Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/z4lXl2KRyRTBYbX7H5MgALled6s.roa
File: z4lXl2KRyRTBYbX7H5MgALled6s.roa (raw, json)
Hash identifier: ZBiV7vpZpuoN9iXmjxoBHbRAe7C9a1bCVi5tZJpLUbY=
Subject key identifier: CF:89:57:97:62:91:C9:14:C1:61:B5:FB:1F:93:20:00:B9:5E:77:AB
Certificate issuer: /CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
Certificate serial: 0C51
Authority key identifier: 6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/z4lXl2KRyRTBYbX7H5MgALled6s.roa
Signing time: Mon 26 Aug 2024 05:12:03 +0000
ROA not before: Mon 26 Aug 2024 05:12:03 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4780
IP address blocks: 61.58.16.0/20 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:12:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3153 (0xc51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
Validity
Not Before: Aug 26 05:12:03 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=CF8957976291C914C161B5FB1F932000B95E77AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5f:f7:d0:b2:9e:bc:ff:f6:d8:11:d2:d6:ce:
a1:53:17:d0:7d:67:33:6e:a7:92:fd:a9:bc:c8:c3:
31:d4:2d:dd:8e:17:01:a1:94:69:13:1e:a6:90:a7:
b1:b9:5b:9e:c9:ff:4a:56:70:e7:28:8f:d8:48:b7:
fd:30:cf:b7:fd:13:b6:2f:d8:80:54:b5:10:0f:f3:
62:5d:40:fc:09:e8:c1:ee:e6:3e:fe:0c:49:c2:ac:
ca:cc:aa:79:8f:07:05:0d:43:34:71:f3:14:cf:5d:
93:43:57:15:8f:92:99:9d:ad:4f:20:69:6e:f1:d2:
45:5d:94:20:a3:92:1e:97:08:e6:dc:8c:ed:58:a5:
86:09:e5:bc:c1:3c:9c:87:e5:3a:89:be:a5:68:2a:
13:12:98:78:cb:a4:3a:d8:d7:30:fb:ec:cd:7f:d5:
c4:78:02:7d:c2:58:53:fa:da:77:88:14:b7:f5:d4:
bf:19:64:c0:fe:75:9f:36:42:4e:d0:fb:60:4e:f5:
9a:20:0e:b7:88:e1:95:54:5c:b8:be:3b:3c:0d:b9:
0e:22:ae:85:7c:b4:43:6a:d1:2c:37:bf:c6:bf:3a:
25:b2:f1:f5:e2:e2:67:08:76:30:21:2f:09:31:7a:
c6:19:b3:d3:53:d5:39:e3:59:6a:11:0f:0c:a7:7f:
76:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:89:57:97:62:91:C9:14:C1:61:B5:FB:1F:93:20:00:B9:5E:77:AB
X509v3 Authority Key Identifier:
keyid:6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/z4lXl2KRyRTBYbX7H5MgALled6s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.16.0/20
Signature Algorithm: sha256WithRSAEncryption
96:a9:ea:7f:71:2f:1c:2c:8c:35:1e:ba:d8:ef:f6:f6:6f:31:
4c:08:d5:a4:79:0e:51:23:a5:7a:3c:db:84:88:08:26:61:08:
c2:b4:fc:36:da:9f:eb:4d:d0:93:00:52:b0:58:a2:59:a6:b8:
9a:fb:3e:c6:e4:ff:47:f6:bf:17:ef:a2:04:55:eb:1c:10:3b:
de:7b:76:be:28:2d:86:d5:88:7d:b2:ca:6b:92:2c:da:d7:8a:
06:09:69:d9:76:b0:05:0f:aa:71:24:c4:4f:2d:b9:ee:5f:0a:
e2:3e:6c:56:34:98:d8:46:7c:90:17:0d:17:65:67:4b:92:9a:
6c:d9:2a:00:5b:45:62:41:07:01:c6:0f:3a:64:32:3c:ff:17:
97:1a:90:8d:ce:61:ee:30:ea:67:d8:de:8a:d1:78:a4:0f:c7:
07:0c:9f:1d:41:05:46:14:14:f9:01:8b:39:ac:c1:c0:d7:2c:
67:b7:2f:fc:89:d8:13:89:27:87:69:e8:e0:24:a3:b0:5b:ff:
c2:c2:e6:84:3a:5d:77:15:50:40:88:83:e9:d2:fb:9a:46:f4:
9f:d8:49:4d:51:47:21:89:9f:26:0f:e6:32:0e:49:00:8c:1d:
2c:c5:a7:8d:fe:cc:24:42:dc:6a:60:1c:c7:6c:84:0e:dc:ed:
71:a0:51:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:50:30 2025 by rpki-client