Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/GpukF7FEgZiQD7EBF1jIk_4leGE.roa
File: GpukF7FEgZiQD7EBF1jIk_4leGE.roa (raw, json)
Hash identifier: MeH4cszCYyx3iGhCs+mdMQeBhADRpcdL4S8esMFI2fc=
Subject key identifier: 1A:9B:A4:17:B1:44:81:98:90:0F:B1:01:17:58:C8:93:FE:25:78:61
Certificate issuer: /CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Certificate serial: 0D1D
Authority key identifier: 0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/GpukF7FEgZiQD7EBF1jIk_4leGE.roa
Signing time: Mon 10 Feb 2025 14:04:34 +0000
ROA not before: Mon 10 Feb 2025 14:04:34 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131597
IP address blocks: 61.65.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 12 Mar 2025 10:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3357 (0xd1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Validity
Not Before: Feb 10 14:04:34 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=1A9BA417B1448198900FB1011758C893FE257861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:12:e0:3e:1a:27:cc:72:c4:b9:b5:01:34:80:
4f:d9:f2:72:b7:f9:02:89:02:04:b8:f0:f7:4c:f0:
70:bf:9c:7e:16:4b:44:9d:b5:c5:da:a5:64:cf:7b:
16:9e:3e:82:3e:99:3f:aa:62:9c:22:c8:fe:5d:07:
66:3d:9a:94:46:75:86:42:9c:bb:8e:2f:c0:71:30:
bd:7b:5a:7f:c4:9d:e5:16:53:a4:02:f2:fc:6c:1e:
be:a9:0b:fa:11:e3:51:2d:6b:da:d7:da:cc:81:7c:
74:e6:9c:9c:44:62:4c:e0:b7:9b:99:63:56:d3:2f:
07:b8:43:3f:6b:d2:3c:00:ba:5d:18:de:8b:73:6d:
df:54:75:1d:e9:38:b5:3f:2c:cd:7b:7e:3e:30:b4:
b1:06:29:11:fe:32:a1:1a:2a:e1:b7:4f:b4:0e:94:
2e:26:83:f0:30:ab:a1:df:f9:58:ba:f4:92:be:e1:
ea:79:32:db:e5:99:93:f3:df:bb:9c:02:3f:08:7f:
e3:a1:15:25:29:a6:30:6f:ca:ed:19:23:80:cb:9d:
c7:c6:61:2b:c6:f6:a3:42:1a:04:7a:b5:67:66:50:
b2:77:5e:dd:f7:08:58:94:68:3b:ce:72:89:0e:fc:
20:17:16:1e:e5:bf:d0:a5:48:77:98:f0:8c:66:46:
e5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9B:A4:17:B1:44:81:98:90:0F:B1:01:17:58:C8:93:FE:25:78:61
X509v3 Authority Key Identifier:
keyid:0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/GpukF7FEgZiQD7EBF1jIk_4leGE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.65.232.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:a7:5e:1c:69:f9:7a:fa:ec:8d:e8:5a:53:9b:a2:de:f6:df:
45:f2:97:22:de:4c:b1:19:79:0a:94:55:ed:19:5c:a5:1b:9f:
31:bb:2a:95:30:39:1f:98:46:34:9b:1a:37:4f:2c:8b:09:eb:
cc:6b:f5:67:88:3f:37:86:70:d6:bf:1c:e1:5b:10:ad:3a:97:
75:29:33:b8:dd:14:d6:a0:f9:c7:48:d3:cf:d3:6a:bd:53:ed:
d4:85:61:8c:69:41:e5:75:08:87:c4:cf:0a:a8:9a:d1:ee:7b:
da:be:eb:aa:37:d3:95:9a:08:85:cd:07:f3:0f:0e:01:f4:f8:
ac:e5:5c:42:9b:c6:12:ac:34:c4:d0:f3:84:a2:e3:38:69:b3:
7d:a1:bc:a0:e3:f6:a7:6e:52:5c:66:00:9a:19:a3:22:49:db:
57:72:ed:77:21:8e:01:6c:1e:a8:cb:93:61:5c:37:fa:07:56:
75:d5:44:22:6f:65:29:54:4c:49:33:15:4f:6f:a6:47:e8:24:
d3:2b:7c:8b:4e:46:0a:47:ad:b1:e8:83:71:39:45:6f:90:29:
ce:58:76:c8:b9:72:49:3a:94:f2:8f:fb:0b:73:32:6b:4e:2f:
ce:b7:9a:0b:bc:be:c9:7f:ac:c1:b0:b2:1e:f8:bf:ea:b6:7b:
cb:b2:da:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:01:08 2025 by rpki-client