Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/fYmzTzIQ-LYi9Yo60JMVivDqfRo.roa
File: fYmzTzIQ-LYi9Yo60JMVivDqfRo.roa (raw, json)
Hash identifier: Cx9XsK0yjHsgj/TjsKrWhEj3/fd4EK+waZsMzJj6ZOg=
Subject key identifier: 7D:89:B3:4F:32:10:F8:B6:22:F5:8A:3A:D0:93:15:8A:F0:EA:7D:1A
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 11AB
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/fYmzTzIQ-LYi9Yo60JMVivDqfRo.roa
Signing time: Mon 26 Aug 2024 05:11:02 +0000
ROA not before: Mon 26 Aug 2024 05:11:02 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 7532
IP address blocks: 150.116.56.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:15:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4523 (0x11ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Aug 26 05:11:02 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=7D89B34F3210F8B622F58A3AD093158AF0EA7D1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:55:8b:b2:b9:4b:42:a5:f0:fb:f6:62:a5:7d:
76:c8:36:ee:bc:54:25:97:85:e4:42:e2:2c:0e:83:
2c:6f:0b:54:f4:80:d3:85:a8:04:08:0b:5c:13:94:
97:6c:cb:51:7c:3f:a3:c0:2f:91:8a:33:ec:6a:f6:
c6:29:1e:84:82:0a:31:d1:cd:53:7d:b9:24:4a:29:
b6:2d:29:48:48:ad:6a:ec:9a:b2:b8:dc:e4:46:51:
3e:69:c3:72:e9:ce:5e:01:ca:8c:85:fc:db:3c:95:
27:1b:d9:0c:fd:38:64:62:f5:b4:66:9a:84:70:b8:
4f:7b:5d:f0:92:cd:69:7d:6f:3d:75:be:37:ed:cd:
b3:94:8b:e2:8f:23:1f:97:c5:72:54:66:aa:37:7a:
d5:0a:63:99:c6:d3:a4:df:a3:bf:56:13:78:f1:fc:
15:1a:54:6f:82:7e:7b:d3:18:cb:5c:07:94:1f:1b:
23:2b:1b:e0:b3:73:dd:b0:d4:18:63:0e:45:56:47:
61:fb:8c:df:0a:d6:96:76:87:8e:ad:be:c7:a9:87:
39:d5:75:48:a2:76:e2:b7:b1:d4:65:9b:c5:b4:16:
d8:21:e1:03:01:79:d4:45:4a:68:ec:f2:b7:51:70:
18:7b:0b:72:72:26:78:54:82:c3:99:78:35:cd:38:
6e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:89:B3:4F:32:10:F8:B6:22:F5:8A:3A:D0:93:15:8A:F0:EA:7D:1A
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/fYmzTzIQ-LYi9Yo60JMVivDqfRo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.56.0/21
Signature Algorithm: sha256WithRSAEncryption
19:57:8a:d3:4c:fd:c6:a1:36:5e:6e:82:93:fc:f9:dd:48:dd:
8e:b1:6b:7e:70:1d:60:ef:f5:2a:e1:2d:84:72:a3:f2:9b:da:
a0:d3:39:75:f2:f2:d2:04:62:23:8c:a5:0a:db:2e:63:9c:6d:
e2:bb:0e:73:a1:b5:0b:36:f7:b0:95:ca:08:7b:57:07:e0:9c:
6b:98:e4:ca:46:b5:30:d9:3e:bc:64:e4:ff:29:e6:2e:7b:e6:
2f:48:60:fd:e4:76:31:7b:13:83:05:6b:d9:bc:b6:39:0c:7d:
e9:30:bb:e9:da:5d:5a:9a:de:61:26:0c:4a:5d:64:af:0e:91:
35:33:03:c1:b8:6e:89:64:17:d2:a0:72:4d:5c:a6:dc:aa:51:
5c:09:16:d7:5d:7e:8b:4b:33:fb:28:29:eb:e2:06:ea:67:f7:
89:9a:cc:c4:14:b8:0e:01:16:03:e6:93:d8:13:c0:ec:93:08:
3d:29:75:f9:8b:83:fb:92:c6:f8:b5:35:5f:34:f4:3c:cc:46:
a9:82:1e:7b:34:38:ad:24:2d:66:de:e7:0e:ab:31:1e:0a:13:
a5:94:94:ba:94:f0:3e:d5:0c:23:89:94:bf:e4:dc:29:f8:78:
03:58:be:65:99:97:b3:44:e0:03:b5:e6:cf:98:82:3a:8b:e3:
b5:61:be:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:59:44 2025 by rpki-client