Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/WgvHOtE0QiZ-sd4EoJ7HTMPHgJM.roa
File: WgvHOtE0QiZ-sd4EoJ7HTMPHgJM.roa (raw, json)
Hash identifier: IGMn8AtEOznJqwPynoAcLbfgkAi9OBzPq17IFOaWzJg=
Subject key identifier: 5A:0B:C7:3A:D1:34:42:26:7E:B1:DE:04:A0:9E:C7:4C:C3:C7:80:93
Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Certificate serial: 0CCC
Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/WgvHOtE0QiZ-sd4EoJ7HTMPHgJM.roa
Signing time: Mon 26 Aug 2024 05:27:33 +0000
ROA not before: Mon 26 Aug 2024 05:27:33 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17709
IP address blocks: 123.0.192.0/18 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:13:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3276 (0xccc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Validity
Not Before: Aug 26 05:27:33 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5A0BC73AD13442267EB1DE04A09EC74CC3C78093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1b:8e:78:cf:0b:a8:3a:e7:a5:c9:7e:0d:a2:
a1:f0:6d:8a:06:93:22:36:6a:db:11:c5:e0:bf:c1:
77:d7:86:40:03:86:c9:2c:b9:f2:a9:d8:1c:c3:f1:
4d:78:1e:e5:f0:23:10:9e:d0:7c:31:06:e0:0d:f7:
30:75:83:1a:2c:62:8c:e4:df:e4:6a:12:04:66:ea:
35:2f:86:19:a7:08:e8:5c:60:75:18:1d:e6:11:09:
6b:fd:1c:d1:0a:26:d9:e4:83:43:94:15:c9:6a:eb:
50:df:07:ca:52:40:e9:6c:28:df:a5:44:ab:bc:63:
d6:4d:ab:ee:34:3a:14:f4:0f:9a:34:c4:b2:38:0a:
a3:c3:0a:ac:45:e4:f6:5c:d0:09:b8:38:f7:92:93:
0c:9d:27:1f:2f:4f:48:f3:63:ae:37:45:e8:24:77:
19:4d:ba:14:af:87:6e:fd:23:41:82:2f:46:da:f1:
dd:3b:8c:83:c2:1b:a0:de:ed:91:27:dc:30:62:4f:
fb:15:20:19:eb:7b:15:86:81:d5:a5:a1:6d:f1:19:
3c:68:05:8e:5f:68:83:07:6f:c6:67:c6:c3:2e:75:
7d:f4:df:81:6f:84:30:2b:b3:29:1e:fd:51:52:eb:
96:8e:a2:48:ce:48:3f:f9:36:e6:01:b7:d3:52:f7:
64:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0B:C7:3A:D1:34:42:26:7E:B1:DE:04:A0:9E:C7:4C:C3:C7:80:93
X509v3 Authority Key Identifier:
keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/WgvHOtE0QiZ-sd4EoJ7HTMPHgJM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.0.192.0/18
Signature Algorithm: sha256WithRSAEncryption
00:a5:46:9b:73:6d:7b:d1:4e:46:7b:db:f6:56:ed:01:f4:1f:
97:9a:c2:b1:88:26:04:ba:23:35:d6:1e:02:ce:d9:4f:df:b2:
6d:9a:56:73:c8:dd:05:a7:21:4e:67:13:c1:26:5c:9e:93:1d:
d1:a1:3c:2c:75:0d:ec:1c:e2:d7:f5:41:a4:e2:f6:10:7c:fc:
2d:d9:1a:d5:15:64:5a:9d:a3:93:30:45:5c:12:cc:f3:77:3c:
ae:f6:a1:0a:86:2c:fa:3a:43:f0:47:9a:16:be:75:3c:aa:65:
bc:36:f2:26:c3:c1:f6:84:7d:8c:84:dc:7f:70:a5:ad:33:98:
fa:4f:c7:01:30:06:af:1f:1f:e2:a1:42:af:ba:e5:8d:b5:32:
bb:68:96:9c:2e:e0:c1:d4:f6:cf:20:8c:9f:1c:6c:04:24:66:
fb:33:98:1e:a6:ba:a2:ef:13:ab:46:07:ce:cd:b4:3a:dc:18:
67:10:89:40:88:3c:af:ed:73:87:34:89:6f:2f:b4:e8:4d:33:
bb:0c:c0:9c:8d:85:bb:d8:36:a5:70:3f:92:ee:6e:a1:34:05:
4b:66:2b:f4:25:a4:7b:9b:84:6d:e5:56:ef:c4:73:1e:5b:28:
b8:dd:a8:20:48:b3:57:eb:b0:18:f2:76:5b:1a:ce:e8:78:03:
8f:fb:10:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:39:24 2025 by rpki-client