Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHUMMYTECH/9G16j6aVlZTe7CtweJvrIvmoopo.roa
File: 9G16j6aVlZTe7CtweJvrIvmoopo.roa (raw, json)
Hash identifier: 2YavXBdXbIOohzh0WvUbg/41cBswD1uBXx51Pr/RL3I=
Subject key identifier: F4:6D:7A:8F:A6:95:95:94:DE:EC:2B:70:78:9B:EB:22:F9:A8:A2:9A
Certificate issuer: /CN=574D5FD459D0D01C338EF0236122C762EC83283C
Certificate serial: 03
Authority key identifier: 57:4D:5F:D4:59:D0:D0:1C:33:8E:F0:23:61:22:C7:62:EC:83:28:3C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/V01f1FnQ0BwzjvAjYSLHYuyDKDw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUMMYTECH/9G16j6aVlZTe7CtweJvrIvmoopo.roa
Signing time: Fri 22 Nov 2024 08:40:01 +0000
ROA not before: Fri 22 Nov 2024 08:40:01 +0000
ROA not after: Wed 08 Oct 2025 15:30:19 +0000
asID: 152615
IP address blocks: 160.187.198.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=574D5FD459D0D01C338EF0236122C762EC83283C
Validity
Not Before: Nov 22 08:40:01 2024 GMT
Not After : Oct 8 15:30:19 2025 GMT
Subject: CN=F46D7A8FA6959594DEEC2B70789BEB22F9A8A29A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:8f:27:f5:d4:6a:d5:9e:c5:fc:d1:55:73:74:
ff:34:bc:15:8b:3c:74:6d:dd:5e:29:9c:4a:d3:ea:
88:4b:b5:21:4f:69:00:e8:63:82:be:9d:66:f5:59:
92:39:70:39:ec:6e:6b:55:0e:15:55:7d:dd:74:1c:
1b:61:d2:bd:59:83:d8:21:79:ca:20:25:db:50:3e:
dc:c0:07:47:0f:0a:df:89:13:91:4a:92:68:10:27:
2d:d8:5e:61:70:d8:7e:69:58:f0:50:f2:17:12:3e:
58:ae:10:af:b6:f8:9e:21:91:6d:77:6b:8a:9d:1b:
79:93:a4:a9:56:62:d3:53:45:43:e6:3e:19:a3:88:
53:dd:06:1f:81:4c:08:55:d1:14:db:53:26:0c:cf:
4c:d0:2c:a0:90:7f:d4:83:07:57:41:e6:5a:e6:1e:
16:26:21:07:77:eb:67:f9:0b:3c:11:5d:cd:b0:83:
fe:94:87:7a:b7:cf:df:6b:f3:55:d9:8a:c3:37:94:
8b:0b:a1:85:7a:bc:5a:40:a3:33:f9:54:73:09:a2:
7d:6a:d7:fe:97:e9:9f:1f:69:d9:24:64:59:7f:55:
4f:9e:06:ea:4f:33:95:de:0c:01:28:f1:cf:d3:d1:
2e:9c:12:c0:31:f6:06:9f:70:9a:70:74:45:b8:a0:
58:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:6D:7A:8F:A6:95:95:94:DE:EC:2B:70:78:9B:EB:22:F9:A8:A2:9A
X509v3 Authority Key Identifier:
keyid:57:4D:5F:D4:59:D0:D0:1C:33:8E:F0:23:61:22:C7:62:EC:83:28:3C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUMMYTECH/V01f1FnQ0BwzjvAjYSLHYuyDKDw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V01f1FnQ0BwzjvAjYSLHYuyDKDw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUMMYTECH/9G16j6aVlZTe7CtweJvrIvmoopo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.198.0/23
Signature Algorithm: sha256WithRSAEncryption
52:8c:ce:e7:8c:e0:14:4a:c0:78:69:e0:d6:92:71:d7:37:2c:
26:83:e0:7d:37:e6:a0:0e:97:82:58:b9:67:88:cb:33:08:51:
dd:28:f0:90:29:8e:82:6e:47:40:fb:5d:f8:71:45:d4:91:f9:
0e:c0:cd:44:d4:04:91:56:aa:66:fb:ab:2c:ef:e9:28:de:f0:
bf:b6:ac:0e:09:d6:61:69:48:fb:48:21:5a:0a:10:68:3a:5d:
88:55:b8:0f:e8:ec:b8:2e:91:9a:95:d8:62:62:b3:ca:28:3f:
b9:20:6d:b6:d1:b1:19:20:4a:2b:9d:d9:a5:6c:85:c4:63:0a:
db:79:9c:88:bd:19:fd:2c:61:d9:14:39:92:45:ea:3d:c0:7a:
90:93:b6:11:ae:2c:8d:7b:f2:68:3c:ce:0e:e4:2d:a3:1e:87:
73:1b:2f:49:e4:83:26:3a:eb:e8:90:fe:c3:7b:8f:49:67:2d:
05:74:4a:48:dd:c0:f8:64:59:2f:57:f7:2a:3a:09:04:9f:df:
4f:4b:cb:5a:33:41:e7:f4:e9:e6:a8:87:36:bf:24:4f:75:ca:
b4:37:2d:1e:53:b7:66:0f:cc:a9:12:ce:33:3d:87:f5:c4:aa:
f3:c3:ad:88:77:f0:55:4e:2e:96:60:19:60:0f:cf:9b:23:2c:
ce:36:4c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:09:52 2025 by rpki-client