Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/XRwW7c3KYMLd0pTbd1Y6IvHf4CE.roa
File: XRwW7c3KYMLd0pTbd1Y6IvHf4CE.roa (raw, json)
Hash identifier: T1WkXZpAz++n0GQMQJubo7c+BWlBVZ+Yw4o4ExSot4A=
Subject key identifier: 5D:1C:16:ED:CD:CA:60:C2:DD:D2:94:DB:77:56:3A:22:F1:DF:E0:21
Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial: 0CF3
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/XRwW7c3KYMLd0pTbd1Y6IvHf4CE.roa
Signing time: Mon 26 Aug 2024 05:12:53 +0000
ROA not before: Mon 26 Aug 2024 05:12:53 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9244
IP address blocks: 61.56.80.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3315 (0xcf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Validity
Not Before: Aug 26 05:12:53 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5D1C16EDCDCA60C2DDD294DB77563A22F1DFE021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d8:50:58:31:c9:a0:ee:4d:40:90:83:aa:23:
0e:04:a4:5a:b4:66:81:be:2e:be:5e:9e:f8:54:3e:
05:96:98:6d:32:84:8b:09:ad:dc:39:cb:21:c2:bb:
e5:aa:21:6a:f3:4a:df:1a:44:e0:ea:72:7e:e1:17:
b0:4b:76:3f:7d:64:72:cd:77:77:ed:ff:c8:d3:89:
f4:6a:ec:95:26:84:38:44:24:20:e8:5e:1e:dc:20:
3f:cb:5b:b1:b6:3e:0c:27:c2:85:81:74:3e:0b:a4:
a2:3f:49:e5:87:ce:98:7e:2c:49:ff:23:ac:18:91:
41:b6:dd:30:74:07:82:f6:d7:4b:b9:d9:98:d7:6b:
6f:9c:8f:5a:44:0f:95:a2:94:6d:8e:3f:58:b3:06:
d4:25:ae:60:d6:15:5b:86:6c:d0:0f:1a:0b:b9:7f:
00:e0:73:f8:e2:dc:a0:ec:28:5d:9d:7e:22:5e:4a:
ec:b2:23:95:b5:84:6f:3d:f4:ae:37:86:ff:98:c2:
5b:af:64:79:3b:54:0d:26:5c:a4:dc:44:e5:76:a8:
30:ed:40:52:40:a4:9c:cc:2f:53:fd:a8:5d:69:08:
b2:51:4e:f4:de:47:b2:10:3d:6c:3d:79:84:14:ba:
cc:d4:43:6a:c1:b6:d1:7e:33:87:37:7e:6d:f2:2c:
f0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:1C:16:ED:CD:CA:60:C2:DD:D2:94:DB:77:56:3A:22:F1:DF:E0:21
X509v3 Authority Key Identifier:
keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/XRwW7c3KYMLd0pTbd1Y6IvHf4CE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.80.0/21
Signature Algorithm: sha256WithRSAEncryption
8b:99:ab:d5:1e:86:e2:76:71:d4:a0:bb:d2:a9:0a:01:13:4d:
aa:70:0b:05:71:3c:66:78:07:8f:27:cd:41:a6:29:b6:6c:60:
74:97:a9:8f:c3:d7:61:81:19:e3:c0:1f:6a:1f:09:94:8f:49:
b6:b7:6e:88:12:b6:4d:f5:98:ea:c6:c1:eb:24:a2:a0:7f:ce:
7d:af:b5:45:27:31:02:1f:83:25:a4:fa:00:d3:70:82:30:79:
9c:29:ea:1d:89:4a:a1:3b:c3:58:e3:ab:be:e2:8d:58:24:1c:
fb:8e:50:87:6b:e2:44:a8:32:e6:e4:c2:e3:1c:f4:a4:3c:a4:
27:ef:b2:c6:39:30:2f:cc:4f:f7:bc:10:36:85:fe:c1:26:d5:
f3:60:a7:f8:10:0e:5a:e6:fe:38:3e:52:88:d7:e2:c4:9a:e4:
25:3e:6c:c6:5f:a2:63:cd:df:28:96:2b:86:5b:46:74:e9:95:
50:1f:16:44:a1:0a:db:7c:28:d7:f2:a8:5b:f6:39:8c:2c:c8:
bb:3a:f8:12:d9:62:2c:f1:68:c2:4e:54:6a:7d:ce:20:c0:f9:
01:43:1f:d8:dc:7c:b3:e8:d7:b8:96:39:2d:f5:b0:66:d2:82:
61:cb:d3:b4:05:39:6a:65:bf:5f:26:cc:cc:09:d1:62:19:01:
2c:55:34:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:27:40 2025 by rpki-client