Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KBT/CLhNad3jpM7MoqRd4mevAOVMI7c.roa
File: CLhNad3jpM7MoqRd4mevAOVMI7c.roa (raw, json)
Hash identifier: NhiCV9YaK6sVHyKyjpT7I3v2etxm38deaVqGqbjonyI=
Subject key identifier: 08:B8:4D:69:DD:E3:A4:CE:CC:A2:A4:5D:E2:67:AF:00:E5:4C:23:B7
Certificate issuer: /CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C
Certificate serial: 0CB7
Authority key identifier: 2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/CLhNad3jpM7MoqRd4mevAOVMI7c.roa
Signing time: Mon 26 Aug 2024 05:19:29 +0000
ROA not before: Mon 26 Aug 2024 05:19:29 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18018
IP address blocks: 58.86.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3255 (0xcb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C
Validity
Not Before: Aug 26 05:19:29 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=08B84D69DDE3A4CECCA2A45DE267AF00E54C23B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:f7:d6:3f:71:b2:1b:c6:83:91:f8:ca:b3:08:
e0:50:b8:5f:aa:4c:08:0d:2e:27:75:6a:14:14:a7:
1f:99:76:c7:c8:61:58:9c:a7:6f:ca:b2:a3:35:82:
75:80:82:30:8e:f7:b4:6c:3c:38:86:f1:8c:91:b9:
b4:a3:18:34:45:1e:c2:74:a3:70:1c:42:bb:ec:f9:
11:bc:7e:6c:4e:10:93:5b:0f:ac:b0:9e:83:b6:0b:
98:0f:15:cd:e7:6f:aa:54:53:e4:19:49:65:80:52:
64:8c:6b:1f:ae:bd:ac:77:f8:a5:6b:30:a2:41:f2:
ae:4b:28:d5:7c:4f:4f:df:b8:eb:ff:73:87:82:bf:
5e:0d:fb:a7:65:a2:60:de:59:bd:8c:09:49:3a:f6:
a2:37:d2:85:c3:f9:b0:36:db:cb:67:11:e8:8e:fd:
31:ac:c6:a8:75:de:e7:2c:5e:86:96:72:f7:2a:ec:
ad:b4:73:92:1a:51:c3:8a:80:b5:ef:14:ca:25:28:
1f:68:47:43:36:13:65:06:37:c1:4e:c8:2e:47:96:
49:56:11:e5:fa:fa:3e:74:8c:ec:a0:dc:0f:b9:78:
72:34:7e:b0:42:07:f3:2c:3d:81:fd:8f:8a:60:5f:
06:20:a1:58:5d:57:6c:7c:2a:81:d1:b5:78:1e:67:
f2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B8:4D:69:DD:E3:A4:CE:CC:A2:A4:5D:E2:67:AF:00:E5:4C:23:B7
X509v3 Authority Key Identifier:
keyid:2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/CLhNad3jpM7MoqRd4mevAOVMI7c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
58.86.46.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:b0:a7:64:21:57:6d:23:c3:1d:3b:de:80:f5:29:cf:c6:8f:
0f:ff:dd:50:3a:67:32:40:48:6e:3a:93:b1:5f:0f:6e:72:2b:
ce:80:25:ff:93:0d:7b:a3:cd:68:a2:a8:25:43:f0:71:d4:e3:
11:2b:f7:bc:50:41:89:ec:b4:ce:06:61:d3:b2:ba:31:4e:b9:
da:ec:0f:8c:ef:e8:0c:fb:29:4f:e2:1e:85:84:26:e3:af:84:
cd:ed:22:c0:01:0f:ca:87:25:67:06:12:3f:a8:6c:e2:22:7f:
b5:be:ee:67:58:37:03:1d:60:bc:1b:02:d7:6c:e7:af:7b:42:
03:2b:b2:5e:1c:2e:02:51:b6:85:38:ca:17:70:ba:b9:d2:2d:
70:0f:7f:ae:73:29:7e:d6:55:2f:f1:34:4e:1f:4e:e8:3b:4b:
29:7c:51:2f:fa:26:3f:b3:22:b6:0c:cb:67:0e:b6:d9:74:57:
37:dd:46:85:c0:3e:16:2b:c2:2b:1c:bd:70:49:4d:78:fd:bb:
31:61:eb:24:84:4f:a3:b8:9e:34:42:ac:1f:f4:67:2f:86:62:
02:25:ac:3b:f5:b3:d6:c3:8b:9c:35:77:bb:2c:0c:7b:95:cd:
f2:a2:31:4b:de:32:4a:f9:e1:86:00:b5:39:22:ac:28:a2:36:
3c:28:6f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:15:50 2025 by rpki-client