Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/SsukmPPYalA4Rl0ngK8cc5Uh9hU.roa
File: SsukmPPYalA4Rl0ngK8cc5Uh9hU.roa (raw, json)
Hash identifier: ZHcICfKV9lm9/MeivD9INNiPdKl3On72bnRqa8l2xZA=
Subject key identifier: 4A:CB:A4:98:F3:D8:6A:50:38:46:5D:27:80:AF:1C:73:95:21:F6:15
Certificate issuer: /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Certificate serial: 0CE3
Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/SsukmPPYalA4Rl0ngK8cc5Uh9hU.roa
Signing time: Mon 26 Aug 2024 05:25:24 +0000
ROA not before: Mon 26 Aug 2024 05:25:24 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9676
IP address blocks: 61.60.160.0/19 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:51:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3299 (0xce3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Validity
Not Before: Aug 26 05:25:24 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=4ACBA498F3D86A5038465D2780AF1C739521F615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fa:44:3a:b9:90:d5:72:2e:71:71:57:5f:9c:
ce:4c:af:22:c4:1c:79:ea:bc:44:97:07:66:e8:49:
f3:e2:28:73:bf:cc:4d:c8:45:92:6e:82:9b:3b:f4:
85:8a:8e:e8:bc:5b:4a:96:d4:31:50:40:d8:91:37:
f8:64:b4:89:d2:58:36:de:1b:2d:0e:c0:49:a7:d0:
1d:bc:51:06:94:4f:10:5d:7d:2a:10:da:22:5f:73:
50:f4:0f:87:0a:48:5d:34:9b:14:34:00:b8:71:24:
30:40:3f:28:87:c3:5d:50:e0:18:ca:0a:06:e8:53:
a7:6a:f5:10:23:72:c4:30:c3:1e:16:db:6c:d3:31:
64:15:30:32:56:dc:1f:9a:3a:bd:ea:8a:b6:8d:15:
e6:70:cf:f1:0b:a8:07:3c:67:a3:df:de:4f:9b:c5:
0e:42:da:57:67:e3:b9:6e:20:0b:f8:5c:da:04:27:
38:da:c1:ad:77:51:e7:d0:34:01:cd:bd:e8:16:86:
d6:53:71:02:e7:c8:a6:a9:f6:9f:99:d5:a9:30:1e:
30:23:63:43:c2:1f:c4:68:df:b4:dc:af:f6:70:a1:
1e:23:cd:fd:bb:76:e5:74:eb:f5:f2:32:25:a8:6b:
7e:21:61:6d:70:14:d3:d8:3e:6a:3a:e1:70:6c:0e:
41:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CB:A4:98:F3:D8:6A:50:38:46:5D:27:80:AF:1C:73:95:21:F6:15
X509v3 Authority Key Identifier:
keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/SsukmPPYalA4Rl0ngK8cc5Uh9hU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.60.160.0/19
Signature Algorithm: sha256WithRSAEncryption
11:8c:92:6c:b7:c1:9f:c2:1b:69:17:43:1c:90:75:7d:a8:82:
94:c1:a6:df:bd:78:b5:ef:3b:75:91:2c:9f:27:ec:9f:68:50:
60:d9:33:7f:d2:cb:2b:87:40:ba:98:b3:a8:a2:65:2f:52:ef:
4f:10:2e:7b:a0:ba:f5:27:8d:c1:cb:d3:83:58:06:24:71:37:
81:01:5d:fd:46:ce:a9:27:ce:ee:7e:b9:b3:43:ec:fc:b6:4e:
e1:e8:4e:c3:c7:1d:8c:f1:50:e8:dd:d5:3c:19:6c:bd:69:7b:
74:3b:2e:25:fb:9e:04:91:c7:fe:fa:ea:5c:a3:c3:df:45:58:
69:34:d2:b4:48:09:2a:58:07:11:10:0a:5a:22:da:af:ab:35:
23:23:37:2c:14:31:a5:07:9e:b1:88:28:a5:2f:01:7c:92:a4:
03:b9:2e:50:a8:7e:97:06:5b:48:15:ba:f8:57:82:b4:e0:00:
dd:d0:61:74:c2:67:56:0a:74:eb:2c:83:8a:ca:34:11:87:40:
7b:d2:d2:8f:32:41:96:96:87:06:5f:b2:db:ed:c6:c5:33:a4:
ff:56:2d:6a:fb:68:e8:7e:5b:62:5e:c6:0d:03:51:be:74:c6:
a3:a9:15:a6:7b:af:bd:e3:84:09:d4:25:6f:45:86:dc:e9:2d:
32:72:ef:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:53:42 2025 by rpki-client