Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/fGOsPuZD6WZ6itD68JucbmG5mAs.roa
File: fGOsPuZD6WZ6itD68JucbmG5mAs.roa (raw, json)
Hash identifier: CYp64EqTCHUPPy4pOuEbhFG10k1iL1+Af79JNET7/mI=
Subject key identifier: 7C:63:AC:3E:E6:43:E9:66:7A:8A:D0:FA:F0:9B:9C:6E:61:B9:98:0B
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 16C7
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/fGOsPuZD6WZ6itD68JucbmG5mAs.roa
Signing time: Mon 26 Aug 2024 05:22:37 +0000
ROA not before: Mon 26 Aug 2024 05:22:37 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9919
IP address blocks: 220.229.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:07:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5831 (0x16c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Aug 26 05:22:37 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=7C63AC3EE643E9667A8AD0FAF09B9C6E61B9980B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7b:56:1f:9d:c3:0b:a1:66:76:27:dc:0c:6f:
6e:13:c8:ea:f2:d9:5b:72:09:7c:6c:3e:5d:20:04:
e9:83:a2:bd:b5:42:15:4f:1e:0d:09:69:03:23:19:
e7:d9:48:11:3e:23:64:a3:bd:27:a7:65:79:1d:1e:
75:57:3e:64:e2:40:ab:a0:4d:80:cc:0b:5a:07:88:
99:90:a7:a8:f2:3b:75:d9:f7:1e:6c:d2:87:56:b8:
7d:e2:33:3a:52:49:7f:d0:b6:61:3a:4e:b5:2c:22:
4c:ab:1f:9e:e3:ee:70:8a:41:a3:24:15:75:96:79:
c2:46:1d:73:ad:ae:14:c5:f4:10:c8:7e:37:7e:40:
cb:ca:bb:6a:c0:cd:10:1a:a0:4f:ee:ff:6c:d8:dc:
93:f9:e0:f2:1e:73:78:ed:9a:be:20:84:cc:58:2a:
8f:c9:f5:24:de:2b:a6:5c:a0:92:c8:36:b7:b6:3f:
0e:88:c7:c4:07:d8:90:0a:72:70:55:cb:d5:91:6b:
f6:9b:f1:ab:d5:35:b6:4d:5e:04:3d:2a:a5:51:b6:
72:8d:a9:79:e2:a3:5e:74:77:6b:ac:02:f1:c3:ed:
93:27:3a:74:fd:68:93:5e:ef:d0:1b:ee:cd:d2:a6:
19:65:eb:d9:cf:ab:8d:ea:61:6e:6d:eb:80:bb:d1:
9f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:63:AC:3E:E6:43:E9:66:7A:8A:D0:FA:F0:9B:9C:6E:61:B9:98:0B
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/fGOsPuZD6WZ6itD68JucbmG5mAs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.229.64.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:88:56:d0:6b:cb:f8:73:e0:e5:e9:7f:47:13:ed:36:03:4f:
b1:9c:58:40:ba:01:bb:69:a9:d2:e8:fb:32:13:92:b0:af:37:
3c:c2:2d:24:c5:32:eb:80:b1:6f:ec:5e:2d:61:5e:29:6d:5d:
6b:87:10:6e:cd:de:32:b3:1f:bc:c5:8c:d3:f4:00:ca:a6:fc:
0f:26:d9:e8:0a:27:71:ed:f5:54:62:e4:b5:c2:b8:60:7a:4d:
8b:f3:ec:50:46:00:ba:5c:9f:28:e4:bf:46:a3:d8:c3:da:2f:
31:6b:81:19:f3:1f:87:cc:3a:60:3f:70:d1:d1:66:8d:d2:2c:
7d:6c:9f:d5:66:20:68:a2:2d:2a:aa:55:5f:f5:99:06:6b:f6:
39:8e:db:3f:d4:bb:80:5e:af:77:02:82:93:a2:f4:cc:fa:4e:
b6:5f:33:8c:67:8d:08:e6:58:4d:ae:48:47:b4:d5:79:e2:d2:
c7:a4:bc:78:ef:e5:85:6a:f6:e1:d2:9d:61:bd:1d:54:c2:e6:
f4:8b:e6:ab:75:13:af:33:ea:c6:4d:26:1f:23:3e:3b:6f:74:
a1:50:fb:a2:76:91:5d:a4:2d:89:35:03:c8:ed:f9:39:3c:02:
2c:b0:b6:e6:a2:f4:44:53:65:d9:b0:93:35:2f:05:0a:7a:b1:
51:62:75:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:20:08 2025 by rpki-client