Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EDTNS/XHiuGhqNsJbVXaqjU9Hw7AdB62A.roa
File: XHiuGhqNsJbVXaqjU9Hw7AdB62A.roa (raw, json)
Hash identifier: Z+nUNLcXynEviTs8pVVVA6+xXV/lfyfRu1XMrzUWGoc=
Subject key identifier: 5C:78:AE:1A:1A:8D:B0:96:D5:5D:AA:A3:53:D1:F0:EC:07:41:EB:60
Certificate issuer: /CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E
Certificate serial: 0C4D
Authority key identifier: 94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/XHiuGhqNsJbVXaqjU9Hw7AdB62A.roa
Signing time: Mon 26 Aug 2024 05:13:04 +0000
ROA not before: Mon 26 Aug 2024 05:13:04 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18411
IP address blocks: 61.56.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:10:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3149 (0xc4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E
Validity
Not Before: Aug 26 05:13:04 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5C78AE1A1A8DB096D55DAAA353D1F0EC0741EB60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f3:9e:86:93:e7:7e:df:39:48:92:a5:d9:29:
b5:8b:d3:76:c3:8b:09:ef:72:d8:f8:29:05:46:f3:
5b:9e:dd:2e:be:8a:67:82:49:dd:81:0b:8d:03:f2:
a7:15:66:df:eb:5a:fd:84:da:92:ff:11:94:a3:f0:
9b:ae:8e:37:1f:fe:5b:f7:f3:a9:28:37:8f:3c:2d:
18:c4:da:5a:43:dd:86:38:34:5d:df:38:9f:9d:8d:
8c:28:61:dc:e9:05:d7:4d:95:6f:9b:93:21:d8:f5:
20:73:52:2d:7f:75:6b:4e:32:30:81:e0:65:dc:1c:
a4:2f:8e:eb:0e:25:15:ab:d0:cc:ca:6b:df:be:b0:
e5:cc:a9:50:9c:54:2c:9a:6a:5a:e1:d6:d7:69:d0:
fc:c6:88:0b:28:46:56:e7:d6:31:fc:f9:bb:2b:2b:
8a:71:20:14:1c:ff:ac:65:7e:aa:04:72:28:22:9e:
83:ec:db:a1:fe:01:65:c7:97:8d:91:fb:23:85:a5:
d4:5a:c8:8e:e9:44:ef:bb:be:2e:e7:6b:a3:58:13:
fb:31:5f:86:bc:39:f0:d4:79:31:ed:a1:d4:8f:7d:
4f:19:a2:5a:4e:d6:1e:c8:d1:0b:9a:18:db:29:4e:
87:d4:71:73:6a:27:43:b9:81:3d:75:96:33:60:56:
c3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:78:AE:1A:1A:8D:B0:96:D5:5D:AA:A3:53:D1:F0:EC:07:41:EB:60
X509v3 Authority Key Identifier:
keyid:94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/XHiuGhqNsJbVXaqjU9Hw7AdB62A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.18.0/24
Signature Algorithm: sha256WithRSAEncryption
96:6a:d3:e5:fe:d5:97:27:a3:7c:57:fa:4a:17:6d:44:dc:77:
4b:dd:a6:3f:fd:3a:1c:30:b1:f4:5f:a3:ef:15:00:b9:c9:4e:
3b:58:10:04:56:db:ef:90:f4:bd:3f:0f:82:5f:a3:f8:f6:a8:
40:ff:98:d4:67:87:03:97:06:3f:56:9b:09:eb:b4:bf:22:f9:
1b:58:ac:bb:85:3c:e6:62:4d:69:74:e8:c7:73:0d:45:4f:9b:
0a:8e:52:d9:5b:13:70:eb:13:de:6c:70:88:10:ea:22:91:b0:
63:35:8d:62:58:0b:55:37:e4:7c:6f:47:2a:5f:6e:8b:b4:a0:
1e:c3:c2:b5:84:0a:a1:d1:b1:09:8e:f4:7d:81:20:c4:13:fc:
6f:df:92:69:46:84:44:12:bc:c2:f2:77:3a:8a:88:26:34:95:
17:66:25:19:f0:16:9a:d0:ec:e3:e1:b5:c0:8f:d3:30:5e:ee:
84:1b:6f:3b:f2:af:25:5b:63:e3:d2:36:47:c4:20:6b:af:06:
32:42:05:2d:29:66:a9:a4:9d:53:e7:0b:84:0f:34:dd:7f:fd:
7f:85:d0:b4:21:92:85:f3:94:b7:49:c7:c2:e7:81:e1:cd:c1:
54:2d:9c:4c:30:bf:30:5e:99:a3:30:f6:e5:44:28:02:9d:2f:
68:fa:99:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:56:30 2025 by rpki-client