Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/dz-1omIG9TjgvOpUy1HmFrVhdko.roa
File: dz-1omIG9TjgvOpUy1HmFrVhdko.roa (raw, json)
Hash identifier: LUQ1PN6JEYKBqk4Q3AGfqnosBG4UhFk8zX85QmJfJIs=
Subject key identifier: 77:3F:B5:A2:62:06:F5:38:E0:BC:EA:54:CB:51:E6:16:B5:61:76:4A
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 114F
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/dz-1omIG9TjgvOpUy1HmFrVhdko.roa
Signing time: Mon 26 Aug 2024 05:10:40 +0000
ROA not before: Mon 26 Aug 2024 05:10:39 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131627
IP address blocks: 150.116.144.0/20 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:14:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4431 (0x114f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Aug 26 05:10:39 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=773FB5A26206F538E0BCEA54CB51E616B561764A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1e:9d:a9:bf:fe:3a:40:e2:11:c3:68:ed:af:
3d:af:4e:1f:8e:57:17:dd:fe:29:bc:36:3e:ce:1e:
63:08:4c:ea:46:99:aa:7d:47:16:ed:e7:66:62:92:
2a:f0:b1:a7:a5:32:e7:71:67:ac:57:56:45:e6:7a:
ec:c2:7a:ff:31:7d:c0:6b:a0:5a:9f:82:66:d1:13:
02:09:91:2b:b2:11:96:11:5a:98:8e:1a:a9:bc:84:
fa:b1:2e:5e:66:a6:e0:1f:27:73:0b:39:a5:c5:fa:
be:4f:b0:e4:61:97:8e:41:88:30:c3:cf:08:b6:83:
0b:93:9f:a3:56:26:cd:af:a9:61:22:56:0d:ab:cf:
31:90:71:27:52:50:3d:2b:3d:90:7a:09:ba:06:fe:
94:51:3b:be:4f:0d:f4:f8:b6:18:12:29:94:8c:0b:
84:e7:e5:08:ac:6f:83:89:e1:54:c2:0c:0e:90:e3:
ba:77:52:58:96:41:5a:79:98:b5:cf:e6:6d:e0:56:
c1:2f:4b:4c:9e:71:b1:77:f2:f0:42:ab:a3:67:1d:
d9:48:ff:de:ad:8b:f0:67:1b:b0:56:47:d2:1d:32:
0a:17:ba:c7:99:f3:31:21:93:64:d3:81:a4:0c:9d:
fe:cc:ac:95:5f:b8:91:c6:e2:2a:91:ef:a7:c7:5e:
d1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3F:B5:A2:62:06:F5:38:E0:BC:EA:54:CB:51:E6:16:B5:61:76:4A
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/dz-1omIG9TjgvOpUy1HmFrVhdko.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.144.0/20
Signature Algorithm: sha256WithRSAEncryption
78:fc:bb:68:41:26:69:b1:8f:1e:8c:e4:aa:31:d7:4f:33:4f:
72:5d:02:b2:0f:a4:94:be:7b:40:7e:17:71:84:ab:27:c9:83:
fb:f9:c3:d4:6f:41:b4:ae:1c:51:b0:f0:78:77:2c:85:dc:0c:
97:92:2e:39:f2:7b:27:0a:70:9d:1d:10:b4:61:aa:15:2b:a4:
c4:29:1e:53:86:69:fe:86:77:4d:0f:2c:fc:63:2f:44:f2:a0:
d9:80:76:0b:27:8f:20:73:90:d3:fd:82:ae:59:78:28:01:77:
2a:c0:6e:c8:31:30:dc:cc:5b:9e:26:c4:da:76:de:fd:07:3a:
78:70:4e:c5:e8:a2:dc:f5:8e:8b:e6:36:6c:8b:51:7d:f7:bd:
19:94:7e:0d:4a:71:89:b2:d6:e4:20:68:a9:3c:7f:8c:e5:9d:
e9:33:7c:89:c4:bb:3b:a8:e5:a7:19:6b:df:cc:43:81:3e:9d:
75:f3:16:7b:3d:bc:b6:e8:f0:92:72:b3:64:ce:2f:92:db:5d:
fa:d6:3c:27:de:53:3e:59:8a:0d:42:af:af:5a:07:a6:6b:6c:
a7:f0:f8:47:6b:e7:dd:c9:3d:51:e7:18:49:73:30:1c:07:10:
3c:1c:07:e3:98:de:64:13:62:96:a1:7e:bf:85:38:97:b1:6e:
fe:7a:aa:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:22:34 2025 by rpki-client