Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/ZbBPn9FEdZqHFUvvZdjZa21FZ_A.roa
File: ZbBPn9FEdZqHFUvvZdjZa21FZ_A.roa (raw, json)
Hash identifier: SdNaHVYcvX5VPClKr3FIM3vCD2x5HX39YXFynTgQGi8=
Subject key identifier: 65:B0:4F:9F:D1:44:75:9A:87:15:4B:EF:65:D8:D9:6B:6D:45:67:F0
Certificate issuer: /CN=C3FC116A3CCB105AB50DA417679B1F9C70A4BD97
Certificate serial: 0337
Authority key identifier: C3:FC:11:6A:3C:CB:10:5A:B5:0D:A4:17:67:9B:1F:9C:70:A4:BD:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/w_wRajzLEFq1DaQXZ5sfnHCkvZc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/ZbBPn9FEdZqHFUvvZdjZa21FZ_A.roa
Signing time: Mon 26 Aug 2024 05:35:13 +0000
ROA not before: Mon 26 Aug 2024 05:35:13 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 208148
IP address blocks: 2407:a0c0::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Feb 2025 20:34:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 823 (0x337)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3FC116A3CCB105AB50DA417679B1F9C70A4BD97
Validity
Not Before: Aug 26 05:35:13 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=65B04F9FD144759A87154BEF65D8D96B6D4567F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:77:10:e0:3b:95:9d:fb:49:da:9c:9f:14:fb:
e8:68:6a:16:69:bd:83:91:cf:8f:8c:2f:b7:8d:33:
d2:3a:4b:b7:33:c6:81:87:30:a7:69:a4:68:d6:cd:
c9:a1:83:c1:1c:cd:14:5c:77:20:d4:1c:b3:18:d6:
47:78:b0:10:82:97:b6:2d:9a:fa:b0:32:35:c3:ee:
29:e3:d2:79:a1:b0:4d:ef:3b:49:c8:66:fb:d4:09:
cc:2f:5d:bf:10:29:8e:62:c7:48:67:1c:d2:26:e6:
f3:4f:47:e6:5d:d9:f5:ec:05:db:5e:2f:80:dc:86:
29:c0:6e:dd:32:be:1e:60:17:7b:b1:48:f4:1d:03:
ef:b5:5f:3c:c5:dc:29:ac:ed:12:ee:fc:bc:af:56:
66:a4:7b:bd:de:dc:75:c3:a1:ef:bc:df:3e:ae:7d:
3b:92:91:11:c7:3f:c8:a8:07:7e:74:c5:73:38:0f:
e5:9e:28:6c:55:04:fb:ec:87:b8:bb:40:37:7d:40:
62:30:b5:b5:c0:8e:10:48:6f:60:75:0c:ba:41:2e:
7c:11:f6:c3:b1:bb:6a:2c:95:12:fb:c5:c6:25:f9:
6f:80:06:b9:7f:c4:14:d3:5a:62:bc:d0:fb:91:9c:
0d:67:a0:ef:db:de:ee:38:d8:fe:e7:c2:4f:03:d2:
be:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B0:4F:9F:D1:44:75:9A:87:15:4B:EF:65:D8:D9:6B:6D:45:67:F0
X509v3 Authority Key Identifier:
keyid:C3:FC:11:6A:3C:CB:10:5A:B5:0D:A4:17:67:9B:1F:9C:70:A4:BD:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/w_wRajzLEFq1DaQXZ5sfnHCkvZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/w_wRajzLEFq1DaQXZ5sfnHCkvZc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/ZbBPn9FEdZqHFUvvZdjZa21FZ_A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:a0c0::/32
Signature Algorithm: sha256WithRSAEncryption
25:5a:e7:31:93:dd:34:ab:d9:34:f9:e5:83:66:1c:7a:b3:3d:
b7:c5:32:7d:40:1d:02:7f:28:00:a2:df:31:8e:5f:5a:6b:d4:
23:ff:2f:ea:98:92:47:e2:95:52:a9:d2:59:cd:3c:57:1c:4a:
93:68:83:a9:3c:b3:78:12:ca:b5:13:38:07:dc:96:4d:23:35:
9f:8f:d6:80:0d:8a:8c:2d:9a:3a:bd:bd:73:33:e9:4a:a9:f8:
0d:bc:7e:b6:8f:3d:c4:11:f7:58:9d:cd:d7:f5:52:93:ef:3a:
c5:c6:44:cd:b6:95:64:f7:e2:ad:8d:0d:67:a5:a2:10:7c:6f:
f4:4e:a8:95:41:c7:34:93:4f:95:db:1e:81:d7:9e:3d:4d:4e:
2a:b8:c2:42:63:9c:12:8c:75:c9:be:94:9c:7e:cd:8b:88:1d:
2a:c0:d5:90:f2:28:59:1f:23:86:40:8a:3a:94:f1:4c:a3:dc:
1e:de:6b:23:a3:db:19:07:96:bc:6c:2b:21:93:bd:d2:7b:22:
ce:b6:cc:49:b0:ee:5d:65:64:b8:55:2c:84:df:89:2d:ce:30:
28:f3:9c:16:e0:2d:6b:f4:3b:64:9c:2e:9e:1f:fa:06:c1:70:
e2:fe:5d:e3:41:98:bc:17:9f:74:8e:c3:12:5f:09:26:b2:41:
3d:9d:31:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 17:16:58 2025 by rpki-client