Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHUMMYTECH/i01ImYGbOD3-TGH1ydjgMpvB1y4.roa
File: i01ImYGbOD3-TGH1ydjgMpvB1y4.roa (raw, json)
Hash identifier: G1ac6MrQRjFAkylX5JuMydWyUG+dqgPU5zFo4M6Tao0=
Subject key identifier: 8B:4D:48:99:81:9B:38:3D:FE:4C:61:F5:C9:D8:E0:32:9B:C1:D7:2E
Certificate issuer: /CN=99AE43A97D51C5A14E11287A98024C36A599377B
Certificate serial: 03
Authority key identifier: 99:AE:43:A9:7D:51:C5:A1:4E:11:28:7A:98:02:4C:36:A5:99:37:7B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ma5DqX1RxaFOESh6mAJMNqWZN3s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUMMYTECH/i01ImYGbOD3-TGH1ydjgMpvB1y4.roa
Signing time: Fri 22 Nov 2024 08:41:11 +0000
ROA not before: Fri 22 Nov 2024 08:41:11 +0000
ROA not after: Wed 08 Oct 2025 15:30:19 +0000
asID: 152615
IP address blocks: 2401:caa0::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99AE43A97D51C5A14E11287A98024C36A599377B
Validity
Not Before: Nov 22 08:41:11 2024 GMT
Not After : Oct 8 15:30:19 2025 GMT
Subject: CN=8B4D4899819B383DFE4C61F5C9D8E0329BC1D72E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1e:13:44:97:76:b1:00:21:e7:b6:e1:ed:23:
67:b6:45:c0:3c:61:41:87:7a:65:89:12:bf:1f:a2:
53:8c:88:aa:2c:f3:e1:1a:a1:5c:eb:63:84:4a:56:
c2:e5:1d:54:51:40:4d:75:c1:52:12:00:9a:fa:24:
29:d3:29:61:72:95:5c:38:ae:02:7b:2b:e0:7b:8d:
d6:d8:81:41:d5:fa:ab:a9:00:9c:38:0e:7b:fc:12:
80:04:dd:15:34:18:72:29:cd:d3:a3:d9:2f:5e:f4:
b8:a1:aa:c1:ca:ca:d4:2f:96:84:17:e7:94:be:56:
1f:8e:69:41:90:54:17:b4:37:93:8b:68:de:dc:92:
d7:f1:e0:8a:5d:68:73:4b:d2:a4:20:87:08:f1:84:
e2:b5:ab:3e:f8:96:df:2e:60:83:6e:d7:c0:d0:fa:
d8:f7:dc:2b:21:f3:dc:de:54:37:6b:dc:90:bc:bc:
2b:40:ab:bc:a2:f0:b1:53:b0:22:c0:e4:15:7c:55:
cb:05:04:0d:db:ee:c1:dd:b2:46:d5:65:9c:d9:01:
65:d7:01:6c:01:a8:54:26:e3:5f:17:0e:ae:eb:72:
92:2e:1e:07:04:ab:35:60:9f:6b:ea:05:26:dc:8e:
71:69:ee:4f:d9:6d:55:d2:f2:12:a1:d2:9d:a1:1a:
b5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4D:48:99:81:9B:38:3D:FE:4C:61:F5:C9:D8:E0:32:9B:C1:D7:2E
X509v3 Authority Key Identifier:
keyid:99:AE:43:A9:7D:51:C5:A1:4E:11:28:7A:98:02:4C:36:A5:99:37:7B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUMMYTECH/ma5DqX1RxaFOESh6mAJMNqWZN3s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ma5DqX1RxaFOESh6mAJMNqWZN3s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUMMYTECH/i01ImYGbOD3-TGH1ydjgMpvB1y4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:caa0::/32
Signature Algorithm: sha256WithRSAEncryption
1b:ee:cc:9d:67:57:8e:17:90:54:21:13:04:fa:23:d2:a1:6d:
91:84:19:80:d2:cf:6f:a0:b1:60:ad:1a:a4:aa:48:90:39:9f:
46:f4:d4:82:94:66:4c:66:00:87:cf:d4:bf:7d:57:90:b9:a0:
3c:80:1a:3a:cf:43:1a:8f:c0:26:71:61:2f:d9:23:c2:5b:c6:
c9:2d:36:15:bf:a2:89:85:f1:c3:02:63:62:48:05:c8:d1:50:
12:03:d5:07:9f:a0:a9:ff:49:32:64:e7:bb:df:cd:7f:8d:e6:
6d:35:a1:8d:01:a6:4f:a9:2d:63:ac:af:98:63:04:63:79:05:
32:f1:f6:34:a9:df:f2:66:21:ef:55:a1:d4:27:1a:c5:bd:e5:
ec:1b:00:4c:c0:1a:90:bf:40:7f:d2:96:34:43:d0:78:c1:06:
92:5b:9f:11:66:53:4b:1a:8c:02:c2:e1:8b:d6:92:03:c6:dd:
43:19:12:ea:e2:a9:40:6d:39:fd:37:1c:d9:48:f4:4a:b7:e6:
fc:00:a6:f9:d4:96:64:df:ed:98:a5:4c:43:63:56:b1:7d:2e:
e7:9c:d1:b7:d4:18:fd:d3:7a:65:38:6b:b3:cf:d2:4d:15:30:
c2:15:53:03:9f:7f:e9:24:b7:c7:91:67:79:5d:b4:07:13:ef:
c9:42:77:65
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Apr 23 08:22:59 2025 by rpki-client