Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/C4pIo8RTwNXvSv9tUb74hmY98cw.roa
File: C4pIo8RTwNXvSv9tUb74hmY98cw.roa (raw, json)
Hash identifier: RIw8PO54mqZ3+7K0i7ofLUzsySx3K9O6B6r4Uqg+nFw=
Subject key identifier: 0B:8A:48:A3:C4:53:C0:D5:EF:4A:FF:6D:51:BE:F8:86:66:3D:F1:CC
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 115C
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/C4pIo8RTwNXvSv9tUb74hmY98cw.roa
Signing time: Mon 26 Aug 2024 05:10:42 +0000
ROA not before: Mon 26 Aug 2024 05:10:42 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17651
IP address blocks: 150.116.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4444 (0x115c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Aug 26 05:10:42 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=0B8A48A3C453C0D5EF4AFF6D51BEF886663DF1CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9b:7f:b2:76:ce:d2:34:77:9a:36:bc:8d:9f:
73:79:6a:46:b9:61:38:e6:9d:fa:6d:c4:7c:f4:1c:
75:80:03:a3:68:d1:1c:ed:75:2e:ee:0f:83:21:eb:
16:c0:8a:18:08:45:21:a6:93:0a:42:78:8a:82:4d:
11:ff:36:49:66:e7:fc:ac:b9:a0:6e:9d:03:ef:e2:
d8:21:8c:fc:3b:6c:8b:ad:00:ce:cb:f4:9e:c2:b4:
7a:d1:f1:18:c3:97:d0:4c:5e:63:37:c8:92:a2:2b:
a4:26:f7:0a:b4:05:26:d5:c0:12:80:5d:00:9d:ae:
aa:55:30:ed:7d:65:7e:d4:91:2f:79:11:4f:7c:75:
36:86:d6:24:2a:d3:f6:13:8c:34:a6:69:a4:48:4d:
b2:77:b9:ef:56:7c:1b:dc:94:24:21:ea:3f:c5:f0:
88:b0:35:d4:d4:a6:7b:91:05:df:93:26:83:14:10:
06:1a:43:b7:fa:2f:ea:2f:f6:45:28:7e:58:bb:11:
79:d7:a4:de:42:87:9f:ca:61:6b:8c:de:29:44:dc:
c0:ae:67:f1:a3:61:dc:67:2f:5a:c0:ef:89:75:8b:
37:9b:68:66:19:a4:58:23:59:36:6e:6a:0b:a2:b6:
25:1c:31:bf:31:bb:b5:e0:81:39:07:1d:f7:f3:9b:
01:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8A:48:A3:C4:53:C0:D5:EF:4A:FF:6D:51:BE:F8:86:66:3D:F1:CC
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/C4pIo8RTwNXvSv9tUb74hmY98cw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.116.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:92:d7:a0:5a:cb:e5:50:ca:ae:35:3b:f1:8b:9f:00:38:0d:
3b:d6:54:32:d3:11:30:46:73:64:d0:17:16:99:24:e1:45:0e:
a0:d8:36:c5:6f:50:9f:64:2c:d7:c2:3b:a8:cc:c5:ca:36:31:
9c:47:df:5a:01:21:1f:a5:ec:0b:67:ea:31:2f:96:ea:c1:e1:
10:08:f5:62:70:db:3e:55:5e:bf:25:c5:b5:fd:c2:44:b7:23:
a5:9b:28:ac:5f:73:39:c3:6a:f2:10:b6:b2:a5:25:1a:13:54:
83:0f:8d:8a:50:67:e3:00:46:3a:c4:54:cc:ae:8c:21:2a:d2:
2b:45:99:13:2e:6f:eb:ff:3c:4f:11:ea:6a:c4:7c:01:d4:f1:
4c:c7:eb:ae:d3:f0:f4:3f:8f:ee:4d:23:2d:56:96:1b:8d:fd:
c2:36:f4:cb:c2:f2:b5:16:ee:8b:2c:f2:4b:76:6a:d8:57:6a:
83:05:2d:8f:4d:a0:ee:c7:9d:08:ea:72:b9:54:ba:7d:4d:fe:
b5:a3:02:1f:19:ab:0f:fc:25:0a:db:6a:39:1f:c9:95:5c:eb:
17:7f:a3:fd:ff:40:8e:42:45:56:d0:aa:8b:70:1f:14:b5:3d:
62:00:4b:ac:2d:7f:90:50:26:bb:44:5b:24:b8:57:e9:58:1f:
0e:e0:21:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:13:32 2025 by rpki-client