Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KBT/j_ns-L0zHaiOQXB6GBfT15-WhUA.roa
File: j_ns-L0zHaiOQXB6GBfT15-WhUA.roa (raw, json)
Hash identifier: ofj/aTCAa5UDhZ8dEbl76P9WmwVEEtffMzpR1HbPbY8=
Subject key identifier: 8F:F9:EC:F8:BD:33:1D:A8:8E:41:70:7A:18:17:D3:D7:9F:96:85:40
Certificate issuer: /CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C
Certificate serial: 0CAB
Authority key identifier: 2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/j_ns-L0zHaiOQXB6GBfT15-WhUA.roa
Signing time: Mon 26 Aug 2024 05:19:26 +0000
ROA not before: Mon 26 Aug 2024 05:19:26 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18042
IP address blocks: 58.86.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:51:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3243 (0xcab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C
Validity
Not Before: Aug 26 05:19:26 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=8FF9ECF8BD331DA88E41707A1817D3D79F968540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1a:1f:15:f3:b1:ef:ab:18:c2:80:13:64:22:
2d:7a:95:a0:7a:aa:25:d2:a3:95:c5:34:30:92:aa:
6c:41:f0:6a:9f:88:20:b2:67:13:e0:c8:cf:89:c7:
17:5a:f4:c7:62:f1:38:d0:70:5a:e6:b3:d7:72:67:
c5:ed:0b:7e:59:7c:aa:5f:bf:c5:ab:5c:1b:5d:28:
d4:c1:f8:94:c3:8a:35:31:1e:9c:14:1f:71:02:a5:
5a:38:ba:89:ef:8b:c1:54:e9:e1:69:34:bd:f0:4d:
ba:86:25:4f:68:40:85:c6:66:b5:15:2e:90:9b:13:
f7:dd:d8:64:66:c2:2b:72:05:09:80:e1:c8:56:f0:
9b:67:15:8e:ea:d6:1d:11:9c:cb:d5:f2:19:3f:98:
f5:17:0a:bf:6a:63:11:a2:a1:38:c7:47:f2:8f:82:
3a:f7:38:f2:fb:3b:05:01:84:65:b1:86:55:64:97:
2d:da:b4:37:7f:35:bf:8f:74:93:a8:20:ca:f7:1c:
74:25:5e:b0:65:bc:22:1f:7f:c3:5d:0d:4f:4e:da:
67:2e:c3:73:45:9b:58:fd:13:1b:76:e4:51:ef:ac:
da:d3:9b:d8:bb:d9:d2:7a:44:f3:8e:e4:f2:3e:4a:
3c:d5:92:70:04:f9:aa:28:1d:50:cb:e0:96:aa:f2:
46:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F9:EC:F8:BD:33:1D:A8:8E:41:70:7A:18:17:D3:D7:9F:96:85:40
X509v3 Authority Key Identifier:
keyid:2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/j_ns-L0zHaiOQXB6GBfT15-WhUA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
58.86.55.0/24
Signature Algorithm: sha256WithRSAEncryption
70:33:a5:90:6d:9b:53:66:ec:ef:55:62:4e:21:80:46:8e:27:
cc:21:37:79:76:05:aa:a4:36:3f:9f:22:d3:2f:dc:db:95:25:
0a:b8:5f:d7:04:b8:23:87:42:d0:82:6b:46:18:39:20:f8:bb:
46:1c:32:0a:71:02:4a:c4:81:0a:cb:3f:0e:85:db:21:4b:55:
b9:b5:b1:58:eb:30:94:58:e4:78:6c:c1:b0:e9:22:c6:3e:46:
2c:75:b6:ad:38:c0:80:64:b3:61:95:9d:27:2e:ef:39:e9:ca:
2a:be:0a:68:d6:76:3f:6b:ac:70:f8:eb:da:21:8b:ce:c1:a5:
24:c8:af:74:f1:71:5e:2c:31:dc:11:03:04:23:b9:fa:50:8f:
10:c2:d7:71:92:9e:6c:3f:3a:5c:ea:32:36:3e:a9:c3:b9:12:
3e:ec:7c:9d:26:e9:65:6a:5b:61:b2:0b:68:07:19:0a:6c:89:
65:d2:0a:be:d3:2a:40:27:66:02:04:33:c0:1b:d7:21:f0:7f:
7a:52:da:81:1f:4c:0e:ea:88:af:c2:a6:3d:64:e7:5b:67:c9:
47:c6:42:b8:7f:fd:c9:f3:9e:ef:2a:2b:d3:96:ce:f8:a6:5e:
3e:c4:67:2a:5c:ec:e2:25:14:5c:cf:82:12:9c:90:0d:90:51:
8c:c5:d2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:20:32 2025 by rpki-client