Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KBT/XOx4OQskAXefIDT1vfOMFYAv7OU.roa
File: XOx4OQskAXefIDT1vfOMFYAv7OU.roa (raw, json)
Hash identifier: vixFihRojDs2aEwI9JskcuM+4XRzL5fERGScHf+l0Ng=
Subject key identifier: 5C:EC:78:39:0B:24:01:77:9F:20:34:F5:BD:F3:8C:15:80:2F:EC:E5
Certificate issuer: /CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C
Certificate serial: 0CB0
Authority key identifier: 2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/XOx4OQskAXefIDT1vfOMFYAv7OU.roa
Signing time: Mon 26 Aug 2024 05:19:27 +0000
ROA not before: Mon 26 Aug 2024 05:19:27 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18042
IP address blocks: 61.63.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:51:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3248 (0xcb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C
Validity
Not Before: Aug 26 05:19:27 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5CEC78390B2401779F2034F5BDF38C15802FECE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e4:d5:1a:b9:d5:66:72:56:1f:fb:3c:8a:1f:
4b:48:b0:d1:a6:79:a8:8f:76:2b:75:46:ed:1a:72:
27:14:c6:e9:76:05:8f:43:33:20:2d:54:4b:96:ff:
bc:2e:eb:d1:a2:a3:3a:5f:a5:22:14:98:83:4f:df:
eb:d7:ad:5f:11:f7:a1:7b:1c:55:94:37:d5:42:50:
78:ef:8d:f3:79:e0:2c:3a:c8:6c:fe:17:56:81:51:
cf:09:4e:37:f2:1d:e7:16:c6:29:e9:69:9b:b4:62:
86:06:9a:71:2b:15:6a:da:d3:b8:5a:6a:78:1a:14:
82:13:47:d9:6d:5f:f2:c0:7e:d6:bd:e8:d4:8c:25:
91:7a:09:b6:af:fb:da:28:a0:97:49:b9:56:c6:ba:
c9:3a:90:87:51:84:82:03:2c:7a:8f:40:f0:54:b5:
18:7d:5b:58:59:9b:4c:a1:a1:57:50:89:56:6e:c8:
fa:9c:53:67:f7:cb:a4:20:1b:02:c1:2c:d2:d6:8d:
af:4b:03:78:96:fb:57:c6:d8:ec:52:43:08:75:a3:
e7:54:56:ed:3e:a7:dc:39:df:ce:86:0c:76:a3:8f:
5f:82:3a:b2:f2:b7:f6:24:68:71:7c:ae:44:2c:76:
30:0a:28:d0:38:3c:41:ee:42:07:8e:ce:dc:61:24:
6a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EC:78:39:0B:24:01:77:9F:20:34:F5:BD:F3:8C:15:80:2F:EC:E5
X509v3 Authority Key Identifier:
keyid:2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/XOx4OQskAXefIDT1vfOMFYAv7OU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.63.87.0/24
Signature Algorithm: sha256WithRSAEncryption
38:69:86:3d:46:49:cc:89:82:99:a7:ea:db:dd:86:cd:36:9d:
b0:00:05:20:d8:f0:19:2c:d9:fd:fe:56:76:cd:75:b1:8a:d0:
79:26:f4:4c:ec:6e:1e:c0:1d:44:a3:87:d9:4b:bf:50:b9:20:
8d:00:f5:5a:cd:9f:d6:53:2f:9f:c0:92:00:48:a8:2f:bc:9d:
1f:14:2f:fe:30:5d:9c:19:a6:02:97:73:05:2e:c4:35:9b:17:
64:54:9f:e5:7b:b3:87:0d:af:ca:7e:fa:95:e7:6b:6e:38:e4:
c3:29:d3:d5:95:f3:26:e6:30:dd:93:69:b2:5b:6f:fd:5f:1d:
66:7f:a0:ac:ae:35:50:5c:92:23:27:da:ec:d9:a3:a7:dd:9c:
34:2a:07:1b:a4:c9:49:a5:92:8c:9d:9f:17:c0:f3:44:66:38:
c0:7f:4a:f7:72:ff:0a:7e:96:1e:aa:ae:25:13:0d:1c:cf:ef:
24:2f:0a:78:45:fb:58:d7:8b:a6:dc:37:8a:38:74:5e:b8:a7:
90:a6:05:cd:3b:e1:d8:47:f9:51:ce:07:54:2c:e9:0c:db:92:
52:f2:47:fb:7b:bc:f0:89:07:97:52:8e:ed:ee:05:7f:0e:6b:
a8:2f:7b:d5:84:a6:da:33:d8:c7:1a:23:ff:72:6a:1f:83:c6:
d2:be:df:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:19:36 2025 by rpki-client