Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KBT/XkZyISNyRd-aY_KnxzMmVUi1uoE.roa
File: XkZyISNyRd-aY_KnxzMmVUi1uoE.roa (raw, json)
Hash identifier: S9ag7VflzI7n2hWZVoUbF8JUog+jV4By2eLAbkhBVbw=
Subject key identifier: 5E:46:72:21:23:72:45:DF:9A:63:F2:A7:C7:33:26:55:48:B5:BA:81
Certificate issuer: /CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C
Certificate serial: 0CAD
Authority key identifier: 2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/XkZyISNyRd-aY_KnxzMmVUi1uoE.roa
Signing time: Mon 26 Aug 2024 05:19:26 +0000
ROA not before: Mon 26 Aug 2024 05:19:26 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18042
IP address blocks: 58.86.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:51:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3245 (0xcad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C
Validity
Not Before: Aug 26 05:19:26 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5E467221237245DF9A63F2A7C733265548B5BA81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a0:30:dc:6a:90:56:5b:ae:10:ba:cc:3c:95:
3d:f0:3f:32:59:42:6f:39:17:9f:02:cf:64:13:e6:
67:7f:22:c4:d7:e7:34:2c:fa:69:0c:7c:d2:81:dc:
fe:8c:2e:2f:1b:26:c6:56:62:6f:6a:95:bf:12:4d:
1f:87:b6:9d:83:db:b5:d6:d5:df:2e:36:f4:ce:16:
39:ff:a8:af:50:00:67:a3:ae:4b:7e:02:55:c9:7a:
73:5a:61:1f:47:5b:9b:a0:f3:08:69:b8:e3:d3:b8:
8b:87:ea:d2:69:55:61:f2:c1:b8:2f:c2:9a:c1:91:
a0:c9:27:37:84:10:4a:b8:dc:60:06:7d:ae:f4:6a:
d2:5a:af:ca:d3:77:7b:f6:38:fc:da:b1:3b:27:97:
91:17:d3:a6:18:d2:81:a7:62:ff:f9:be:39:b5:23:
80:c8:b9:48:5c:9c:5b:f0:e1:41:72:21:fe:55:7d:
a7:1a:54:e6:dc:cf:91:9a:bc:31:8b:1c:a4:b3:b8:
af:b3:62:df:7f:d6:44:4c:1f:94:a4:83:c9:8d:c5:
bc:69:13:34:b7:9c:c7:ba:28:e7:f2:82:16:bb:2c:
44:7e:21:e1:f2:e0:f7:50:e6:80:c1:27:1a:c8:2d:
94:fd:aa:2b:72:0f:c8:3e:c5:27:bf:9d:fe:18:13:
00:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:46:72:21:23:72:45:DF:9A:63:F2:A7:C7:33:26:55:48:B5:BA:81
X509v3 Authority Key Identifier:
keyid:2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/XkZyISNyRd-aY_KnxzMmVUi1uoE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
58.86.46.0/24
Signature Algorithm: sha256WithRSAEncryption
27:d6:32:33:e2:b9:3b:37:1d:4e:b5:e1:2d:90:69:23:97:33:
54:60:5c:51:b2:ec:2d:54:52:19:01:4e:69:bc:25:a5:07:a9:
0b:dc:11:c6:77:1f:c5:62:11:fd:b4:56:05:d1:07:da:91:11:
b4:4b:16:fc:29:c0:9e:05:79:77:f5:31:f1:f5:be:fb:7f:ae:
37:75:66:ae:99:7b:b9:81:c5:fc:22:3f:63:37:21:c0:b1:d2:
78:41:a9:c8:2a:2e:d3:50:76:e7:b3:87:33:5d:1f:cd:44:a4:
1f:d8:6c:42:cc:ed:80:86:f0:74:65:76:f8:18:1b:c2:76:ab:
36:58:5c:88:e4:98:5b:88:40:af:f1:ea:9b:a6:1e:02:c3:09:
4e:50:52:cd:69:60:24:00:7a:09:df:a4:5f:1b:cf:90:bc:80:
6a:ff:27:e6:76:9c:e4:e9:12:68:aa:d5:cb:44:dc:04:af:69:
da:94:a8:0f:7f:42:f8:14:ab:25:d9:9c:e7:cf:0c:0d:67:56:
86:f9:8d:29:b9:bb:c7:75:c2:a4:57:31:6a:4b:dd:4d:af:b4:
82:9c:43:43:0e:38:37:9e:58:02:13:31:d4:3f:d1:73:f2:dc:
8e:6b:2a:0b:ec:5e:3d:3a:b2:73:ab:85:44:b6:da:21:96:39:
df:91:33:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:51:52 2025 by rpki-client