Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/INFORICH/acqEEEyP1ncA2iBF_O6fINAb_ts.roa
File: acqEEEyP1ncA2iBF_O6fINAb_ts.roa (raw, json)
Hash identifier: 7BFMKMkic0yTegH9Fx0Sj1Efd7c6ma0+IeITqZhXlOk=
Subject key identifier: 69:CA:84:10:4C:8F:D6:77:00:DA:20:45:FC:EE:9F:20:D0:1B:FE:DB
Certificate issuer: /CN=9197E979AFBB1BEC2EFC2647207560561BE900B6
Certificate serial: 0505
Authority key identifier: 91:97:E9:79:AF:BB:1B:EC:2E:FC:26:47:20:75:60:56:1B:E9:00:B6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/kZfpea-7G-wu_CZHIHVgVhvpALY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/INFORICH/acqEEEyP1ncA2iBF_O6fINAb_ts.roa
Signing time: Mon 26 Aug 2024 05:19:04 +0000
ROA not before: Mon 26 Aug 2024 05:19:04 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131674
IP address blocks: 2406:3a40::/32 maxlen: 64
Validation: Failed, certificate revoked on Mon 10 Feb 2025 20:34:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1285 (0x505)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9197E979AFBB1BEC2EFC2647207560561BE900B6
Validity
Not Before: Aug 26 05:19:04 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=69CA84104C8FD67700DA2045FCEE9F20D01BFEDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2e:55:6e:24:8c:15:8e:4a:52:b0:ac:a2:48:
11:94:cb:d1:56:3b:67:99:b6:73:57:42:5f:b6:f6:
28:10:1e:5e:c6:b8:99:f0:db:ed:4b:6c:f8:8a:dd:
6c:39:bc:99:55:d3:6f:3c:11:dd:0f:98:b6:7a:16:
1a:77:13:18:3b:cc:c7:82:bd:25:ea:60:2d:aa:15:
fe:44:cb:8b:c3:35:5a:ae:11:4f:58:0e:bf:24:85:
0a:61:6d:fe:1f:99:00:e2:e4:67:0a:64:f9:dd:59:
f4:1e:fd:30:d7:f9:ce:08:89:38:ce:6a:86:7a:f2:
87:82:d8:3e:83:b6:76:d5:33:43:7e:19:f7:28:c5:
d0:03:b4:ee:03:b6:c6:5f:80:ed:30:2f:77:cd:7d:
10:b8:76:32:55:b3:f2:92:31:3f:e8:73:6d:4a:dc:
e6:7f:92:3e:c2:59:9a:18:43:2f:3e:f2:45:09:af:
25:ac:2e:6a:3d:a3:9b:11:03:c4:5b:f1:4b:f3:68:
e9:df:e9:37:3f:ea:52:2a:33:a5:c4:18:de:ef:68:
9b:0c:8a:ef:5f:6a:d7:14:f1:66:d0:d6:de:4c:df:
e9:72:c2:ab:83:91:ac:93:f4:81:38:a4:65:43:97:
a1:74:d8:16:ba:91:25:e2:c5:e7:23:b0:7e:d6:df:
ae:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CA:84:10:4C:8F:D6:77:00:DA:20:45:FC:EE:9F:20:D0:1B:FE:DB
X509v3 Authority Key Identifier:
keyid:91:97:E9:79:AF:BB:1B:EC:2E:FC:26:47:20:75:60:56:1B:E9:00:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INFORICH/kZfpea-7G-wu_CZHIHVgVhvpALY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/kZfpea-7G-wu_CZHIHVgVhvpALY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INFORICH/acqEEEyP1ncA2iBF_O6fINAb_ts.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:3a40::/32
Signature Algorithm: sha256WithRSAEncryption
04:ef:e3:87:84:c1:51:8e:63:54:91:ae:7a:04:69:6c:d6:f9:
d6:4c:63:09:6f:13:a6:45:9e:82:3d:a2:5a:63:87:4c:a8:8d:
8f:47:a8:70:a9:03:e4:71:d8:d6:d5:cb:db:38:fc:4d:78:90:
46:02:5e:d0:3e:42:3d:cf:79:ca:0f:ae:0d:27:fb:14:db:a9:
aa:5a:8f:b4:c3:f8:a3:51:31:30:a6:f5:50:3e:4c:72:04:92:
62:8b:fa:89:7e:b5:27:6b:c3:4a:9f:3c:75:72:70:af:03:b8:
56:ce:f3:e6:81:6a:90:e6:3a:23:0f:4f:03:67:ff:0b:46:59:
83:33:ca:e8:ad:88:68:77:be:5b:ec:28:f7:19:d4:6c:39:12:
0a:a8:d7:91:5d:83:a5:3e:2f:9f:6d:d1:b4:6f:54:fd:89:b2:
41:59:8a:8b:f1:48:08:e2:d8:00:20:00:32:0e:ef:1b:0a:45:
9b:89:ae:8e:c0:d1:21:de:6e:35:4a:25:d9:6a:37:43:7b:72:
e8:a8:2a:18:48:01:e1:16:47:1a:e5:02:cf:68:b2:b7:d7:ec:
e4:80:d6:14:b8:2e:de:e7:21:87:49:82:25:11:c7:b5:b5:36:
44:50:09:1c:1d:b2:fa:88:52:5a:2f:47:c1:b3:8c:40:4c:d9:
ce:ad:a9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:17:56 2025 by rpki-client