Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/DBpbyvsTy8TvqHEHyPytf_txXtw.roa
File: DBpbyvsTy8TvqHEHyPytf_txXtw.roa (raw, json)
Hash identifier: CE1DVAkEJGun7MwE153bN7V2oCva2kE65VBxdCu5GHg=
Subject key identifier: 0C:1A:5B:CA:FB:13:CB:C4:EF:A8:71:07:C8:FC:AD:7F:FB:71:5E:DC
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 129C
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/DBpbyvsTy8TvqHEHyPytf_txXtw.roa
Signing time: Mon 10 Feb 2025 14:15:03 +0000
ROA not before: Mon 10 Feb 2025 14:15:03 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131600
IP address blocks: 113.21.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Feb 2025 09:31:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4764 (0x129c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 10 14:15:03 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=0C1A5BCAFB13CBC4EFA87107C8FCAD7FFB715EDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:73:28:d0:f9:9a:51:86:6c:58:12:84:c8:25:
ad:7d:99:e9:6c:86:64:ee:94:2f:5c:02:7f:98:ce:
88:b9:76:e3:f3:7d:ae:63:11:c3:2d:3b:3e:0e:fe:
6b:6e:8d:fb:44:5b:0e:d6:4c:bd:a7:bb:41:74:0c:
f6:1a:da:40:23:94:d9:11:c0:92:ba:7e:e1:72:95:
80:cb:35:dc:1f:fd:fc:c8:f3:c8:8a:20:9a:13:11:
77:74:0b:31:2f:c0:9b:8c:8b:c7:7f:9a:f0:7a:f7:
e1:aa:07:71:11:06:46:57:87:27:32:1d:8a:b2:db:
96:dd:71:88:9b:bc:49:b6:b8:09:ef:39:ce:1d:13:
f8:9e:d3:ce:d3:68:2b:b2:77:6e:b1:0d:46:f4:98:
12:0a:2d:1d:2f:e4:3f:ee:81:73:e9:3c:b1:ee:55:
e5:09:91:b8:f1:cb:f6:a8:99:c4:e3:79:ce:e1:f7:
98:38:47:38:99:75:fd:ce:c1:81:4e:8c:9b:4f:a5:
d4:ce:9e:84:89:7e:3a:94:5d:49:48:6b:17:9a:50:
2e:5f:38:9c:50:aa:9d:85:81:b9:9d:db:94:df:c6:
3b:2f:74:07:bd:2c:d7:42:2a:22:dc:66:35:fa:17:
59:76:53:d4:d6:a7:93:5f:36:34:53:81:a9:30:42:
4d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1A:5B:CA:FB:13:CB:C4:EF:A8:71:07:C8:FC:AD:7F:FB:71:5E:DC
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/DBpbyvsTy8TvqHEHyPytf_txXtw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.21.94.0/24
Signature Algorithm: sha256WithRSAEncryption
35:19:20:76:cd:90:47:d9:35:5b:f2:2f:de:93:1c:6d:c5:83:
56:6c:43:86:1a:8c:72:f8:f5:7a:18:ad:a2:5d:73:89:00:44:
26:4e:73:2e:e2:84:88:f0:c1:20:f0:87:db:54:74:0d:c5:a7:
a2:b3:d0:23:c2:b8:b2:8f:1c:da:66:f3:ee:d9:a8:4d:de:6a:
e2:40:03:8e:85:56:c3:12:fd:47:5e:b7:76:a7:a6:50:f6:f3:
fd:f7:d9:75:d8:39:9c:79:44:c0:24:63:5e:eb:a2:d3:3c:71:
9a:76:98:e4:27:ff:66:92:2f:2b:ff:44:0b:a8:a6:40:cf:87:
4c:4b:61:90:d6:f8:ff:3e:99:ce:d9:3d:e4:d8:5f:92:36:1a:
ae:e6:f4:39:c3:86:7c:48:7c:67:67:8c:fa:44:dc:fc:89:69:
9f:27:41:ce:71:ac:28:a2:16:ed:10:23:d7:34:0d:9b:dc:dc:
66:e1:6c:1c:9d:da:ef:8a:43:e1:b7:54:9a:7b:81:0a:20:28:
b8:b7:59:9b:c4:4a:51:3b:8c:a5:e9:43:e0:d2:2d:71:11:de:
9e:15:c9:1f:3f:6e:a6:45:73:17:1b:d0:ac:e4:d5:82:ce:14:
fe:e2:27:55:ea:85:04:db:b2:f7:b7:7d:31:cd:e7:1f:eb:b5:
4c:e9:3c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 14:09:12 2025 by rpki-client