Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JGZ/Vgf6hIOEJjPHr0VHfBJ9daJyldI.roa
File: Vgf6hIOEJjPHr0VHfBJ9daJyldI.roa (raw, json)
Hash identifier: Y1PmrKEHj17Bt20+PO32lIXMLkTOf5SSB1wUpFPQcV0=
Subject key identifier: 56:07:FA:84:83:84:26:33:C7:AF:45:47:7C:12:7D:75:A2:72:95:D2
Certificate issuer: /CN=72C436BE92AE0ADCB314EBC1ACE319FF77BDA3FC
Certificate serial: 0134
Authority key identifier: 72:C4:36:BE:92:AE:0A:DC:B3:14:EB:C1:AC:E3:19:FF:77:BD:A3:FC
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JGZ/Vgf6hIOEJjPHr0VHfBJ9daJyldI.roa
Signing time: Mon 10 Feb 2025 13:44:56 +0000
ROA not before: Mon 10 Feb 2025 13:44:56 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 150760
IP address blocks: 180.94.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Feb 2025 03:17:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 308 (0x134)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72C436BE92AE0ADCB314EBC1ACE319FF77BDA3FC
Validity
Not Before: Feb 10 13:44:56 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5607FA8483842633C7AF45477C127D75A27295D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f5:3c:26:31:91:dc:46:60:bf:1a:a8:70:5e:
a0:14:d0:b3:40:0c:ad:a7:c0:0b:d2:56:0b:ac:31:
88:90:b8:b5:40:d4:84:ab:3e:05:37:11:5e:7d:8e:
f9:4c:f4:87:0c:66:20:92:76:1a:f3:17:db:24:38:
15:2c:68:b7:5b:2c:ee:6b:c6:44:65:00:91:cb:47:
e6:a1:b0:39:83:4e:d3:6d:0d:f7:9a:03:3c:4d:e1:
ec:6d:dc:27:e5:b5:c1:b3:b7:9b:63:81:51:ae:f6:
d0:35:f3:30:11:f8:dd:f9:4e:81:e9:14:26:73:6e:
8c:79:ad:3d:48:a8:c7:73:88:cc:99:5d:bd:b0:bb:
55:30:f3:bd:7a:8b:57:d4:40:13:7d:3a:3d:b2:77:
b9:a6:aa:23:b4:61:c3:28:46:f5:5a:80:ec:35:94:
d2:af:3a:0a:80:57:ee:6c:83:02:09:d1:cb:12:eb:
1a:96:42:a6:3a:02:c4:e4:e3:42:f1:6a:2b:76:ad:
93:cb:04:7f:f6:1e:54:0d:09:61:05:8b:26:d8:9c:
55:55:7d:19:fc:d3:e1:2f:c5:d6:94:83:da:24:65:
38:b0:08:f0:0b:7a:df:43:a8:1f:ca:71:e3:8c:e1:
d4:5e:14:90:3e:e7:f6:a3:01:60:1d:8e:62:e1:c4:
e1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:07:FA:84:83:84:26:33:C7:AF:45:47:7C:12:7D:75:A2:72:95:D2
X509v3 Authority Key Identifier:
keyid:72:C4:36:BE:92:AE:0A:DC:B3:14:EB:C1:AC:E3:19:FF:77:BD:A3:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JGZ/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JGZ/Vgf6hIOEJjPHr0VHfBJ9daJyldI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.94.30.0/24
Signature Algorithm: sha256WithRSAEncryption
13:f3:3f:8e:11:2d:2b:97:04:34:cb:6e:79:53:d7:ba:bb:50:
8a:5b:c9:8e:9c:e0:59:2a:6f:f0:ed:f6:6b:da:db:4d:da:ae:
93:7d:91:84:f1:4a:6f:4c:6a:66:5b:63:7e:4e:70:1a:ce:dd:
1a:6b:3c:be:24:17:fa:df:a3:3d:ed:0e:95:18:69:c5:92:f6:
28:d6:73:82:3c:e8:a0:2c:7f:e0:f9:56:db:78:30:16:20:5f:
63:1b:bc:61:9e:76:98:a7:25:89:0f:ea:6b:80:dd:f4:53:f3:
f1:80:74:e2:6b:f4:7c:16:84:09:36:45:73:59:99:fe:89:db:
63:bb:f4:6a:1c:d5:7a:11:15:fa:93:ec:b4:76:ad:f1:f0:4b:
2f:dc:9f:3e:fe:12:2a:ef:97:b3:5b:62:25:65:e1:f7:8f:c9:
be:5e:5e:78:21:a1:07:89:d0:ea:2a:02:5b:13:66:12:9f:04:
38:a3:23:87:02:a3:38:ff:ad:6a:91:0e:c2:d3:76:6f:ac:23:
2c:1c:20:6a:da:33:f6:48:7c:a9:48:fc:cd:4e:c3:55:8c:ac:
00:dc:df:71:9b:fc:9b:61:28:52:19:64:8e:6c:d2:ee:4a:6f:
ce:d0:a1:cf:1a:74:15:d0:55:4c:76:82:db:ac:b7:5d:64:31:
01:24:5b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:35:02 2025 by rpki-client