Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/YKSjlXuyKyBJQ_VSNJ2tI416_kQ.roa
File: YKSjlXuyKyBJQ_VSNJ2tI416_kQ.roa (raw, json)
Hash identifier: 6rcUVuisa/oi34VtMjH2NnPmIjx0focAi+hSJiLEKU8=
Subject key identifier: 60:A4:A3:95:7B:B2:2B:20:49:43:F5:52:34:9D:AD:23:8D:7A:FE:44
Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Certificate serial: 0C85
Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/YKSjlXuyKyBJQ_VSNJ2tI416_kQ.roa
Signing time: Mon 26 Aug 2024 05:26:36 +0000
ROA not before: Mon 26 Aug 2024 05:26:36 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18182
IP address blocks: 219.85.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3205 (0xc85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Validity
Not Before: Aug 26 05:26:36 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=60A4A3957BB22B204943F552349DAD238D7AFE44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:f5:ba:f9:d6:a3:cd:da:cf:5b:be:33:44:ef:
4c:bd:23:68:e7:8e:13:46:3f:6c:a6:b1:c6:aa:5a:
5e:be:d8:6c:42:ce:01:e6:45:46:79:81:77:04:fb:
23:b6:59:17:9f:42:5a:bb:17:59:6f:7f:57:05:22:
2c:e6:a9:46:1b:cb:ec:ff:79:b2:d2:86:b1:60:9e:
1d:f9:b2:c0:55:80:6f:71:b2:62:33:70:03:67:3d:
41:f3:d4:aa:3e:bc:a2:b2:60:5a:90:2d:fe:5b:a0:
e6:6d:50:fd:77:32:2c:6f:eb:a1:be:66:78:d6:17:
8e:d2:a0:da:38:71:51:a3:6f:c3:c6:38:cb:c2:28:
b3:2c:3c:48:df:1d:b6:fe:20:e9:d9:2e:7b:f6:59:
2e:df:42:7b:a1:e3:c7:f8:63:ac:7e:f2:00:3a:44:
15:c9:26:c3:bf:70:28:a3:82:6e:02:8e:07:d3:e8:
4b:ac:e6:50:ea:fd:21:4e:12:f8:51:a8:89:35:34:
7a:87:bf:a0:d8:66:d3:5a:51:df:d1:fd:23:fd:36:
88:c3:cb:43:f3:32:0b:01:9e:e6:eb:db:d2:62:c9:
17:15:7d:28:44:52:2d:53:ee:47:b5:b4:72:23:fe:
7a:e3:05:2e:9d:c0:aa:97:70:8f:e7:30:38:c0:06:
96:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A4:A3:95:7B:B2:2B:20:49:43:F5:52:34:9D:AD:23:8D:7A:FE:44
X509v3 Authority Key Identifier:
keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/YKSjlXuyKyBJQ_VSNJ2tI416_kQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.85.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4a:2f:ec:81:2d:d9:60:e4:a6:fc:b9:54:f0:8a:0f:fe:31:4e:
b1:fb:52:d4:18:64:15:b2:de:95:6e:7f:5f:94:95:95:ee:0b:
1e:4e:98:c5:6e:b7:de:32:70:e1:b3:dd:94:1c:51:9f:81:56:
6b:82:df:f2:86:79:16:f0:54:bf:e6:86:ec:3e:54:68:b5:e7:
40:08:65:2a:fb:74:80:a1:43:69:e3:ba:62:b8:1d:be:4a:95:
93:8b:92:08:fb:2d:de:82:1e:33:88:53:da:a6:32:db:37:1a:
f2:da:95:83:7a:66:36:e5:c1:e4:59:52:3e:88:d3:c2:c0:9c:
63:88:e6:ee:87:c4:a3:fa:bb:0d:82:f3:3d:ab:83:61:bb:5a:
21:dc:a1:dc:0e:88:4c:6e:e3:a5:ae:22:7a:07:2b:1e:ac:25:
94:4f:95:d0:f6:83:3d:3d:10:16:5a:5f:5b:17:6a:1c:fc:a9:
bb:ef:0e:92:17:60:4c:2a:ad:92:c5:a2:08:03:62:60:9c:cc:
f4:5b:3f:b3:c4:22:bc:8d:44:9f:c4:bc:9b:fd:ed:99:5a:ed:
76:7e:a3:93:fe:c7:d6:d2:d1:d1:b0:eb:48:dc:a0:33:50:4d:
48:f3:bc:b2:e5:0a:ad:98:24:4c:ec:1d:0d:2b:cc:29:69:92:
8a:f3:98:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 00:44:25 2025 by rpki-client