Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/cgTCY30qEIZmtWjdr_dXpuhy6g4.roa
File: cgTCY30qEIZmtWjdr_dXpuhy6g4.roa (raw, json)
Hash identifier: 299IsWcWuVCnPwCVvlSGV8Mro9P9xp6/X1miTNJTahA=
Subject key identifier: 72:04:C2:63:7D:2A:10:86:66:B5:68:DD:AF:F7:57:A6:E8:72:EA:0E
Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Certificate serial: 0C88
Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/cgTCY30qEIZmtWjdr_dXpuhy6g4.roa
Signing time: Mon 26 Aug 2024 05:26:37 +0000
ROA not before: Mon 26 Aug 2024 05:26:37 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18182
IP address blocks: 61.64.64.0/18 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3208 (0xc88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Validity
Not Before: Aug 26 05:26:37 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=7204C2637D2A108666B568DDAFF757A6E872EA0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8c:5f:b4:40:fb:8b:48:ab:55:97:2b:9e:bc:
1a:c0:cf:54:37:14:59:83:8a:9c:bd:b7:b0:9f:98:
63:7c:a2:d1:dc:0f:bd:9e:98:55:53:b8:d1:e0:01:
a7:d0:d6:14:27:59:22:c8:bb:d0:8a:a9:4b:43:dc:
81:f5:64:f6:66:b0:08:aa:3f:dc:53:cf:b6:89:46:
7d:d8:0a:ea:b6:27:4a:31:b7:d9:c9:5f:bd:19:30:
8b:7a:68:00:dc:99:94:41:26:90:b0:86:1b:20:03:
e0:27:eb:45:92:5b:9a:10:55:5a:38:75:78:d9:23:
67:b8:b0:e7:7c:d0:c4:21:f5:bf:75:98:32:b2:42:
5e:98:a4:74:4c:0c:32:50:a8:80:9c:b7:5a:d6:96:
04:8a:4f:eb:97:a0:1b:da:2c:b8:9b:69:ed:65:4b:
99:0c:3c:4c:77:8b:dd:10:f4:f9:6f:09:64:23:00:
ab:2f:0b:db:8a:d2:9f:a0:39:32:f6:b8:43:96:74:
96:5b:8a:9d:4a:be:18:5b:7d:f7:3f:c9:7a:2a:bb:
7a:04:a4:3d:a8:37:4b:bc:d4:bd:18:6e:62:5b:9a:
d9:66:a7:b2:2e:44:91:5f:8d:bf:f3:9c:f1:dd:7c:
9e:e3:83:04:67:a7:41:33:52:ac:cb:8e:da:58:05:
0d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:04:C2:63:7D:2A:10:86:66:B5:68:DD:AF:F7:57:A6:E8:72:EA:0E
X509v3 Authority Key Identifier:
keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/cgTCY30qEIZmtWjdr_dXpuhy6g4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.64.64.0/18
Signature Algorithm: sha256WithRSAEncryption
00:f2:49:0b:df:11:a2:a4:b8:47:8b:4f:16:ca:05:fb:c5:3d:
a7:f7:52:29:f6:73:be:17:bb:33:21:f7:03:70:a9:01:1c:f7:
7b:31:7d:3a:2a:72:f0:55:fe:df:fb:dd:01:3d:bb:dd:69:4f:
a2:0a:3e:b0:36:da:6d:14:88:5d:24:45:f8:7a:8e:97:74:47:
4d:b6:d2:da:39:23:f5:e4:13:ef:44:f3:3e:dc:c4:aa:cf:ae:
d2:c8:ec:9f:73:67:45:e2:28:2d:56:75:5e:4c:e4:f6:92:f7:
3a:e3:07:d3:30:b7:a5:3a:70:3e:91:63:d2:c7:cb:60:8f:f9:
c4:dd:ed:fe:ce:36:e6:61:71:b6:46:72:02:74:e9:85:88:cf:
ca:40:23:e1:78:93:44:50:14:ff:e7:8f:75:59:a5:79:ba:28:
b4:c6:7c:fe:95:72:26:52:12:68:d3:a7:bb:fb:91:43:cd:36:
e6:89:26:a7:cf:b5:6e:a6:c3:7e:83:86:9b:2a:e9:77:c2:e7:
82:0f:0e:44:06:6c:8c:18:88:55:f9:ba:aa:c0:44:1e:47:45:
05:a8:9c:d5:78:08:58:ec:87:b5:32:6c:d5:83:6a:e7:2e:3e:
44:84:56:36:2f:89:3a:a8:ad:af:14:fd:90:54:e6:66:54:31:
96:e2:f1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:54:21 2025 by rpki-client