Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/PCqEou0FfkctFYH8uD3Y-sacYxA.roa
File: PCqEou0FfkctFYH8uD3Y-sacYxA.roa (raw, json)
Hash identifier: E8kuHDE2wSBjM2g/Qwwso5VwJVYFoSH3zXiROkvJBaU=
Subject key identifier: 3C:2A:84:A2:ED:05:7E:47:2D:15:81:FC:B8:3D:D8:FA:C6:9C:63:10
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 1055
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PCqEou0FfkctFYH8uD3Y-sacYxA.roa
Signing time: Mon 26 Aug 2024 05:16:19 +0000
ROA not before: Mon 26 Aug 2024 05:16:19 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24154
IP address blocks: 60.244.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:27:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4181 (0x1055)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Aug 26 05:16:19 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=3C2A84A2ED057E472D1581FCB83DD8FAC69C6310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:12:60:02:13:57:45:fe:ca:4a:1f:be:09:8a:
c9:e4:85:90:5b:9b:f1:2b:e4:92:64:8b:a0:89:cc:
56:fd:7f:69:6a:cc:d0:8f:9d:98:42:12:89:07:b9:
21:f1:aa:07:07:4c:e3:98:14:c3:00:1f:9e:a4:f5:
7b:b9:6b:56:5d:24:80:fe:a3:f4:3a:fc:be:c2:af:
23:7c:d5:c5:b7:0f:30:f4:d5:36:8d:21:5d:25:a9:
10:c9:65:be:b5:11:80:ed:c0:c8:16:49:cf:96:f4:
49:24:de:a8:f8:b5:1b:1b:3a:da:74:13:32:8a:77:
38:d4:c2:f8:2f:f6:e9:91:27:7c:37:4b:7a:b6:51:
7b:57:01:ea:ed:56:dc:3b:1e:27:e7:a9:8f:dc:1c:
39:a7:7d:3d:cc:a0:f0:d7:18:0d:1d:5d:55:57:8c:
f8:a2:38:e1:12:02:ce:ca:42:77:8b:6b:17:74:c2:
9d:9c:ad:dd:5b:e0:09:40:f4:0e:59:3a:0d:f2:44:
3d:db:65:8f:2e:e4:ba:e8:70:20:76:9a:bb:f7:97:
11:b1:48:d7:79:fe:84:2b:1e:8d:66:4c:d2:93:10:
a5:c8:36:f1:42:f8:70:0e:70:73:54:80:9e:c2:0e:
b0:ba:f7:9b:4f:c5:57:f3:38:e8:60:13:1e:b4:43:
e1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2A:84:A2:ED:05:7E:47:2D:15:81:FC:B8:3D:D8:FA:C6:9C:63:10
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PCqEou0FfkctFYH8uD3Y-sacYxA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.244.0.0/24
Signature Algorithm: sha256WithRSAEncryption
42:32:e0:b4:08:10:5c:4a:1f:43:8e:ca:08:c8:c4:5b:c9:31:
3c:1e:07:8a:1c:8c:f5:cf:cf:a8:37:aa:f1:cf:86:a6:d6:86:
f5:8c:93:f8:9f:02:0a:ea:b5:54:9d:f4:14:2c:e9:49:3f:3f:
dc:12:32:4d:2a:86:43:9a:34:e2:96:94:02:92:01:a4:4b:f5:
a0:f9:89:51:ca:77:8f:c9:ea:86:15:14:85:94:9e:db:73:0e:
5c:9c:b3:83:f5:0e:de:d0:84:d6:86:90:dd:6d:6f:94:2e:7f:
e0:e7:42:64:e8:83:7e:0b:5b:ae:54:f7:e9:87:6a:19:41:b7:
8d:45:a4:53:ca:5b:ef:bf:01:1a:bd:21:d2:42:7d:c7:88:c0:
75:d5:f7:84:da:f8:0d:18:54:53:9b:bc:e6:f5:3c:a9:d5:bf:
02:85:a7:7c:9a:07:2e:f9:f5:2b:9e:8d:1d:a3:24:ae:15:6d:
6e:55:f8:39:0d:15:2b:50:88:cc:41:ea:b7:6b:48:2e:ef:e2:
02:5f:06:c1:20:16:7b:92:3c:e4:c2:20:c7:8f:09:85:ec:8f:
71:14:9d:1f:10:12:fe:e4:ae:d0:5b:82:50:b5:f4:28:d8:4e:
68:45:91:61:d9:f1:7a:a2:98:87:10:2b:f1:36:79:40:0f:3e:
82:7f:a1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:46:52 2025 by rpki-client