Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/KvO45oiO2o0VH1cBik3U3WIBPPE.roa
File: KvO45oiO2o0VH1cBik3U3WIBPPE.roa (raw, json)
Hash identifier: 4eGlCsSEzfmZYvEX+daJ/cp+p5k+j7PXdpjNMfCbfqg=
Subject key identifier: 2A:F3:B8:E6:88:8E:DA:8D:15:1F:57:01:8A:4D:D4:DD:62:01:3C:F1
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0DBB
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/KvO45oiO2o0VH1cBik3U3WIBPPE.roa
Signing time: Mon 26 Aug 2024 05:10:22 +0000
ROA not before: Mon 26 Aug 2024 05:10:22 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18429
IP address blocks: 27.147.0.0/21 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:03:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3515 (0xdbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Aug 26 05:10:22 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=2AF3B8E6888EDA8D151F57018A4DD4DD62013CF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:a1:4b:59:c9:fa:56:59:f6:97:11:93:f7:2b:
46:0d:b8:6c:15:88:f9:d1:38:53:3b:d5:f9:d8:ad:
a5:8a:94:b4:e2:38:9e:c3:14:f9:03:17:e2:99:7f:
be:1c:e9:2e:fd:ec:4c:6c:b3:32:b2:db:d7:c6:a1:
dc:61:ec:53:2c:28:d7:47:f9:0f:d9:92:da:3d:c5:
f1:48:2c:ba:2f:74:32:85:aa:83:33:0a:b4:78:a4:
00:18:55:56:5f:f4:5c:77:77:b2:df:1b:fa:a9:d4:
9b:7d:b8:07:7d:89:28:38:c7:b5:02:9b:20:53:21:
92:4c:00:3f:62:63:61:c4:f8:19:ea:19:7b:2a:c4:
77:06:c4:8d:fa:4a:2e:35:df:0d:af:39:0c:7f:2e:
44:65:74:b0:10:2e:82:95:68:a4:80:57:9d:2c:3a:
10:1e:4a:06:4c:59:24:f3:b1:90:7c:97:e6:d9:2d:
5d:4a:5b:a3:2c:08:e7:83:53:6f:8c:fb:21:e7:89:
f0:39:a7:48:8e:60:7f:cd:f4:ae:67:73:91:6e:cb:
1d:72:c5:4b:66:c1:15:49:1a:48:97:93:89:91:33:
69:a3:76:cb:06:a2:8d:04:00:07:bf:5c:e3:1a:76:
84:39:ca:63:da:11:ae:46:5b:8b:d1:92:47:32:15:
4a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F3:B8:E6:88:8E:DA:8D:15:1F:57:01:8A:4D:D4:DD:62:01:3C:F1
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/KvO45oiO2o0VH1cBik3U3WIBPPE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.147.0.0/21
Signature Algorithm: sha256WithRSAEncryption
9a:c4:e7:a8:e7:50:e8:5b:ba:7d:77:68:b3:ff:16:ff:ea:2c:
4e:1c:39:ff:9a:ef:80:00:1a:22:fe:ef:a9:e0:f7:a5:cf:5f:
62:f1:a8:4c:fc:5a:74:4b:35:cf:2a:e2:59:18:85:92:f3:f2:
2e:49:e3:c2:ab:ba:3c:7d:60:2e:5d:8b:66:e9:7a:85:8e:b7:
fb:7d:a2:b3:5e:0f:22:42:a3:d7:27:74:d8:74:97:69:47:8b:
6f:ae:d5:90:73:18:35:e0:7c:06:85:d6:28:48:fe:1a:ea:78:
ba:0e:6b:ca:a7:dd:98:5d:a8:bf:64:1d:8f:57:57:c6:3a:57:
11:e8:82:d3:34:56:a6:10:f7:50:06:cd:2c:be:ea:53:cf:d3:
e9:e6:6f:20:92:34:cb:d8:0e:ea:44:08:92:42:3a:8f:61:ca:
d7:f0:0e:67:82:4e:95:ea:37:0e:a1:b9:5a:e3:97:ea:15:fc:
c8:30:21:88:9c:0a:60:87:b6:82:5c:36:e5:cc:1f:01:13:5d:
e3:37:78:f2:b2:a7:e0:64:99:13:ef:70:ba:9f:c0:a6:76:64:
a9:b1:d2:92:10:86:1d:31:c8:a7:85:0b:cf:35:90:fd:6e:58:
1b:15:d0:56:8a:1f:91:fa:dd:b8:97:56:a9:88:ab:ff:28:63:
90:07:3d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:36:33 2025 by rpki-client