Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/Bi5U7TkTzmhWrdiQ0IkASmTvpMw.roa
File: Bi5U7TkTzmhWrdiQ0IkASmTvpMw.roa (raw, json)
Hash identifier: H3GCkmhNiPYdzzyf58fksIj9dRStpbQuuUfachhBlWI=
Subject key identifier: 06:2E:54:ED:39:13:CE:68:56:AD:D8:90:D0:89:00:4A:64:EF:A4:CC
Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial: 0CFC
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/Bi5U7TkTzmhWrdiQ0IkASmTvpMw.roa
Signing time: Mon 26 Aug 2024 05:12:55 +0000
ROA not before: Mon 26 Aug 2024 05:12:55 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9244
IP address blocks: 61.56.84.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:50:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3324 (0xcfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Validity
Not Before: Aug 26 05:12:55 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=062E54ED3913CE6856ADD890D089004A64EFA4CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:55:8a:57:b1:8e:5c:dc:ed:eb:6f:c0:f3:fe:
88:f0:61:15:31:14:4d:a3:c6:56:58:87:dd:b7:4b:
cb:d0:56:89:9b:f8:f3:1b:a9:83:56:23:86:5d:09:
18:2d:e7:13:2f:ee:3e:84:ec:e1:77:eb:8c:1c:4a:
35:10:92:a8:f4:6d:4d:5e:73:fe:7f:fd:4b:e8:c1:
c3:bf:2f:f6:bb:d5:34:64:33:59:04:79:56:0b:07:
77:42:90:cf:e1:80:76:4b:1c:b7:00:f8:3d:f2:35:
5e:17:1c:79:92:3f:5f:77:f8:a5:97:3a:47:ec:5e:
67:d6:eb:73:90:20:08:e4:6a:db:ec:ac:31:d4:ad:
a7:68:81:15:0f:1d:e9:db:a0:7e:d2:9f:3d:93:67:
8e:40:45:85:17:c4:28:3b:cf:da:a6:67:16:95:f2:
55:31:1b:89:f7:bc:cb:0a:e4:10:e4:fb:b8:6b:4f:
81:7d:61:29:f8:3a:98:ad:eb:5e:3b:22:df:02:49:
8f:e4:ea:30:01:6f:54:07:a9:7a:26:b0:59:db:3a:
6b:56:71:69:eb:11:8f:57:b0:f2:30:45:6e:41:c9:
fd:cd:83:a5:b8:2f:5c:58:eb:ae:1d:43:a5:69:d6:
55:07:ec:a8:f3:a0:db:06:dd:2b:f3:7b:1d:3e:4c:
af:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:2E:54:ED:39:13:CE:68:56:AD:D8:90:D0:89:00:4A:64:EF:A4:CC
X509v3 Authority Key Identifier:
keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/Bi5U7TkTzmhWrdiQ0IkASmTvpMw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.84.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:35:1f:6a:ca:14:a4:36:01:c7:5b:bf:c8:1a:8f:7d:29:df:
75:25:43:cf:53:8d:ed:8d:be:a7:98:7c:aa:4f:74:0d:29:7f:
83:87:8e:29:0e:3e:24:a0:f6:21:e8:89:53:8c:80:c7:93:a6:
35:43:b8:bf:d9:2b:ca:e3:6a:14:52:5d:1f:75:35:94:84:fa:
bb:c9:d5:7c:89:e6:70:b5:5e:54:c2:03:d8:e9:1a:1c:5a:60:
3d:69:87:4e:a5:fc:50:15:23:d3:f6:b0:83:0f:b0:e4:23:31:
af:5e:12:f1:4a:39:b3:b1:46:98:22:9f:96:72:fc:2a:ef:6e:
61:66:67:0f:c0:c0:4f:64:e2:a2:5c:7e:82:7a:5a:46:1a:29:
8c:4b:31:4f:2f:46:d2:c1:80:c2:a2:66:41:2b:a9:6f:b6:bc:
0e:bc:6c:95:be:6f:d0:7f:c5:d6:8d:49:4b:15:0c:3a:ad:7d:
b2:86:49:d8:fb:16:b2:01:46:e3:7c:a7:7d:f8:b4:39:55:5d:
6b:41:aa:fa:55:14:2a:55:30:36:e3:99:d3:e4:4d:c8:11:4e:
50:71:c7:f6:15:a5:35:96:fb:89:0c:59:8b:78:90:30:e3:d2:
83:28:38:8e:61:66:2c:35:5b:41:13:c0:d7:c2:f6:d0:97:cc:
45:44:4d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:32:38 2025 by rpki-client