Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/OtY5DwgBsR2Tv3BPCyy_DDu_jxo.roa
File: OtY5DwgBsR2Tv3BPCyy_DDu_jxo.roa (raw, json)
Hash identifier: OCd7KXMnzAY5+rUmzu8LEnNMeGMO0eTBO1z21RzHeA0=
Subject key identifier: 3A:D6:39:0F:08:01:B1:1D:93:BF:70:4F:0B:2C:BF:0C:3B:BF:8F:1A
Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Certificate serial: 0CDD
Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/OtY5DwgBsR2Tv3BPCyy_DDu_jxo.roa
Signing time: Mon 26 Aug 2024 05:27:37 +0000
ROA not before: Mon 26 Aug 2024 05:27:37 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131596
IP address blocks: 61.58.160.0/19 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:13:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3293 (0xcdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Validity
Not Before: Aug 26 05:27:37 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=3AD6390F0801B11D93BF704F0B2CBF0C3BBF8F1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d9:79:19:c4:26:96:69:35:78:a7:47:6b:60:
4c:5e:c1:9a:b0:8e:f2:e1:eb:50:e5:cd:a9:bf:a7:
56:0e:54:ef:f2:76:08:e3:ff:f3:e8:53:1c:50:54:
8f:b0:51:71:b1:85:f0:0c:b7:7f:6c:8f:c4:0e:25:
eb:18:50:13:12:59:a4:62:12:80:db:a9:2f:7d:bd:
ea:3c:2a:6b:18:44:27:ea:2e:0a:37:ea:b0:5f:5a:
5f:77:15:cf:04:01:97:10:f3:62:68:5a:6e:ee:88:
b2:79:c5:06:ba:2a:9e:dc:c6:8c:04:44:e6:2c:d9:
bf:34:c6:bc:74:14:a6:0a:32:40:c0:34:ae:3a:9a:
0a:76:aa:00:16:fb:8d:ca:6e:08:c4:41:05:4e:93:
09:49:50:c7:fa:6b:ac:9a:e1:d4:b8:8e:1f:8d:33:
26:8a:f7:d3:c4:ec:87:95:da:4a:58:af:7a:3b:2c:
4f:8a:79:94:ea:c4:aa:64:d1:a2:3a:3a:a4:1b:23:
03:5e:38:03:1a:aa:ff:1d:b3:28:ee:85:54:32:74:
38:4e:52:f8:f9:fa:81:c6:e6:c5:9a:c7:94:f5:5d:
8d:45:ef:a8:8f:6f:48:dc:a7:d7:bc:5e:50:11:86:
32:08:ee:47:f2:eb:16:2d:36:a4:39:ad:cc:da:09:
d1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D6:39:0F:08:01:B1:1D:93:BF:70:4F:0B:2C:BF:0C:3B:BF:8F:1A
X509v3 Authority Key Identifier:
keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/OtY5DwgBsR2Tv3BPCyy_DDu_jxo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.160.0/19
Signature Algorithm: sha256WithRSAEncryption
8e:a4:2b:22:a6:18:f2:08:cd:92:94:62:62:c1:ce:3c:96:f7:
2f:e0:42:11:69:90:a0:65:45:d4:69:b1:de:cb:16:1f:e3:ad:
fc:d5:53:c5:00:a3:28:0f:d6:52:34:92:54:17:0c:10:8a:23:
0c:62:05:bc:6a:ec:e8:c0:04:14:39:87:ed:46:a4:31:87:ea:
f2:df:2e:e3:be:89:ce:26:9a:10:a0:2b:f9:33:fd:7e:45:21:
fe:f7:c3:61:ba:91:b2:97:af:71:79:19:a6:1d:96:cb:49:e5:
ce:2a:e0:61:f9:7c:ba:82:2b:d1:21:13:f8:97:a0:b6:a4:65:
6f:b2:9c:db:6c:ef:68:a3:9a:35:52:28:75:e9:57:d7:ca:e3:
9f:70:bd:c0:32:28:3b:35:84:f1:39:2b:1c:1f:7d:03:04:59:
26:01:d9:3a:fb:4a:6f:b0:8e:d0:dc:13:82:ac:ec:a2:00:7b:
2f:e1:67:9b:89:c7:74:aa:57:db:0b:82:3e:db:79:4f:04:01:
d7:f0:19:65:48:f8:2d:33:d5:0a:83:bf:e6:6b:1d:92:30:5b:
2e:03:6a:fa:6d:1d:e1:d1:f9:67:bb:4a:08:30:cc:97:ee:77:
5a:52:a8:cf:b0:f6:54:72:ac:16:18:5a:44:d0:9f:d8:70:81:
f9:58:fc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:39:03 2025 by rpki-client