Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/8vx9m0Eifd6ouJJFbp9eHanWbPU.roa
File: 8vx9m0Eifd6ouJJFbp9eHanWbPU.roa (raw, json)
Hash identifier: OyzdhcYN4QEvwJdN3Gy4jT8buf8VUBkHHd3zxjRhKxU=
Subject key identifier: F2:FC:7D:9B:41:22:7D:DE:A8:B8:92:45:6E:9F:5E:1D:A9:D6:6C:F5
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 1170
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/8vx9m0Eifd6ouJJFbp9eHanWbPU.roa
Signing time: Mon 26 Aug 2024 05:10:47 +0000
ROA not before: Mon 26 Aug 2024 05:10:47 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17408
IP address blocks: 150.116.0.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:14:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4464 (0x1170)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Aug 26 05:10:47 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F2FC7D9B41227DDEA8B892456E9F5E1DA9D66CF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b6:c9:fb:20:c9:7c:ef:45:46:42:23:41:5b:
ed:95:96:c6:60:5b:d2:9d:f2:df:0a:14:c9:6b:86:
93:91:62:63:24:ae:ad:38:67:e2:06:41:07:31:9d:
a7:62:a6:aa:c1:a7:46:9b:58:74:56:0e:11:19:d4:
8e:a5:1f:08:ea:94:de:c2:e3:36:05:4f:f9:4f:fc:
c6:6b:ac:83:ab:38:1d:bc:dc:c4:aa:a7:91:77:4d:
4e:25:77:d8:2a:63:dd:29:d5:c6:7e:67:3e:c2:90:
1f:a5:3d:1f:3c:05:1a:6b:a7:3e:c7:98:0d:23:4a:
1a:f7:92:a1:00:3a:cb:51:9b:d5:08:72:cd:23:e3:
b6:d6:ec:f0:48:73:92:ce:32:30:a9:70:a5:5a:86:
76:5f:21:d9:dd:7c:df:27:cc:be:68:8f:90:bf:d0:
28:50:91:c7:86:2d:ba:2b:7a:47:3a:48:5f:c2:ea:
fc:77:60:29:a6:8a:cf:db:01:35:17:a8:4d:57:b9:
2a:3f:07:6c:62:6c:cc:ee:ae:2f:a0:7f:46:7e:e0:
d8:ad:59:bb:42:0d:02:d4:ab:93:d6:90:2c:6c:2a:
92:8b:5c:fd:98:a0:ec:42:88:0b:b2:1f:fe:07:87:
0b:83:dd:45:fa:67:ad:82:cb:11:01:ad:73:86:81:
80:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FC:7D:9B:41:22:7D:DE:A8:B8:92:45:6E:9F:5E:1D:A9:D6:6C:F5
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/8vx9m0Eifd6ouJJFbp9eHanWbPU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.0.0/21
Signature Algorithm: sha256WithRSAEncryption
00:0e:d6:ca:44:0d:a1:fd:ce:fc:3c:a4:fd:67:fe:6a:4e:94:
11:98:5e:a7:0a:0d:f0:e6:ac:69:0c:fa:91:9f:35:da:50:4e:
c1:a3:e5:b2:e4:b3:1d:f0:3c:be:4b:10:34:3d:4c:66:c9:fa:
00:2f:4f:22:e1:15:cd:a0:86:8c:73:71:e8:23:cb:0d:d2:b8:
11:9a:15:37:e1:ce:80:72:bc:7f:e1:b3:47:4c:25:cf:41:9a:
ec:f8:6a:90:ea:92:88:aa:8a:cb:b0:70:06:10:08:d5:e2:f3:
4e:dc:78:02:ec:e6:43:35:8c:a6:5d:c9:c6:a9:90:ec:b6:8f:
9f:8f:1f:7e:57:b3:1a:11:0b:31:2e:d8:3e:e5:e4:19:71:4e:
72:4a:66:e6:dc:19:19:e1:33:62:63:bc:6d:2b:0f:ea:c2:08:
4e:97:81:64:25:80:fa:1e:62:9b:40:5f:a5:c2:90:27:52:d2:
52:c3:4d:5e:7c:1e:bb:5c:7c:68:21:e8:f6:da:1e:61:e8:66:
62:32:0e:2a:ff:ba:64:bd:47:f1:6a:6d:4d:cc:42:21:9c:2b:
30:ef:fe:6c:ed:6f:40:1a:23:fc:4f:3f:99:9f:bd:75:13:b6:
85:ad:a8:60:96:52:c6:c7:c0:65:55:9e:d1:25:f3:e1:d5:50:
91:ae:49:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:14:50 2025 by rpki-client