Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/1vMm3HKAY0h1O3y-hkEVijYkFbU.roa
File: 1vMm3HKAY0h1O3y-hkEVijYkFbU.roa (raw, json)
Hash identifier: NgZ490AT4fFzwOHJ0GEj6cXoZ5XyteEQ/uiS/vUFkZg=
Subject key identifier: D6:F3:26:DC:72:80:63:48:75:3B:7C:BE:86:41:15:8A:36:24:15:B5
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 117B
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/1vMm3HKAY0h1O3y-hkEVijYkFbU.roa
Signing time: Mon 26 Aug 2024 05:10:49 +0000
ROA not before: Mon 26 Aug 2024 05:10:49 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17408
IP address blocks: 223.26.68.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:15:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4475 (0x117b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Aug 26 05:10:49 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D6F326DC72806348753B7CBE8641158A362415B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:20:a1:cc:8b:3d:08:12:71:59:d6:cd:cd:8e:
90:f3:e3:1f:dc:6f:e2:0a:a4:b0:80:b7:0c:55:a6:
1a:7b:d1:a6:cd:29:19:83:18:7e:85:5b:7a:a6:a2:
97:72:6b:c9:b6:6e:92:aa:b8:78:11:34:03:6d:ae:
d7:a6:82:6a:6d:77:70:e0:60:a6:64:75:20:9b:7c:
32:4f:ca:eb:4f:40:51:46:d2:83:98:db:e2:55:b9:
0f:5b:ab:7e:0e:35:8d:e6:d9:f8:fc:1d:c6:2c:f8:
d1:74:a6:d6:1d:47:6c:36:3a:0b:69:fa:62:86:f0:
09:86:30:1d:98:41:74:76:6c:72:2e:db:d3:ca:ad:
0e:0a:9b:a5:a6:77:a9:7b:cc:0c:49:dd:2c:98:78:
fb:58:92:da:0e:36:b1:e4:0c:56:4e:e4:6f:04:a8:
8f:0a:7a:7b:05:6a:d7:ac:d2:25:b6:60:41:ee:ea:
f8:5e:99:ed:03:f4:ba:75:b1:17:66:1d:6c:f2:c2:
71:5e:c5:bc:fe:c3:72:c1:ee:2f:35:6a:3c:b4:2b:
7d:df:9c:b8:fd:bc:83:6a:27:0c:02:d1:01:6f:98:
bc:40:61:28:20:05:f0:b1:57:36:f3:cb:15:0c:62:
68:11:4d:72:ee:18:f6:ff:dc:19:aa:b2:85:f3:f1:
92:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F3:26:DC:72:80:63:48:75:3B:7C:BE:86:41:15:8A:36:24:15:B5
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/1vMm3HKAY0h1O3y-hkEVijYkFbU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.26.68.0/23
Signature Algorithm: sha256WithRSAEncryption
99:f2:df:bf:b3:5b:1f:1c:f9:ef:0b:d8:99:6d:71:59:d4:e7:
ca:72:61:e2:f4:ba:f1:ed:b6:56:1f:39:6d:75:5c:56:b3:4d:
1b:8a:ec:49:74:af:82:f4:fa:c3:80:57:c4:98:b5:47:74:c4:
d5:26:73:fb:88:5e:53:3b:02:e5:21:3c:84:b9:d9:e3:0e:b4:
f8:de:cb:f2:c1:49:4a:98:fc:e1:84:44:4d:a1:9f:93:85:d5:
ea:15:90:64:d4:e4:dc:a0:ac:c9:6e:61:6a:45:26:da:03:11:
18:c9:48:fa:d3:5d:d5:74:39:f1:3f:20:52:62:0e:05:8d:49:
32:67:49:f2:15:6a:5f:68:ef:c8:52:91:62:2c:83:b8:71:8f:
db:fa:a3:33:60:b6:33:86:25:c9:16:4d:fb:0a:fd:ca:dd:1c:
d5:68:0a:e7:50:1e:83:e6:9e:e9:65:d3:95:b6:c8:69:04:40:
ef:70:e3:2e:14:b5:79:60:ca:3f:2d:83:c5:f0:67:8f:6a:91:
26:3b:70:a3:0e:cf:62:e4:43:0d:8f:a5:c9:17:64:45:f5:49:
7b:d7:82:e8:07:4a:04:00:23:cc:f8:39:a9:10:cf:e0:91:01:
20:4e:ef:c2:e3:54:29:7f:36:35:91:cb:39:f5:67:e2:ca:ed:
b4:40:08:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:35:30 2025 by rpki-client