Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Cgh0b5-fgyhUWhQvUlMTLZGOqwA.roa
File: Cgh0b5-fgyhUWhQvUlMTLZGOqwA.roa (raw, json)
Hash identifier: pva+qPtrUHIgVEGm8/lFgCkDONgx4c+iQqpIY+0tvcM=
Subject key identifier: 0A:08:74:6F:9F:9F:83:28:54:5A:14:2F:52:53:13:2D:91:8E:AB:00
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 164D
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Cgh0b5-fgyhUWhQvUlMTLZGOqwA.roa
Signing time: Mon 26 Aug 2024 05:22:02 +0000
ROA not before: Mon 26 Aug 2024 05:22:02 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4780
IP address blocks: 122.147.160.0/19 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:07:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5709 (0x164d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Aug 26 05:22:02 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=0A08746F9F9F8328545A142F5253132D918EAB00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1c:43:76:3e:3c:22:7f:f9:95:bf:f0:2c:8d:
8b:99:5b:1f:ce:97:d6:b4:c9:89:5f:e5:e4:75:07:
2e:65:63:c0:ab:eb:d4:4b:88:84:10:48:a0:a2:06:
71:57:5c:01:f5:93:ad:c7:b9:19:c2:d8:64:71:42:
e7:ab:f5:94:b9:bc:83:65:f8:bd:a7:61:b0:6a:93:
1c:9f:61:88:6d:f6:9c:4e:91:d9:4e:74:52:67:23:
de:78:19:1c:11:af:0e:76:ee:cb:92:77:f6:92:3d:
4e:1d:f8:ea:a3:ee:93:52:c9:b3:08:ba:3d:a1:2d:
e2:34:17:ac:17:64:c4:76:6c:a7:77:df:21:68:f8:
ee:d9:50:36:67:ac:ea:65:c2:11:6b:63:86:4a:38:
ed:99:f2:ec:c9:1d:ae:50:a5:b0:72:50:8b:5b:ae:
8e:04:76:95:b7:36:1b:cf:0c:e2:60:d4:bb:d7:85:
a0:db:db:b5:c9:be:13:ef:10:83:92:be:84:02:89:
98:82:b2:aa:5c:92:d1:6f:d5:a1:28:a7:4a:22:4c:
01:64:14:bc:eb:64:08:c5:4e:62:e4:38:7e:02:19:
4f:66:47:cb:cb:67:43:45:9b:64:b5:6d:d2:20:3c:
18:d9:93:ad:5c:9a:7b:4c:68:a7:07:18:af:8f:ab:
9a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:08:74:6F:9F:9F:83:28:54:5A:14:2F:52:53:13:2D:91:8E:AB:00
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Cgh0b5-fgyhUWhQvUlMTLZGOqwA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.147.160.0/19
Signature Algorithm: sha256WithRSAEncryption
63:12:68:7b:c5:f9:e6:7a:73:a5:67:34:40:cb:43:8b:0c:39:
8b:fb:87:e6:7f:d1:82:5d:66:60:36:42:14:5a:44:c2:13:c0:
da:1f:f5:b9:dd:be:92:a7:76:f0:b5:21:6c:2b:44:d7:e8:f2:
13:12:8a:e3:41:d1:78:8c:7c:ea:46:11:cb:72:62:11:2d:cf:
61:05:af:ef:00:1d:61:22:c9:73:07:31:aa:0c:ff:5c:0a:1c:
e9:62:63:09:3b:5c:da:a2:64:53:c9:cd:b5:28:cc:33:f2:94:
f6:1a:33:df:7e:5f:6d:4a:85:62:0a:44:cd:bb:8d:7f:8d:0e:
a6:4a:7d:3f:93:58:b6:30:09:eb:85:6c:54:56:92:91:89:49:
03:39:48:0e:d4:99:e9:df:44:e7:6d:b9:39:9f:9d:23:fb:85:
e0:32:75:b4:f9:94:e4:da:7a:08:6c:39:0d:92:3c:09:16:0d:
1b:2b:f9:3c:5d:7f:7b:72:cb:d7:81:4b:fa:4a:aa:24:c3:19:
93:54:3d:c6:e5:6c:4d:65:e9:97:a8:33:6c:48:ed:25:e8:76:
cb:d4:05:cd:5f:e0:7c:7f:f3:62:ee:9b:2b:4f:9f:79:c8:70:
a7:62:ad:11:b3:7c:29:f6:62:5e:14:b4:5a:0e:de:0d:7e:75:
18:5e:48:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:23:06 2025 by rpki-client