Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JFT/ysLOd_ij69t-_fgGFLcSQzybEOc.roa
File: ysLOd_ij69t-_fgGFLcSQzybEOc.roa (raw, json)
Hash identifier: aAbf04KCNjXy7tkMs9EkVo8nh37W7udtrnCd1ENG2aI=
Subject key identifier: CA:C2:CE:77:F8:A3:EB:DB:7E:FD:F8:06:14:B7:12:43:3C:9B:10:E7
Certificate issuer: /CN=627D675FF5E2C8BA90F4B655B108B6925DAF1595
Certificate serial: 0102
Authority key identifier: 62:7D:67:5F:F5:E2:C8:BA:90:F4:B6:55:B1:08:B6:92:5D:AF:15:95
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JFT/ysLOd_ij69t-_fgGFLcSQzybEOc.roa
Signing time: Mon 26 Aug 2024 05:19:19 +0000
ROA not before: Mon 26 Aug 2024 05:19:19 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18041
IP address blocks: 2401:16a0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 10 Feb 2025 11:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=627D675FF5E2C8BA90F4B655B108B6925DAF1595
Validity
Not Before: Aug 26 05:19:19 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=CAC2CE77F8A3EBDB7EFDF80614B712433C9B10E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:74:b6:4f:b5:47:60:f6:89:19:af:e1:39:e8:
20:3b:8c:9e:20:78:29:02:c7:48:55:0e:53:18:b5:
d6:1a:b7:08:42:e7:d7:e0:c0:4e:fd:e2:57:74:2f:
75:62:53:28:b3:35:af:f6:fd:f6:d4:a0:2a:30:12:
13:02:15:c4:1f:e8:6c:75:ae:44:9a:a1:ee:7b:46:
f5:63:a3:f8:f4:2d:16:eb:0c:3d:09:48:3e:e5:f4:
bc:9c:5d:3b:1b:f7:de:f0:6f:22:a0:8d:c0:b6:7c:
04:19:74:4b:c5:9e:e2:18:34:2c:7c:b6:1c:a7:fa:
91:91:1e:1e:0c:01:e0:ab:78:9f:86:f3:9e:e2:9f:
e0:3e:da:ab:38:13:59:f0:49:f8:7c:f7:86:ff:b0:
d1:74:cc:d7:7f:53:c6:3f:b2:6f:f1:fd:af:8f:30:
77:84:d5:c7:02:38:73:fb:a0:88:b2:e4:1f:22:eb:
a8:23:61:7b:1a:9c:40:ea:4f:b8:82:36:03:43:a3:
62:3c:c0:f4:1a:23:88:ee:80:98:53:4a:8c:81:c5:
08:54:e6:dc:6a:ea:da:a1:e9:f8:1a:90:48:04:2b:
5e:ca:fd:65:94:8b:49:44:52:ea:1e:dd:4e:f2:5d:
5c:ce:3f:d9:07:23:47:29:16:e6:81:76:06:5a:11:
87:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C2:CE:77:F8:A3:EB:DB:7E:FD:F8:06:14:B7:12:43:3C:9B:10:E7
X509v3 Authority Key Identifier:
keyid:62:7D:67:5F:F5:E2:C8:BA:90:F4:B6:55:B1:08:B6:92:5D:AF:15:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JFT/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JFT/ysLOd_ij69t-_fgGFLcSQzybEOc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:16a0::/32
Signature Algorithm: sha256WithRSAEncryption
1a:f0:a2:dc:cf:26:da:bb:a3:1c:12:8d:17:0a:03:e8:53:63:
7a:63:c7:da:84:40:34:0a:5f:aa:e1:98:ed:b1:47:22:39:54:
17:1e:16:9c:64:bc:3f:89:1b:a5:af:09:ca:2f:d9:9b:fb:f8:
9e:46:24:c2:ae:56:67:98:49:77:d6:ad:7d:fd:24:d4:53:2f:
5c:e3:fd:fd:f5:02:a0:db:14:69:52:df:02:06:6e:4d:a7:37:
ea:51:a7:42:4e:4c:56:72:0c:b6:59:77:de:35:50:95:98:6a:
38:f3:8e:31:45:88:59:60:fa:32:3e:0e:c9:e0:20:8a:c1:bf:
fb:a2:08:84:5c:55:18:ad:6a:9b:3b:ea:74:35:03:89:e3:94:
b5:64:11:00:f2:7e:7a:42:62:fb:55:ac:6a:e6:04:7c:9f:f3:
df:a7:22:bf:c3:ce:86:13:3b:ff:87:5d:c6:a1:11:78:29:f1:
d9:6f:31:66:16:24:05:dd:0e:6e:3d:ed:f3:ea:fb:eb:35:a4:
fd:10:1b:23:94:a7:36:31:1a:f2:99:fa:2d:ba:70:3b:dc:ea:
5d:d7:18:e7:69:37:3f:d8:b0:77:89:c5:20:61:5a:d3:e6:a3:
ea:55:84:24:25:04:36:ab:9f:98:87:79:81:30:0f:af:bc:04:
ff:47:28:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:11:58 2025 by rpki-client