Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/iIPZGRK264oKH86UeoQysFGvfeE.roa
File: iIPZGRK264oKH86UeoQysFGvfeE.roa (raw, json)
Hash identifier: tbJLXRYO/Hi3ev7BnDExM0KGaHQDx2WyH/iceA7Ha20=
Subject key identifier: 88:83:D9:19:12:B6:EB:8A:0A:1F:CE:94:7A:84:32:B0:51:AF:7D:E1
Certificate issuer: /CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
Certificate serial: 0C55
Authority key identifier: 6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/iIPZGRK264oKH86UeoQysFGvfeE.roa
Signing time: Mon 26 Aug 2024 05:12:05 +0000
ROA not before: Mon 26 Aug 2024 05:12:05 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4780
IP address blocks: 61.58.48.0/20 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3157 (0xc55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
Validity
Not Before: Aug 26 05:12:05 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=8883D91912B6EB8A0A1FCE947A8432B051AF7DE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b2:22:30:77:de:08:40:2b:c1:d2:c3:51:1c:
a7:a5:b7:df:44:f4:1f:78:15:4f:4a:a6:e8:0a:ae:
fa:4e:8b:e3:88:96:94:06:30:04:1b:f6:fe:d4:ec:
c4:f4:2f:d0:9b:32:e6:ae:83:d3:34:73:6d:5a:b1:
77:c3:74:55:9c:1f:28:6f:fa:99:02:2b:38:6c:cb:
db:9c:25:14:9b:47:20:52:dd:ac:86:a3:f5:d8:61:
46:e9:81:87:76:73:96:03:60:3e:d3:9f:00:91:ac:
97:76:0f:34:f7:26:23:9f:86:d7:77:12:cd:98:8a:
eb:8a:68:a9:12:e6:bf:40:ec:03:72:88:b7:db:f0:
42:15:54:1a:52:0a:d0:6b:18:49:08:3b:21:1c:e9:
f0:32:68:ab:30:70:0c:74:74:e9:de:1d:58:34:0a:
6b:ff:21:78:73:11:fd:37:98:be:5b:f7:7d:5b:9d:
84:c0:da:a6:d0:04:29:de:72:56:1d:10:36:f3:78:
1f:78:b2:0d:0d:bf:d8:d8:58:3e:11:e7:64:71:67:
b6:97:d2:a6:0e:d8:48:03:e7:61:49:b0:4d:2c:89:
b4:83:ac:39:34:1d:bc:6a:c4:f9:df:c5:81:f0:28:
48:cf:92:b9:a2:c5:3d:80:9a:13:67:e5:b7:3b:92:
83:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:83:D9:19:12:B6:EB:8A:0A:1F:CE:94:7A:84:32:B0:51:AF:7D:E1
X509v3 Authority Key Identifier:
keyid:6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/iIPZGRK264oKH86UeoQysFGvfeE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.48.0/20
Signature Algorithm: sha256WithRSAEncryption
97:98:1c:01:12:e2:bc:4a:66:f1:1a:da:c8:d3:02:35:e6:d9:
93:24:2e:3e:4d:12:a2:bc:9e:60:5c:a3:af:82:12:3a:2c:41:
1a:6a:ed:9c:aa:6c:d9:4f:4d:83:1d:89:81:cd:c4:92:3e:2e:
cb:96:da:7d:8d:05:a1:73:22:7a:7d:e8:d1:e8:e8:d5:42:1b:
bb:08:0b:bb:04:2d:46:36:77:ed:85:4a:2d:a2:b6:80:a9:28:
79:24:b6:e7:8e:8e:c7:c3:9d:61:30:a2:37:10:90:65:f6:0e:
6e:f2:81:ba:23:3d:ef:81:47:88:86:e6:66:6e:b4:df:23:5a:
0c:78:5d:01:80:c8:f3:93:44:b9:99:3c:0a:e7:b6:ae:f2:ae:
83:5c:1d:0a:8c:93:8c:35:78:c3:24:31:0a:59:cc:d5:27:79:
f1:08:c1:f9:84:22:18:84:17:bf:5c:ff:b5:53:b5:85:e5:13:
26:b1:51:45:f4:0a:3a:d4:e7:9f:9d:d3:60:e3:b1:9e:4f:4a:
a4:10:42:bb:b6:4c:f7:56:de:d0:c6:a6:57:c1:0d:64:be:c3:
d7:93:72:75:c9:07:8d:12:56:f5:19:bc:a2:fd:f4:c1:ae:8d:
8d:2f:d0:37:11:0b:25:37:86:cd:e3:c2:52:34:4b:ff:1e:2f:
d2:be:e9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:50:25 2025 by rpki-client