Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/snJShpvvGN2djZdAj6ArxlTLyJ0.roa
File: snJShpvvGN2djZdAj6ArxlTLyJ0.roa (raw, json)
Hash identifier: RI33H8eVnS7li3vT08IwC24GiYZ5DPf5A+QjOIwUsTM=
Subject key identifier: B2:72:52:86:9B:EF:18:DD:9D:8D:97:40:8F:A0:2B:C6:54:CB:C8:9D
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 11B4
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/snJShpvvGN2djZdAj6ArxlTLyJ0.roa
Signing time: Mon 26 Aug 2024 05:11:03 +0000
ROA not before: Mon 26 Aug 2024 05:11:03 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18419
IP address blocks: 118.150.224.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:15:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4532 (0x11b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Aug 26 05:11:03 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=B27252869BEF18DD9D8D97408FA02BC654CBC89D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f7:db:83:bf:bb:17:34:a1:72:dd:20:05:16:
2c:7e:2e:08:af:cd:8e:26:71:63:ad:93:e6:14:7d:
99:8c:a8:d0:68:57:9c:cf:d3:e4:7e:8c:88:5a:55:
7a:3c:19:0e:29:3d:95:25:27:30:b6:73:f8:07:e8:
66:8d:76:ce:5e:d4:f5:83:19:55:87:86:d8:1c:89:
cc:bb:cd:35:b0:85:4a:c6:f5:91:54:32:f1:2a:ae:
99:17:37:ff:5b:c3:6b:f4:ba:30:d4:87:6b:64:54:
8f:71:b4:d7:4f:07:69:5d:5d:ea:b8:e3:bc:c4:9f:
67:59:8b:37:54:f2:9e:4b:c8:99:ff:ed:55:2b:42:
d6:4a:09:1f:74:f8:8c:af:8b:7a:b1:43:15:06:9e:
5a:0c:95:e6:ae:73:80:58:61:1a:65:a7:dc:9b:95:
ee:ba:70:93:50:68:ad:a7:a8:fa:d1:79:98:65:3f:
39:d4:72:4c:2b:0b:4b:24:4d:24:0d:00:7e:fc:f4:
8f:b4:56:2c:bf:1b:ae:84:58:8d:c1:63:1a:bf:ee:
f8:f3:c5:6e:10:30:e9:96:3a:54:2e:5a:f8:39:c1:
9a:7c:79:58:4e:47:a3:92:77:05:c2:01:e1:dc:f3:
a5:42:60:05:4a:cc:b7:6a:34:2e:a0:b8:a4:62:8b:
4c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:72:52:86:9B:EF:18:DD:9D:8D:97:40:8F:A0:2B:C6:54:CB:C8:9D
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/snJShpvvGN2djZdAj6ArxlTLyJ0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.150.224.0/21
Signature Algorithm: sha256WithRSAEncryption
9f:47:d8:8e:06:56:c1:c9:e0:54:c4:e0:d6:39:8e:76:4e:40:
18:55:f2:a4:75:85:5b:47:00:7a:1f:97:7b:ca:67:61:ed:71:
1f:a1:ef:29:2f:97:2a:c0:d7:c7:42:73:a9:ab:c3:63:e1:c5:
c6:d1:fe:86:d9:de:b7:f0:24:53:34:89:e8:dc:2a:81:58:d0:
08:d3:a5:d6:40:97:8d:b8:97:b8:2d:b0:36:00:24:85:f8:ad:
95:30:f7:ab:77:f1:f2:ee:c5:b8:de:ec:fa:7e:c2:a2:0d:1d:
db:4e:4b:48:06:15:b9:c1:96:44:c0:64:c7:a8:de:d0:e3:17:
ab:92:59:a6:de:55:b6:45:00:cc:fd:3f:fb:fc:00:61:49:0a:
bc:ad:df:74:c9:3f:43:8d:b7:70:c4:ae:fa:4e:ea:84:7c:a8:
12:5e:af:ea:6c:45:a1:1a:37:4f:29:d9:d9:57:a5:0f:f1:ee:
cf:38:47:6e:c4:8e:e0:ff:53:da:07:b8:56:bd:48:96:8d:00:
b0:a4:89:32:c3:0b:73:f2:f3:84:0a:d2:e1:8d:72:c1:67:9a:
98:30:2a:ec:58:e9:25:cf:1e:b6:24:13:fd:b6:08:3c:65:50:
29:88:7d:d3:ed:41:21:51:9b:ac:49:7d:8d:82:72:5d:92:b9:
c5:d2:4b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:34:16 2025 by rpki-client