Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/wYBYir_fRVHQObyclEPXx7DZro0.roa
File: wYBYir_fRVHQObyclEPXx7DZro0.roa (raw, json)
Hash identifier: vTDbizWb9SMIU+IJxAdAIKVyE/w+ihTGNGUQfUdrMlQ=
Subject key identifier: C1:80:58:8A:BF:DF:45:51:D0:39:BC:9C:94:43:D7:C7:B0:D9:AE:8D
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 116B
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/wYBYir_fRVHQObyclEPXx7DZro0.roa
Signing time: Mon 26 Aug 2024 05:10:46 +0000
ROA not before: Mon 26 Aug 2024 05:10:46 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131627
IP address blocks: 150.116.104.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:14:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4459 (0x116b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Aug 26 05:10:46 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C180588ABFDF4551D039BC9C9443D7C7B0D9AE8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:49:4b:fb:bc:bd:1c:2b:68:cf:a2:57:ad:48:
11:e4:f5:78:bb:cd:b3:00:7a:0f:5f:c1:51:77:50:
df:38:31:53:8e:dd:f1:0d:57:aa:c8:c4:87:65:22:
c3:ec:d3:44:55:ce:1a:35:2f:7b:ef:4d:05:00:5a:
b4:f0:4e:32:7b:42:42:71:8c:56:b2:4b:7c:f6:c7:
b0:bd:46:92:3c:c9:51:5a:f1:bc:b3:56:1b:97:ed:
4c:e3:d2:55:14:2e:6e:7b:bd:5f:e9:d8:95:2e:00:
a1:05:0d:50:f3:32:25:ed:5f:ea:a6:8a:51:9f:ef:
9b:3e:2f:e2:8d:bc:42:77:ee:26:ba:b0:52:43:0a:
e1:fc:33:a0:88:b6:36:22:1d:aa:e1:76:b1:51:92:
5f:77:1c:ce:50:bb:44:75:05:e3:98:1c:4d:b9:71:
f3:d4:e0:ce:e2:48:82:a4:d0:c4:74:3e:87:81:0f:
a1:2d:f6:7e:2c:05:ec:66:56:df:7b:e8:c4:de:d8:
50:ad:e4:cf:29:dd:d4:5e:b9:0e:26:62:ed:98:b9:
1e:16:3d:92:6c:f7:44:a3:10:49:14:65:df:37:20:
79:4f:0e:9d:58:fe:d4:07:95:c0:33:85:e4:47:f9:
40:ff:4f:24:db:d1:8b:01:45:0e:6c:9c:4d:0e:8c:
1b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:80:58:8A:BF:DF:45:51:D0:39:BC:9C:94:43:D7:C7:B0:D9:AE:8D
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/wYBYir_fRVHQObyclEPXx7DZro0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.104.0/21
Signature Algorithm: sha256WithRSAEncryption
5b:9d:76:6f:e9:4d:2f:0d:cc:6a:5d:cc:38:3e:f0:8d:b5:22:
07:e3:27:4a:a6:17:02:10:05:13:4f:28:01:7a:bc:da:da:b6:
d7:8f:08:2e:a6:94:79:dc:4b:12:32:cd:74:08:e5:2c:d6:57:
0c:59:a9:e5:b2:07:dc:a6:48:ce:14:f8:b5:b7:c1:5e:0b:ac:
9f:a2:fa:90:de:ed:73:26:4a:f8:fd:4e:a4:f4:d3:52:a8:9b:
2f:be:9e:0e:38:9d:be:b6:4d:22:45:bb:30:61:0e:c6:3f:da:
35:9c:dc:7d:9b:b8:d1:e9:de:90:ba:2d:94:43:ba:a4:56:c9:
93:d9:6c:6b:59:70:ad:86:23:38:57:0d:ee:fd:4e:9c:8b:e3:
b7:a1:ea:a5:46:ad:b9:bf:a2:b6:cf:01:38:58:12:96:71:f5:
d9:34:dd:8d:d0:c0:66:dd:0d:b3:10:f6:ba:d6:94:aa:9e:9d:
da:06:f2:ad:94:97:72:b7:b2:0b:a7:49:31:92:77:3b:1c:08:
ae:fa:47:17:d5:4f:58:90:dc:db:0c:a0:a5:24:ec:50:f9:36:
de:61:46:6f:62:5e:5e:84:75:2b:55:3d:e5:a1:76:f7:81:1f:
72:b5:8d:12:fd:35:10:c4:f0:1f:f1:d9:93:0d:a8:92:2b:fb:
e7:55:5f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:48:58 2025 by rpki-client