Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/KeW4LtP49B0wxLlqEcBSaITguG0.roa
File: KeW4LtP49B0wxLlqEcBSaITguG0.roa (raw, json)
Hash identifier: moRWFg8uwAfuR/yOpJIDqZ+0C21/BtWtPiUseaZCCo4=
Subject key identifier: 29:E5:B8:2E:D3:F8:F4:1D:30:C4:B9:6A:11:C0:52:68:84:E0:B8:6D
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 11B2
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/KeW4LtP49B0wxLlqEcBSaITguG0.roa
Signing time: Mon 26 Aug 2024 05:11:03 +0000
ROA not before: Mon 26 Aug 2024 05:11:03 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 63199
IP address blocks: 150.116.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:15:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4530 (0x11b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Aug 26 05:11:03 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=29E5B82ED3F8F41D30C4B96A11C0526884E0B86D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3d:0c:fd:c6:67:78:0c:49:c4:e4:c5:53:9d:
8d:19:93:43:35:16:68:4d:30:23:58:3f:41:bd:91:
c1:4b:72:b2:9d:12:61:c8:6c:25:dc:95:26:11:a3:
f6:8d:bd:ac:63:15:2b:f8:25:86:15:a5:8c:3c:8c:
bc:b4:5e:32:d5:14:19:40:db:2f:1b:f3:08:ce:2a:
b1:1f:d9:fd:63:6d:4e:87:1f:77:7a:61:63:a1:f6:
74:97:f7:6f:f8:d4:e0:f8:64:1b:35:ac:b1:af:dc:
dc:db:a8:1f:09:c0:15:d8:f8:39:d8:af:de:6b:fb:
b7:ed:61:08:9b:6e:5c:1f:2f:ff:40:b5:d4:cf:85:
f6:88:6b:aa:8c:97:85:c1:f1:60:fd:51:d5:ca:4d:
d5:81:a8:2c:ec:74:64:f2:a4:06:3e:47:b2:3c:3c:
c1:75:f3:42:d2:21:59:13:66:15:d9:ed:30:24:7c:
0b:25:87:16:93:c2:ca:45:1a:b5:49:99:d7:02:e4:
a7:36:3c:6a:6d:07:57:9b:b7:ba:29:8a:2f:26:0d:
0f:1b:fe:20:47:1e:dd:58:8d:4e:f5:67:8e:30:04:
75:a4:1e:70:02:ad:fe:d0:ce:86:76:cb:18:8c:79:
f1:1e:56:d3:b6:f4:89:a6:96:c3:8c:7f:97:19:31:
78:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E5:B8:2E:D3:F8:F4:1D:30:C4:B9:6A:11:C0:52:68:84:E0:B8:6D
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/KeW4LtP49B0wxLlqEcBSaITguG0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.1.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:4e:1b:b9:32:1a:db:9c:fb:59:ff:b8:58:50:b6:03:18:43:
36:c0:f0:a2:c1:84:77:cc:a5:12:0f:49:27:b3:17:fb:62:c9:
48:c8:4a:51:f3:55:5b:25:8a:31:3d:3e:ed:a8:89:4b:8c:80:
6b:14:e1:63:ad:a6:af:1a:9b:81:6f:44:94:69:4d:11:4b:00:
c5:6a:95:dd:ae:2f:24:ab:16:29:c7:71:34:13:98:67:cc:b9:
05:78:02:3c:ea:23:9a:d4:c8:b3:39:ba:8e:01:e1:35:be:31:
c1:ba:c2:51:e0:75:78:91:05:9b:37:e9:9c:78:f9:95:02:80:
f1:32:da:74:09:96:e2:a3:17:2a:88:33:fe:b7:1f:ae:4a:a5:
ab:f2:51:78:85:ec:58:cf:4f:13:80:b5:68:89:e0:8b:2b:f5:
9e:e3:c8:3d:ad:7c:c3:4d:c0:c7:2a:c8:9c:18:64:82:b4:04:
e1:5b:d8:ca:59:09:e5:45:87:25:e8:30:c6:ec:65:17:3d:33:
05:d4:e8:71:0b:9d:e8:aa:38:be:2d:bf:07:54:32:22:32:6d:
66:15:7c:97:b6:ed:7e:96:96:f5:71:30:67:78:4f:aa:cd:33:
67:28:aa:4c:ee:bc:44:88:70:37:70:8d:f9:13:9c:f9:f0:05:
b6:75:4b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:43:00 2025 by rpki-client