Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MEGAICBC/Yx3r7bTu1LH2t5iRNeW60hZz8mU.roa
File: Yx3r7bTu1LH2t5iRNeW60hZz8mU.roa (raw, json)
Hash identifier: gK6JXgH7aBSjbjFuFvGu5V4fUDs5146GWu5E+bb2hcE=
Subject key identifier: 63:1D:EB:ED:B4:EE:D4:B1:F6:B7:98:91:35:E5:BA:D2:16:73:F2:65
Certificate issuer: /CN=602CBCE32DD76D0BB39F5A706324248869119435
Certificate serial: 0C24
Authority key identifier: 60:2C:BC:E3:2D:D7:6D:0B:B3:9F:5A:70:63:24:24:88:69:11:94:35
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YCy84y3XbQuzn1pwYyQkiGkRlDU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MEGAICBC/Yx3r7bTu1LH2t5iRNeW60hZz8mU.roa
Signing time: Mon 26 Aug 2024 05:20:43 +0000
ROA not before: Mon 26 Aug 2024 05:20:43 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131587
IP address blocks: 2400:d580::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:16:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3108 (0xc24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602CBCE32DD76D0BB39F5A706324248869119435
Validity
Not Before: Aug 26 05:20:43 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=631DEBEDB4EED4B1F6B7989135E5BAD21673F265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:44:dd:6c:77:89:5b:db:79:c7:3d:2c:cd:4a:
01:5a:3a:ba:a1:7e:a0:81:06:5b:45:36:e7:db:15:
e8:5d:b2:5f:27:56:b8:e7:c6:ff:34:59:c3:53:0e:
f4:a2:46:36:33:9a:b2:7c:49:8d:80:6b:54:a9:12:
f3:61:11:23:ec:25:28:d5:96:35:9b:d3:32:e3:ef:
50:59:3e:d3:6e:fd:90:8c:cf:c4:9a:22:e7:1f:15:
4b:d3:30:dc:bf:a4:95:b8:59:64:a7:0e:ec:79:15:
1a:a0:d6:ae:12:27:28:5e:aa:45:90:14:f4:10:9d:
13:0e:53:72:be:8e:81:f5:d3:43:fd:a8:36:86:a4:
a0:0c:60:cd:7b:0d:86:28:51:38:a8:ca:68:bc:88:
a7:94:ec:f3:83:09:9d:42:67:8f:62:fc:a1:f1:04:
d0:39:ba:87:66:12:88:b9:b0:c4:7f:9b:4a:8a:2e:
70:a1:ee:63:fb:32:a9:a1:25:40:ee:3d:66:58:a4:
6e:81:f7:de:cf:b3:45:56:82:11:1a:8e:b0:e0:20:
64:7f:f6:d8:9d:4f:01:2f:4b:6a:dd:ec:13:f0:72:
06:57:20:24:c8:ea:57:16:ba:da:b3:85:3b:9d:88:
c0:80:04:66:3c:c1:87:24:a8:eb:30:fc:4b:0f:ae:
01:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:1D:EB:ED:B4:EE:D4:B1:F6:B7:98:91:35:E5:BA:D2:16:73:F2:65
X509v3 Authority Key Identifier:
keyid:60:2C:BC:E3:2D:D7:6D:0B:B3:9F:5A:70:63:24:24:88:69:11:94:35
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MEGAICBC/YCy84y3XbQuzn1pwYyQkiGkRlDU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YCy84y3XbQuzn1pwYyQkiGkRlDU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MEGAICBC/Yx3r7bTu1LH2t5iRNeW60hZz8mU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:d580::/32
Signature Algorithm: sha256WithRSAEncryption
0e:d2:50:da:c7:de:88:e1:a5:6c:56:76:05:38:e8:6a:6b:ea:
d6:d8:60:d2:ed:88:56:29:4c:de:0f:ae:15:6c:0f:b5:f7:f4:
fe:e2:11:31:ac:2c:f8:26:c6:c8:07:8b:fc:7f:ae:1b:e6:a5:
59:e9:35:3f:68:e7:ab:90:3b:c7:5b:f7:f4:2c:97:86:93:09:
c6:e9:a3:e5:7c:c8:dd:5a:8a:e2:1e:2e:55:b1:63:f9:a4:d1:
26:71:31:43:aa:30:44:04:d2:c9:6f:d0:fd:36:22:d8:2e:e4:
e9:6e:6a:e1:a0:6b:b4:ad:a7:02:5b:c5:e5:51:57:fc:8d:49:
ba:f9:56:48:8e:88:6c:fa:41:b7:9b:a0:9f:80:58:2d:6a:b1:
e7:bd:6b:f2:ef:9f:c0:3d:47:d3:c9:7a:4e:58:87:d9:ec:0f:
21:86:99:5e:33:a1:06:ba:6b:7b:fe:ee:73:6e:f2:5c:29:fa:
5a:06:67:49:37:3d:5e:dc:7e:ac:98:27:53:24:f2:0c:41:d8:
53:30:9c:0f:e6:b3:45:55:34:f4:1b:b6:e7:3e:76:29:8b:76:
78:fb:8c:2d:d3:3e:6b:76:91:f2:d6:0d:2c:c0:18:8f:f2:f9:
16:99:4c:4f:c1:fe:1d:ee:e3:af:24:04:ea:09:22:b0:5c:da:
69:8f:07:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:48:00 2025 by rpki-client