Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASNET/1hnkuSDbPPk63gEP4Mw5pMxhVhI.roa
File: 1hnkuSDbPPk63gEP4Mw5pMxhVhI.roa (raw, json)
Hash identifier: 4YAP8jIOt3Sw2dVfJrJ7CzsP/SjCgJQ69VAfg//TXAs=
Subject key identifier: D6:19:E4:B9:20:DB:3C:F9:3A:DE:01:0F:E0:CC:39:A4:CC:61:56:12
Certificate issuer: /CN=70984F008CA28F6475DB426353BFD1C433D8BC1A
Certificate serial: 0C44
Authority key identifier: 70:98:4F:00:8C:A2:8F:64:75:DB:42:63:53:BF:D1:C4:33:D8:BC:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/1hnkuSDbPPk63gEP4Mw5pMxhVhI.roa
Signing time: Mon 26 Aug 2024 05:09:42 +0000
ROA not before: Mon 26 Aug 2024 05:09:42 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9264
IP address blocks: 2001:c08::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3140 (0xc44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70984F008CA28F6475DB426353BFD1C433D8BC1A
Validity
Not Before: Aug 26 05:09:42 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D619E4B920DB3CF93ADE010FE0CC39A4CC615612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:75:7e:9e:fb:ec:44:5c:28:22:b0:32:f9:c2:
87:87:5e:a6:7d:be:26:6b:2e:f7:ec:35:7e:31:0c:
59:da:53:70:6e:a7:94:29:cf:f7:0f:d3:5e:c1:90:
5c:37:fd:0e:2d:aa:70:07:86:dd:e6:2a:1d:fb:35:
b7:0f:cd:52:c0:a9:be:fc:b1:85:09:cd:08:a4:69:
31:48:65:fc:25:43:bf:15:8f:cc:bf:3e:4b:b4:40:
12:d7:a9:98:e4:90:de:c7:0c:88:16:e4:4f:40:ae:
d2:44:af:ee:14:69:6f:d8:08:f8:3a:50:0d:d2:a7:
a7:e7:bc:83:6a:bd:29:f7:6a:d2:60:6c:36:30:8a:
2a:c7:71:dc:2c:54:dc:cf:96:98:45:ef:5d:a9:00:
38:9f:96:8c:c4:27:bd:50:07:ef:b2:54:71:8e:ee:
91:f0:2e:1b:ca:bc:18:8b:81:e0:c7:df:f8:60:db:
53:33:18:d2:e3:ef:ed:4e:63:73:b9:37:cd:73:da:
56:c5:1f:b1:6b:c2:ef:39:dd:62:1a:92:b4:0d:d0:
dd:0a:19:c3:40:b4:36:66:86:24:74:98:82:db:62:
39:7d:60:ae:77:28:29:be:51:8a:0d:cf:4e:b2:0f:
f9:90:cf:eb:c4:24:db:1f:8a:64:3f:c4:a8:12:a4:
50:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:19:E4:B9:20:DB:3C:F9:3A:DE:01:0F:E0:CC:39:A4:CC:61:56:12
X509v3 Authority Key Identifier:
keyid:70:98:4F:00:8C:A2:8F:64:75:DB:42:63:53:BF:D1:C4:33:D8:BC:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/1hnkuSDbPPk63gEP4Mw5pMxhVhI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:c08::/32
Signature Algorithm: sha256WithRSAEncryption
a9:e1:d5:8d:c6:85:54:c1:8a:69:db:96:2d:8f:90:4c:5f:98:
6e:81:4d:2c:33:ef:df:e0:8a:43:5d:7d:aa:68:14:8a:9e:90:
c8:de:fc:fa:f8:97:44:4a:b1:36:0c:25:e0:05:31:89:7a:5a:
da:80:de:b0:27:ec:36:15:c2:e9:e5:23:82:bc:75:12:de:32:
a3:d3:31:10:d7:40:0e:e4:78:8c:71:01:c1:fc:6b:c6:90:33:
5f:cb:f1:61:9b:99:2c:58:3f:da:25:50:0e:ef:9f:39:c5:4a:
72:94:58:29:f4:d4:00:32:92:06:99:7c:65:53:a4:83:fb:eb:
56:c3:96:93:44:88:3b:c8:b5:6c:fa:37:fb:8a:38:20:1c:74:
4b:9f:55:2e:ea:09:a8:f2:17:82:c9:10:c1:c1:8b:45:66:0d:
a0:20:16:fd:56:85:84:71:9f:f0:a6:25:fe:54:ca:8d:24:fd:
92:00:d5:ad:a4:ec:40:36:e1:da:83:a2:ec:c0:05:3c:cf:c4:
5d:49:55:82:16:e9:27:78:f8:0d:22:31:88:73:55:ea:28:a1:
83:fb:c0:bb:f8:4f:e6:8b:a0:73:9d:75:0c:4b:bc:51:51:bf:
a6:a0:ac:09:75:ef:34:68:9a:0c:aa:66:07:23:fd:d3:21:d2:
24:4f:99:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:25:36 2025 by rpki-client