Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/ZNgInzhkvmaBXOPUFzNULR62ZiY.roa
File: ZNgInzhkvmaBXOPUFzNULR62ZiY.roa (raw, json)
Hash identifier: KOI3Grq1S9cydc+G2AvjCluAFzKYnlWuKDObaCN+ooY=
Subject key identifier: 64:D8:08:9F:38:64:BE:66:81:5C:E3:D4:17:33:54:2D:1E:B6:66:26
Certificate issuer: /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Certificate serial: 0CDC
Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/ZNgInzhkvmaBXOPUFzNULR62ZiY.roa
Signing time: Mon 26 Aug 2024 05:25:22 +0000
ROA not before: Mon 26 Aug 2024 05:25:22 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9676
IP address blocks: 61.63.160.0/19 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:51:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3292 (0xcdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Validity
Not Before: Aug 26 05:25:22 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=64D8089F3864BE66815CE3D41733542D1EB66626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c7:17:a6:77:49:43:00:09:35:48:3f:37:d3:
df:d7:c1:99:91:36:2c:1a:ca:6c:63:3a:ff:b2:37:
0b:79:ae:cd:2f:8b:d6:0e:d1:f5:dd:3c:75:80:87:
b3:6a:6d:c6:76:0b:ce:46:5f:02:2f:7b:e2:6e:f8:
60:4f:89:7c:8c:93:52:ea:c9:26:0c:ae:d3:af:5d:
42:f9:bc:39:cb:36:db:9c:c2:cf:4d:fe:05:0a:1f:
77:a2:87:0d:59:4f:f4:23:cb:5e:06:24:2d:9a:ed:
3c:32:ed:69:0e:fb:fd:0a:00:92:88:9f:6c:86:d7:
34:2c:ee:fc:be:bb:f1:da:2b:8a:1d:c9:bf:1c:e9:
0b:c6:cd:97:89:60:b0:5d:e3:6e:db:1f:8c:d4:21:
e4:1b:08:81:d0:db:0c:14:e6:02:6b:e3:15:38:05:
98:2d:8c:fd:7d:ce:c9:63:69:ae:d2:d4:80:47:da:
b1:93:be:f2:6c:d0:a0:a6:4d:d3:4d:6a:d2:c2:10:
81:c3:92:0d:03:03:5c:37:62:57:47:ca:a6:09:d0:
f9:aa:42:0a:29:9b:23:41:49:2f:1e:66:5f:82:ae:
cb:33:9e:ac:9d:3e:1c:1a:c8:07:cb:58:85:ae:9f:
7e:37:78:53:83:cf:4e:ee:f2:ba:08:03:d9:0c:53:
4e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D8:08:9F:38:64:BE:66:81:5C:E3:D4:17:33:54:2D:1E:B6:66:26
X509v3 Authority Key Identifier:
keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/ZNgInzhkvmaBXOPUFzNULR62ZiY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.63.160.0/19
Signature Algorithm: sha256WithRSAEncryption
2c:1d:40:ed:38:27:d1:a1:b3:b7:2e:86:bf:67:0f:dc:3d:97:
ee:b1:25:8a:a4:1b:5d:95:00:18:43:19:03:4b:93:52:a4:24:
1b:e5:ce:46:ae:bd:c4:11:cc:82:71:2c:c9:9c:d5:b7:46:a8:
5c:e1:50:23:30:a4:d3:8c:ef:f3:2d:1d:6a:81:8f:44:d2:65:
7b:0e:b2:5b:36:4a:e8:f5:eb:14:fb:2d:ae:18:fd:75:49:71:
2f:99:70:4b:0a:95:4c:dd:11:cf:8a:49:0b:67:a9:ad:40:16:
28:1a:9d:24:13:54:3c:91:b0:74:53:db:ba:f0:99:3a:f7:1f:
fa:43:fd:13:44:5d:25:23:ff:6d:86:37:c9:c6:cc:28:d6:da:
5f:54:6e:c7:9e:ff:5c:4c:7f:1f:b4:df:bf:3b:3d:dc:1f:60:
a2:3e:8d:ee:c1:ae:d8:94:90:b8:c9:ad:7e:75:5f:c9:e4:e0:
3a:e5:fd:c9:5c:48:eb:4b:8a:61:e2:7d:5f:32:6d:a3:68:be:
b0:2f:7d:c9:2d:64:af:99:73:18:4e:fd:10:7c:cc:fd:2f:dc:
a8:82:4c:52:26:f6:f4:a4:19:8e:2b:3a:79:ab:2e:b4:ff:31:
ac:38:e6:3d:b8:c5:25:4c:e3:ef:6c:82:4f:73:67:7e:55:4d:
d2:1f:34:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:56:29 2025 by rpki-client