Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/JvorsmxdG-n0jT_u2l4vmCq3LBA.roa
File: JvorsmxdG-n0jT_u2l4vmCq3LBA.roa (raw, json)
Hash identifier: MZ0OAtabyszE5FYmiqA3HrcGkhiLwjAEabbK7+JUiKA=
Subject key identifier: 26:FA:2B:B2:6C:5D:1B:E9:F4:8D:3F:EE:DA:5E:2F:98:2A:B7:2C:10
Certificate issuer: /CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Certificate serial: 0D22
Authority key identifier: 0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/JvorsmxdG-n0jT_u2l4vmCq3LBA.roa
Signing time: Mon 10 Feb 2025 14:04:36 +0000
ROA not before: Mon 10 Feb 2025 14:04:36 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 198949
IP address blocks: 61.65.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Mar 2025 09:54:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3362 (0xd22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Validity
Not Before: Feb 10 14:04:36 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=26FA2BB26C5D1BE9F48D3FEEDA5E2F982AB72C10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:31:48:d8:ec:93:a5:05:36:4a:7f:36:a9:f0:
fb:42:66:ad:9b:63:2b:cc:57:68:3d:08:9f:95:0b:
56:1e:c1:c3:c6:43:3b:6b:6e:ca:fb:40:5c:3f:2e:
c3:d8:91:fe:a0:09:58:2e:a3:0c:5a:9a:2e:c0:d1:
d3:f2:52:0c:81:08:af:91:f2:14:f2:7c:cf:7d:83:
d6:82:c5:0b:b7:c4:d6:ff:5b:75:a8:d5:c6:74:b0:
2b:c1:75:9a:7f:96:0d:c3:cb:5c:9c:90:15:8c:4a:
93:6a:2b:6c:d2:fb:47:87:63:4e:54:33:aa:61:c4:
0b:15:a6:c5:5b:22:47:75:c3:f9:1b:db:bc:ad:01:
aa:a8:4e:13:00:57:e1:b9:3f:ad:81:21:c9:03:51:
3b:a9:59:91:c7:ad:d1:74:29:3f:7a:dd:3e:c8:ee:
06:39:5c:04:f5:0b:ae:28:bc:5b:fa:c1:58:d6:f9:
97:dc:5f:2b:ee:04:15:fc:8e:90:e7:17:34:a7:35:
a1:85:b0:98:fe:4a:51:87:d8:c2:46:ee:62:f5:67:
87:fd:f5:4a:f5:7c:e5:a8:e6:24:ed:16:70:64:5a:
97:8d:94:5f:9f:e6:f3:05:b5:72:a5:70:5d:02:1f:
29:88:51:09:d1:f9:c9:3b:b2:ae:b0:eb:0e:9a:c3:
83:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FA:2B:B2:6C:5D:1B:E9:F4:8D:3F:EE:DA:5E:2F:98:2A:B7:2C:10
X509v3 Authority Key Identifier:
keyid:0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/JvorsmxdG-n0jT_u2l4vmCq3LBA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.65.237.0/24
Signature Algorithm: sha256WithRSAEncryption
01:66:9d:73:06:d6:01:d2:ba:0f:bb:63:3b:87:82:51:5e:c1:
12:be:76:b8:2c:06:b7:e3:5b:a3:3d:c5:d4:0a:ba:d5:76:53:
5c:b0:12:ca:16:7a:fd:01:c7:85:ad:2a:bf:36:f2:6c:b8:c4:
0e:2c:a9:a6:8b:7e:d6:5c:ad:4d:d2:40:13:b9:9a:7f:df:3c:
f4:78:ed:82:3f:e0:aa:66:74:39:dd:f2:f8:85:47:b5:f1:f4:
1c:26:e4:8e:be:79:11:1b:11:65:4b:b2:7e:01:b3:7e:96:1f:
16:41:c7:ae:61:7c:8b:70:80:ea:db:85:68:b7:d1:b8:0f:43:
4e:3a:2b:bd:fe:3c:09:92:88:cc:6d:1e:a7:10:62:5b:3e:a6:
9c:cc:09:85:84:ba:c2:40:8f:2f:58:a7:31:24:2d:d0:eb:7a:
a0:ca:d3:04:77:4d:a1:e4:b9:b7:cb:a2:91:56:fb:9c:60:d0:
a5:e7:f9:0b:79:68:7b:70:b8:27:dc:55:a0:38:a3:ae:9b:46:
41:49:ac:78:51:dc:8f:f3:36:c8:5c:3c:c1:54:7c:33:62:77:
34:b9:24:3f:bd:f6:28:2b:fd:a2:53:d7:f5:49:ea:a0:40:c2:
84:70:3e:8d:db:ca:85:2b:4d:dd:f7:21:24:da:7d:3b:36:b8:
0f:72:72:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 05:53:42 2025 by rpki-client