Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PAGIC/ZRbmqzyUZnMoCXD5NoWDvRKRlXg.roa
File: ZRbmqzyUZnMoCXD5NoWDvRKRlXg.roa (raw, json)
Hash identifier: oSvprG5Sep2tW892ERMdESlZjNDLa3nuOI55EJwyWiQ=
Subject key identifier: 65:16:E6:AB:3C:94:66:73:28:09:70:F9:36:85:83:BD:12:91:95:78
Certificate issuer: /CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Certificate serial: 0C3F
Authority key identifier: 52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/ZRbmqzyUZnMoCXD5NoWDvRKRlXg.roa
Signing time: Mon 26 Aug 2024 05:23:48 +0000
ROA not before: Mon 26 Aug 2024 05:23:48 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4781
IP address blocks: 210.63.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:58:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3135 (0xc3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Validity
Not Before: Aug 26 05:23:48 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=6516E6AB3C946673280970F9368583BD12919578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6c:15:1b:d2:64:05:82:83:9a:04:f9:a2:55:
6c:94:b0:da:3a:9e:19:9a:7a:9c:ff:a4:77:72:71:
bb:e0:e2:de:a1:5d:21:32:38:78:e2:45:93:13:45:
07:69:5b:04:54:1b:15:48:b2:e0:93:67:37:a9:11:
97:7f:2a:90:2d:24:78:8a:8e:b8:bb:61:a9:65:33:
4a:d2:d0:d5:84:a4:02:43:f5:a1:89:01:b9:ba:ef:
2e:46:af:ae:54:0d:d8:1a:e3:ed:4e:2f:b9:7b:fc:
37:b1:f2:05:4e:a5:91:64:42:75:dd:b7:e3:5d:e8:
64:a2:e1:2d:04:1d:ca:b1:a1:ed:a0:c0:54:f7:37:
96:5c:8d:d0:fb:d1:7f:50:75:cf:4c:32:74:96:2f:
53:89:85:cc:c4:bf:17:87:6e:b1:ea:fe:19:ef:16:
3f:1b:1a:51:6b:a0:a9:52:38:21:a1:14:6a:11:db:
a7:ee:14:7b:f2:89:89:83:c8:bb:b5:e6:71:cf:ea:
31:25:94:38:a3:96:02:3d:fb:d9:81:ad:cf:6b:5c:
f9:56:3f:3d:45:1c:6b:58:4c:8d:9e:67:dc:d9:5c:
4c:e3:5d:90:2a:c9:66:ac:86:ac:92:d6:a7:fe:32:
3f:56:4a:cb:fb:f4:ed:c4:87:e1:26:90:a3:f2:23:
ae:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:16:E6:AB:3C:94:66:73:28:09:70:F9:36:85:83:BD:12:91:95:78
X509v3 Authority Key Identifier:
keyid:52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/ZRbmqzyUZnMoCXD5NoWDvRKRlXg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.99.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:cc:71:37:17:6c:9c:e0:2b:46:e1:9b:48:fe:e5:69:15:58:
66:b8:2e:0e:3f:62:cc:3d:bc:cb:1d:1b:09:00:72:e9:ac:cf:
aa:5d:34:46:ee:c0:29:c1:ff:08:96:41:9e:dc:0e:e6:30:34:
1a:8c:b8:a8:02:86:b4:9e:57:81:1c:2d:2e:fe:19:ec:aa:fc:
e9:45:ef:e0:05:33:51:a4:9a:4b:c6:49:f8:d3:a9:90:1b:58:
7a:79:01:ec:bd:21:d0:84:bf:f8:48:2e:05:4d:ef:85:99:a5:
12:a3:e7:83:25:63:97:47:e6:ec:89:d9:83:5a:c3:d1:a5:fa:
92:e1:28:c9:46:ed:db:7a:19:7d:ba:e2:f8:4e:79:90:86:a2:
65:77:6c:c9:66:de:76:54:b4:1e:f8:2d:12:7b:44:3f:35:35:
a5:4c:69:20:78:d5:ac:c8:b7:61:07:56:5b:f3:1c:41:a4:e7:
b6:d3:d2:44:33:19:ec:93:f6:5f:57:20:48:89:16:19:89:49:
fc:b6:00:1a:a3:9d:0f:53:43:97:de:70:db:46:18:eb:f8:81:
93:cd:07:68:72:59:44:ba:2b:4d:13:ef:95:a0:e7:ed:97:26:
23:a7:f2:06:b6:ac:fa:7b:62:12:13:3e:92:5d:b9:a3:de:4b:
dd:e1:37:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:58:42 2025 by rpki-client