Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/kOw2H2BFAeIWz7FYgtMAGkpwBfI.roa
File: kOw2H2BFAeIWz7FYgtMAGkpwBfI.roa (raw, json)
Hash identifier: GuHKEGWocAGLDZtWFSgjyb1+Y7Lf0BrODIi2Ld9eP+Q=
Subject key identifier: 90:EC:36:1F:60:45:01:E2:16:CF:B1:58:82:D3:00:1A:4A:70:05:F2
Certificate issuer: /CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Certificate serial: 0D20
Authority key identifier: 0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/kOw2H2BFAeIWz7FYgtMAGkpwBfI.roa
Signing time: Mon 10 Feb 2025 14:04:35 +0000
ROA not before: Mon 10 Feb 2025 14:04:35 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 198949
IP address blocks: 61.65.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Mar 2025 09:54:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3360 (0xd20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Validity
Not Before: Feb 10 14:04:35 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=90EC361F604501E216CFB15882D3001A4A7005F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c4:2c:c7:81:a2:ce:98:24:32:13:b1:22:96:
d4:a3:2a:a6:cd:ac:6d:a6:13:18:13:13:6b:ad:ac:
7b:14:df:f0:da:30:fd:5a:06:bd:f1:5b:bb:8a:2b:
61:c5:89:63:02:4c:42:c8:15:99:67:cf:f4:61:3c:
ee:9f:77:ee:d2:df:4c:22:15:a9:43:4e:04:cd:6b:
8d:e3:14:ad:5c:a2:69:80:49:8b:b9:8a:c0:cd:68:
fe:13:1d:ea:32:3b:56:89:9b:1d:98:b9:23:71:57:
2a:ae:06:cc:90:f8:0c:96:f1:6a:2f:c3:5f:af:b5:
74:1a:93:a8:c5:f8:69:cd:30:06:64:42:5b:a8:cf:
05:f5:ba:cc:66:65:e7:11:67:37:2f:1b:58:83:f7:
16:22:a2:46:ff:bd:5b:34:3c:41:29:32:9b:9a:da:
a0:94:ef:09:15:c8:16:a1:86:f2:81:9a:93:8c:e5:
a1:8c:20:69:97:bc:da:72:c7:ab:e6:49:20:26:82:
3d:5b:25:9e:84:17:5c:c1:ae:54:6c:65:db:a8:6e:
01:81:a2:c1:da:a0:ca:ea:fc:62:b5:d8:ee:b6:18:
8e:9a:14:78:6d:a8:28:23:46:07:21:5a:ac:38:61:
dc:32:fa:b1:bf:f9:4d:e5:8b:39:55:4e:d7:72:1d:
3b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:EC:36:1F:60:45:01:E2:16:CF:B1:58:82:D3:00:1A:4A:70:05:F2
X509v3 Authority Key Identifier:
keyid:0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/kOw2H2BFAeIWz7FYgtMAGkpwBfI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.65.236.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:85:91:a6:8b:0e:29:c6:63:b8:dc:d0:36:62:d6:84:b0:22:
b6:ea:9f:82:7a:86:f3:a5:1e:3d:89:4b:89:49:06:c9:d5:14:
09:b0:ab:f0:56:62:0c:a8:68:5e:d7:93:80:ad:ef:8d:d3:39:
e8:7f:30:f0:7d:d9:2a:d9:e8:4d:2b:c7:39:e1:ba:ca:fc:fc:
07:cd:76:b2:28:98:24:f6:be:33:8b:22:93:b9:1b:e2:51:e8:
79:72:90:5f:74:41:3c:fb:4f:f8:61:fe:a7:5d:79:37:36:ea:
6e:b6:4e:18:a3:7e:ee:73:48:7b:32:11:34:63:a1:67:43:11:
96:51:5f:e1:0f:22:7c:f5:4f:58:16:9f:7d:09:a9:af:26:7b:
97:36:6d:c4:bd:d0:3c:da:00:f1:cb:42:62:af:8f:38:c9:a8:
a4:31:1d:54:dd:8c:75:76:9a:dc:b0:a1:f5:6f:86:82:4a:43:
35:88:b0:f9:4f:37:b6:d9:52:f2:1d:9f:b1:64:2d:f5:0a:e2:
c2:67:59:17:c9:09:af:45:d8:71:15:50:b1:60:d7:3f:f3:d4:
a9:df:78:6d:14:f1:d8:c2:92:75:61:bd:e3:91:fe:a0:17:f8:
f4:18:92:e1:5d:80:c8:b9:51:36:77:c1:02:f0:a3:45:09:d7:
8b:41:3d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 05:46:00 2025 by rpki-client