Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EDTNS/EpPlqUCE76A767UDjM5ChaFAg00.roa
File: EpPlqUCE76A767UDjM5ChaFAg00.roa (raw, json)
Hash identifier: BA5WtAKpCf9PTeqZ/NscbZSwpRovEEvsFIJpp/a7Ug0=
Subject key identifier: 12:93:E5:A9:40:84:EF:A0:3B:EB:B5:03:8C:CE:42:85:A1:40:83:4D
Certificate issuer: /CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E
Certificate serial: 0C49
Authority key identifier: 94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/EpPlqUCE76A767UDjM5ChaFAg00.roa
Signing time: Mon 26 Aug 2024 05:13:03 +0000
ROA not before: Mon 26 Aug 2024 05:13:03 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18411
IP address blocks: 61.56.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:10:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3145 (0xc49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E
Validity
Not Before: Aug 26 05:13:03 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=1293E5A94084EFA03BEBB5038CCE4285A140834D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e2:2f:6f:a0:56:e4:95:a3:6e:20:d4:40:2e:
74:d2:b5:21:57:96:83:08:19:8f:77:7f:93:85:79:
aa:ab:62:40:2d:0b:d1:3f:68:5b:1a:e8:c1:65:94:
2e:5f:ff:fe:72:4b:f5:f0:52:34:36:70:0c:26:82:
12:23:46:62:c0:1f:70:a5:4a:63:d1:a4:6b:4a:c6:
e7:2c:5b:24:eb:fb:ca:9f:9d:35:67:54:7c:49:a6:
d1:83:6f:dd:75:07:18:42:f8:68:8f:fe:8b:15:bf:
5f:60:08:4a:a5:b0:2e:ca:17:cb:fa:3e:1d:7f:f2:
62:d7:ce:ea:91:80:d4:68:4e:53:7f:9a:a8:1f:24:
93:61:0b:b0:d4:bc:73:18:93:42:a5:10:8b:14:38:
d9:ba:cd:03:ea:58:bc:fb:23:4d:a3:87:c6:7e:b4:
9f:f7:2f:24:22:f3:17:5e:8a:a0:ed:94:c0:e1:a8:
3a:98:eb:b7:de:96:46:4b:fc:f5:31:13:84:c3:71:
2d:0f:ca:72:77:99:ba:de:f4:0f:20:c2:78:3f:f4:
92:1e:36:e1:2a:f1:1d:41:1a:15:8e:f3:9f:87:46:
df:8a:62:69:1c:e5:ec:97:ae:65:a0:57:ae:11:3c:
19:2e:e8:3e:80:84:72:9c:0e:25:51:05:98:89:c5:
38:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:93:E5:A9:40:84:EF:A0:3B:EB:B5:03:8C:CE:42:85:A1:40:83:4D
X509v3 Authority Key Identifier:
keyid:94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/EpPlqUCE76A767UDjM5ChaFAg00.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.25.0/24
Signature Algorithm: sha256WithRSAEncryption
96:00:1f:d4:16:95:81:22:0a:b1:11:8b:9b:90:ac:21:71:77:
ef:08:f7:08:c3:8e:28:6d:de:c0:98:1e:25:ed:da:60:14:1f:
a8:5f:07:f6:24:08:9a:2c:fe:37:f1:bf:06:c7:39:da:ec:fe:
ef:09:3f:91:d0:f5:ed:a7:40:92:14:88:05:f8:a7:f6:83:bc:
6d:a7:07:be:7e:70:89:73:e9:9b:2f:5b:49:11:0b:14:31:cc:
92:f8:5a:11:f5:7e:27:77:3d:33:79:92:ed:eb:44:fd:53:73:
38:a4:3c:48:ee:89:68:b3:f6:b0:a0:fd:34:5d:b4:48:88:ee:
3d:b3:2f:12:6a:58:1b:d3:dd:f7:2a:d3:87:78:c7:3f:fb:ed:
9e:6c:67:75:5a:c3:6f:38:57:b6:17:84:1b:cb:f5:ed:0a:f9:
79:70:27:fd:a1:2a:ed:ae:d4:78:84:48:58:58:71:59:05:cc:
c8:e1:70:20:bc:e8:15:1b:86:dc:05:7f:7f:f6:b3:1c:7c:40:
08:af:3d:27:fc:3a:bb:5e:ec:53:37:2a:2f:c2:73:82:01:5b:
5a:0b:08:9d:30:7c:24:52:7d:06:b7:71:f3:e7:50:ef:fe:71:
3d:5a:06:21:cb:49:d4:cc:fc:11:2d:2c:55:e4:3f:84:c6:cb:
cf:9d:2b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:48:53 2025 by rpki-client