Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HYA/W2dE88-I3fbdhvOlveU-5m-GihM.roa
File: W2dE88-I3fbdhvOlveU-5m-GihM.roa (raw, json)
Hash identifier: Sx8EAY8LzwUu4mplE6+bOXp2QsQYY3uFOqkjOc77nG4=
Subject key identifier: 5B:67:44:F3:CF:88:DD:F6:DD:86:F3:A5:BD:E5:3E:E6:6F:86:8A:13
Certificate issuer: /CN=0EAE2D331F2C4280C16AA8BAFE16FDDCCE3715B4
Certificate serial: 0C60
Authority key identifier: 0E:AE:2D:33:1F:2C:42:80:C1:6A:A8:BA:FE:16:FD:DC:CE:37:15:B4
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/W2dE88-I3fbdhvOlveU-5m-GihM.roa
Signing time: Wed 13 Nov 2024 05:44:34 +0000
ROA not before: Wed 13 Nov 2024 05:44:34 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131602
IP address blocks: 114.29.240.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3168 (0xc60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0EAE2D331F2C4280C16AA8BAFE16FDDCCE3715B4
Validity
Not Before: Nov 13 05:44:34 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5B6744F3CF88DDF6DD86F3A5BDE53EE66F868A13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9e:c3:d9:72:ad:b4:0a:e7:8f:86:b5:3b:23:
4b:a3:9f:45:3f:9b:45:2d:8e:f7:18:14:15:fb:0a:
df:12:5f:c6:95:9a:d0:19:b8:20:13:84:be:7f:05:
9a:90:6f:43:6c:e5:61:34:f5:ac:a1:04:6f:74:c9:
94:34:02:c5:a9:aa:bc:05:79:16:d2:bf:2a:01:68:
3e:e8:ab:c7:61:3b:41:8c:9d:03:f4:1e:65:1c:2e:
c0:a8:c9:56:0e:d6:a5:6d:15:86:75:16:23:50:7a:
a3:57:b3:bb:da:89:5d:0c:a0:e4:8f:32:43:27:66:
c4:53:4e:5c:77:08:d1:b9:0c:05:e2:06:8b:52:f6:
05:8e:2b:3e:cb:d6:a0:35:aa:5b:f7:e2:df:a4:20:
38:ea:85:c8:75:20:47:7a:5b:06:71:29:4f:2c:1a:
94:63:2f:ae:fa:8f:27:e6:e4:3d:25:a1:10:db:c4:
47:02:43:0e:16:de:74:4a:01:35:d9:e7:f9:b2:ed:
ab:de:f1:ed:58:aa:0a:5d:56:ba:7b:c7:76:bf:5f:
85:af:a4:b5:37:70:38:85:45:3d:d6:7c:e8:52:31:
6b:3e:9a:08:d0:2f:62:25:1f:99:c3:c2:25:6e:5e:
b4:88:27:e2:f4:08:c0:a0:a0:4c:8a:7f:36:78:79:
78:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:67:44:F3:CF:88:DD:F6:DD:86:F3:A5:BD:E5:3E:E6:6F:86:8A:13
X509v3 Authority Key Identifier:
keyid:0E:AE:2D:33:1F:2C:42:80:C1:6A:A8:BA:FE:16:FD:DC:CE:37:15:B4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/W2dE88-I3fbdhvOlveU-5m-GihM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.29.240.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:18:23:3f:da:68:b5:c6:85:81:ee:a7:c3:ac:a8:5a:c3:b4:
32:9c:24:91:cc:af:53:1f:62:bb:6e:da:5b:42:96:f5:f7:22:
3d:a0:00:83:55:8f:f8:08:ec:7f:a7:fe:f5:27:48:96:0d:81:
be:38:6f:d3:bf:bb:f5:e4:33:ea:31:5d:57:56:0d:b4:d9:df:
78:d2:b1:70:7b:53:f7:9a:f4:e7:fa:a3:10:d0:94:c5:49:bc:
8d:cc:5a:4b:72:74:db:7c:04:2d:ec:d2:f1:8c:8e:bf:f0:c5:
e0:5f:b3:b0:c3:b3:b7:3e:b9:f9:b1:2c:7e:d5:53:ea:58:f1:
ce:60:34:cf:0b:1f:7b:67:1f:82:d0:25:cf:b3:64:62:e0:80:
f0:4f:32:a4:ab:57:09:ac:2f:db:01:37:cb:f9:39:23:74:1a:
80:a0:73:4f:b8:7f:98:e0:10:e3:a2:e5:53:26:fe:69:d3:f1:
73:68:5c:02:63:89:25:83:1c:83:95:83:08:72:9c:01:32:4c:
1f:32:b5:48:77:f8:a5:75:73:f3:6f:94:a3:ee:9c:49:4b:c8:
4c:c1:35:e7:f9:7c:ba:1a:00:52:64:71:cf:65:50:7f:92:25:
3f:df:d3:5c:15:7b:3c:59:dc:ce:e1:8c:ab:48:f7:c1:c8:da:
57:85:db:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:19:55 2025 by rpki-client