Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ye5MGEOOPOeN1rIuHman_v3TIr0.roa
File: ye5MGEOOPOeN1rIuHman_v3TIr0.roa (raw, json)
Hash identifier: UxuMzqFRJCMVxXC4IZ55LGnQnBkTTHE61qDDYnbWF/o=
Subject key identifier: C9:EE:4C:18:43:8E:3C:E7:8D:D6:B2:2E:1E:66:A7:FE:FD:D3:22:BD
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 11A6
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ye5MGEOOPOeN1rIuHman_v3TIr0.roa
Signing time: Mon 26 Aug 2024 05:11:00 +0000
ROA not before: Mon 26 Aug 2024 05:11:00 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 10085
IP address blocks: 150.117.112.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:15:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4518 (0x11a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Aug 26 05:11:00 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C9EE4C18438E3CE78DD6B22E1E66A7FEFDD322BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:aa:8f:10:aa:e4:33:47:41:1d:a0:ec:75:86:
11:70:b1:6b:b7:35:71:91:32:9e:79:aa:10:02:26:
ec:df:d2:c9:ae:4c:65:cd:4f:35:90:fa:c1:72:a4:
c9:47:44:e9:95:12:a0:06:fe:a6:e6:a4:66:a7:21:
d2:cc:ce:f0:9e:0d:68:1b:ba:19:5e:a6:9d:b0:a5:
d8:8f:7f:de:c2:67:8f:71:d0:3a:23:4f:2d:b6:94:
6f:dd:7b:2c:8d:fe:17:28:20:9a:5c:db:47:34:41:
68:8a:37:2f:3f:a1:6a:53:7a:fb:a5:f6:e0:22:63:
dd:70:c9:d5:a8:11:18:4b:c4:9e:1b:2e:5a:60:90:
9a:0f:5f:07:15:97:24:31:c1:ab:5a:8f:6b:aa:21:
36:98:f6:63:7d:90:a1:76:ad:e7:6a:ea:69:20:68:
66:02:83:19:c4:42:16:28:55:6b:30:a7:ae:18:6a:
4f:78:5a:13:32:d8:2f:c3:8f:84:cd:9f:83:03:21:
0e:d1:9e:f3:bd:fd:b9:de:14:b3:05:65:7b:5c:7b:
5d:62:3d:cd:89:fb:75:b5:31:90:ee:47:7b:6c:43:
e0:1a:75:5a:e3:be:a2:f1:f2:9c:89:97:64:35:9a:
88:d4:82:16:9a:27:cc:59:ff:ec:d1:e7:75:da:7c:
69:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EE:4C:18:43:8E:3C:E7:8D:D6:B2:2E:1E:66:A7:FE:FD:D3:22:BD
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ye5MGEOOPOeN1rIuHman_v3TIr0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.117.112.0/21
Signature Algorithm: sha256WithRSAEncryption
39:cb:c8:df:2e:ec:e4:cf:f0:dc:85:a8:d4:ba:55:27:05:53:
67:66:d1:b9:8e:36:36:36:b7:5e:13:66:b7:00:b5:d3:2d:f9:
d6:e8:b6:91:15:82:59:2f:ca:7c:c6:18:41:e7:31:ff:42:93:
43:56:30:65:e1:34:b5:92:78:f7:3b:ba:43:fd:d2:e4:d0:86:
8f:03:05:a7:01:6b:06:0a:2f:20:58:86:3e:f9:f2:e4:6a:b1:
17:b7:dd:51:05:a5:fe:94:eb:62:16:13:e5:4b:f2:11:81:fa:
9d:a2:01:02:ac:ee:8b:9f:c9:57:ee:6a:0c:4b:91:8e:60:ea:
2f:da:c1:a1:63:ed:06:c8:12:98:34:8c:91:f5:a3:57:ae:9b:
b3:78:60:b3:34:b9:57:16:91:5d:aa:53:bf:f9:7e:a6:72:30:
60:89:89:de:db:e8:ef:01:b7:03:70:22:e3:d5:9c:a0:94:03:
9c:3c:a6:34:9b:53:bc:20:40:64:ea:42:8c:8e:cf:19:c5:39:
72:3a:a0:95:a5:9e:02:2e:01:85:f8:a5:00:62:dd:b3:a3:f1:
c2:f7:d5:d2:42:8f:28:d7:ac:ab:7f:95:a5:07:24:55:4b:8f:
b8:b4:2a:5d:0f:65:24:17:e8:1c:77:56:66:ed:cc:13:22:ee:
f8:f3:a7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:16:11 2025 by rpki-client