:61:32:d0:2f:ce:5b:12:04:c5:a6:e5:
8e:59:01:37:65:a6:42:27:ba:9f:4b:8b:b0:ff:cb:73:1e:f4:
9d:50:67:c2:b0:a0:fd:f2:8a:bf:77:d8:99:0b:e6:b7:a5:ab:
03:20:3e:80:28:47:95:05:39:4f:3e:3c:cd:22:61:c5:74:5a:
bd:01:0d:c2:21:a0:ab:42:ff:c5:fc:79:17:8e:e6:1e:4f:cb:
96:cc:2a:d9:75:09:d1:b2:e5:2a:4c:c3:48:97:b1:aa:aa:1e:
6d:56:20:fe:c0:5d:d0:5b:2a:2a:65:aa:71:f1:0a:aa:db:e4:
e3:b1:bb:2d:5a:08:10:7d:7f:de:52:1b:46:82:c5:0c:24:5c:
8c:e3:8d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:21:32 2025 by rpki-client