Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/1e6xq99Fd75E1WsKO4R1zs6Dm-M.roa
File: 1e6xq99Fd75E1WsKO4R1zs6Dm-M.roa (raw, json)
Hash identifier: Vo2VvkiNfVJwnV0zxWdHsIRwk7D+9pJptIBsAzuBJHY=
Subject key identifier: D5:EE:B1:AB:DF:45:77:BE:44:D5:6B:0A:3B:84:75:CE:CE:83:9B:E3
Certificate issuer: /CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Certificate serial: 06CC
Authority key identifier: AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/1e6xq99Fd75E1WsKO4R1zs6Dm-M.roa
Signing time: Wed 11 Dec 2024 12:43:51 +0000
ROA not before: Wed 11 Dec 2024 12:43:51 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9678
IP address blocks: 2401:95c0:808::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:22:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1740 (0x6cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Validity
Not Before: Dec 11 12:43:51 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D5EEB1ABDF4577BE44D56B0A3B8475CECE839BE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:37:d0:01:cb:a7:89:78:03:f8:6f:82:10:54:
64:53:48:65:a2:46:06:4c:5d:a2:0f:6f:c4:e1:6a:
c0:c4:55:03:cc:c5:05:06:7f:84:19:d5:b7:30:b0:
3b:3e:33:db:9a:3c:d5:cd:ee:ab:5a:2f:b8:6e:bd:
f2:d4:77:c5:f8:06:25:ec:11:f4:3d:93:66:9f:5b:
0b:a2:21:58:63:56:c2:8e:16:7c:27:20:e4:0f:d9:
00:ca:5a:fd:1d:08:36:1c:86:aa:db:a4:36:de:80:
7d:3b:a8:9c:00:1d:4c:9c:bd:60:ff:57:83:93:40:
16:52:a9:44:3d:20:a9:d4:8b:b5:9f:5c:f6:79:47:
db:38:4a:90:b9:15:1e:6e:df:74:1a:c4:e3:b4:f6:
b3:7b:5e:a3:b9:b9:bc:40:56:23:69:8e:af:b0:3d:
ce:b3:18:16:fb:09:2a:82:da:45:93:30:c9:f9:6f:
19:9a:e9:a7:a4:5c:10:fa:0d:37:48:8e:2b:5d:79:
2b:f1:26:19:99:78:fd:65:57:47:21:11:a6:54:35:
86:a3:27:6b:dc:55:61:81:dc:55:77:8f:3b:4c:fb:
a0:58:8c:c8:87:a9:fd:36:46:27:af:f3:be:e6:6b:
27:69:d2:f2:d2:48:ad:b3:1c:7a:35:a3:ba:b9:48:
59:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:EE:B1:AB:DF:45:77:BE:44:D5:6B:0A:3B:84:75:CE:CE:83:9B:E3
X509v3 Authority Key Identifier:
keyid:AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/1e6xq99Fd75E1WsKO4R1zs6Dm-M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:95c0:808::/48
Signature Algorithm: sha256WithRSAEncryption
bb:53:32:c1:33:c3:33:d0:0d:b4:bb:0d:5b:0f:d3:df:01:02:
1c:be:9b:1d:ae:e1:c5:4d:d4:e2:8d:fa:b9:84:07:f1:fa:46:
6e:51:0c:af:f8:89:31:6b:64:7f:63:e0:53:f3:c8:67:c7:01:
5a:f6:65:5e:f2:fe:3f:0b:e4:ec:aa:85:56:f4:87:c5:72:32:
57:1d:a5:eb:dc:11:1c:87:1d:ce:84:34:20:13:eb:ee:87:96:
08:db:18:9b:ee:72:59:f5:a4:8b:a0:61:fd:0d:f3:97:05:36:
22:fb:12:6c:3a:6a:b1:c5:d4:07:fb:9b:4b:7d:6e:39:4d:b2:
7c:d1:64:50:86:0f:7c:8e:16:83:e5:53:c1:ae:a1:77:b4:79:
55:c4:a1:bc:1f:a8:3f:cb:e7:0f:44:99:91:0c:83:94:bb:47:
2b:90:05:6d:97:3f:2e:20:a9:f0:36:96:2c:37:66:85:2e:99:
cb:0f:0e:bd:1f:a2:00:57:ab:42:57:e2:d3:c8:de:cc:e1:72:
f5:f6:04:37:f5:7b:1b:03:ab:d4:42:dd:98:21:2b:2e:e4:e3:
7c:64:79:86:33:79:c3:2b:5c:0d:58:e5:a5:70:76:eb:8e:64:
8d:17:e2:1a:46:94:a4:20:a6:8c:2b:dc:71:41:52:3c:7f:55:
69:ae:4e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:59:28 2025 by rpki-client