Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KBT/yTsvEEawjeCJLH69A_i0rZzihuU.roa
File: yTsvEEawjeCJLH69A_i0rZzihuU.roa (raw, json)
Hash identifier: E/oWHLvM0wJgENNSP6pyEj+BLQaUyhNGjFKej5lcjjU=
Subject key identifier: C9:3B:2F:10:46:B0:8D:E0:89:2C:7E:BD:03:F8:B4:AD:9C:E2:86:E5
Certificate issuer: /CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C
Certificate serial: 0CB6
Authority key identifier: 2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/yTsvEEawjeCJLH69A_i0rZzihuU.roa
Signing time: Mon 26 Aug 2024 05:19:29 +0000
ROA not before: Mon 26 Aug 2024 05:19:29 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18042
IP address blocks: 61.63.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3254 (0xcb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C
Validity
Not Before: Aug 26 05:19:29 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C93B2F1046B08DE0892C7EBD03F8B4AD9CE286E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:37:1e:ad:4f:b1:f3:3a:c6:33:40:03:24:20:
3f:02:54:27:d1:55:cd:1b:72:84:8d:12:44:6a:e4:
12:ac:d1:23:8d:43:b0:8e:89:cc:0c:bb:38:2a:86:
60:29:2e:7f:e0:3c:6a:cb:0a:91:88:ae:88:e0:c8:
26:bd:3f:9f:e3:57:bd:40:39:d9:39:37:58:25:09:
d6:7c:17:a0:da:07:88:d2:cb:0a:1a:cf:d1:7e:2b:
43:0e:b1:39:80:8e:69:55:ec:c2:a6:ed:b6:51:d7:
f4:ab:4d:8d:e2:5f:05:43:31:46:0c:6d:01:21:68:
38:f2:e1:73:45:07:a3:62:b1:f2:70:84:ee:52:a7:
be:6f:ad:be:70:26:2d:7f:6c:10:94:49:51:68:a6:
64:41:7e:88:13:f4:6e:6b:b7:d9:54:a6:c5:66:1f:
dd:8a:31:c3:6a:17:d5:9c:7a:3f:77:66:77:3a:3e:
f3:93:0f:c2:7c:8b:c8:09:3b:cd:22:63:b0:f0:b6:
8d:58:ac:84:60:63:dc:87:58:b8:ef:23:03:48:27:
28:1d:57:63:c3:86:0c:e7:39:64:ad:52:f2:a8:90:
ae:71:b4:d3:f0:b4:7b:69:55:e8:0e:33:75:7e:74:
c7:7a:47:88:f4:c8:66:a8:6d:8f:31:a5:aa:87:ea:
fd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3B:2F:10:46:B0:8D:E0:89:2C:7E:BD:03:F8:B4:AD:9C:E2:86:E5
X509v3 Authority Key Identifier:
keyid:2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/yTsvEEawjeCJLH69A_i0rZzihuU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.63.63.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:06:36:14:ca:58:67:72:23:6e:83:7f:f0:fb:c2:28:47:36:
ea:17:56:00:fd:95:9b:59:50:cb:4b:14:21:b9:f7:d5:87:b0:
cb:c6:6f:90:5e:ea:89:0e:bf:da:a4:bf:da:aa:c9:f8:9e:5e:
4c:90:89:43:2e:d1:24:01:02:f1:e8:8d:1f:e2:69:87:c2:d4:
69:7f:fb:cb:f0:1e:12:11:4b:01:aa:1d:cd:e5:6e:ac:19:e4:
b7:5f:76:14:aa:a4:2d:d0:65:90:cf:00:6d:47:d3:40:9e:0a:
49:00:35:15:15:74:1c:51:b5:61:f0:be:92:05:c2:41:c6:15:
6b:b5:3c:bb:73:e1:00:cd:a5:ee:23:06:de:dc:4a:15:df:31:
2f:a3:9f:1a:ae:cf:66:a8:ab:b0:7f:8e:2e:14:84:27:5f:c9:
11:ee:cb:6f:86:c0:c3:fb:79:74:57:88:b7:25:33:c6:22:35:
cc:ff:c8:45:59:93:16:21:90:4c:c4:b3:bf:ff:81:4d:a3:92:
53:ef:47:43:8f:c1:ff:ee:48:26:6c:a0:5f:b4:6b:4c:ee:e9:
d6:3c:87:25:4b:7d:90:7c:2a:c7:89:41:ec:5d:d8:b5:6b:da:
92:47:a7:fb:4d:aa:f1:bd:8e:8d:86:75:6b:ff:5d:ea:ec:6e:
4d:fc:7a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:19:58 2025 by rpki-client