Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LIRUN/88gPUEKKqg4WAPhS7X2AtQDtPbk.roa
File: 88gPUEKKqg4WAPhS7X2AtQDtPbk.roa (raw, json)
Hash identifier: heuwQMRqbIKKRZQ6zkiVf7R5hnpXcijpVFo/sW451oI=
Subject key identifier: F3:C8:0F:50:42:8A:AA:0E:16:00:F8:52:ED:7D:80:B5:00:ED:3D:B9
Certificate issuer: /CN=D966B55909324180A88A45E1F683CF4D2ED9BCA5
Certificate serial: 08
Authority key identifier: D9:66:B5:59:09:32:41:80:A8:8A:45:E1:F6:83:CF:4D:2E:D9:BC:A5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2Wa1WQkyQYCoikXh9oPPTS7ZvKU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LIRUN/88gPUEKKqg4WAPhS7X2AtQDtPbk.roa
Signing time: Mon 29 Apr 2024 13:27:49 +0000
ROA not before: Mon 29 Apr 2024 13:27:49 +0000
ROA not after: Sat 26 Apr 2025 10:00:55 +0000
asID: 131147
IP address blocks: 157.66.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:19:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D966B55909324180A88A45E1F683CF4D2ED9BCA5
Validity
Not Before: Apr 29 13:27:49 2024 GMT
Not After : Apr 26 10:00:55 2025 GMT
Subject: CN=F3C80F50428AAA0E1600F852ED7D80B500ED3DB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:22:ef:ad:9f:13:c0:7f:b6:0f:ed:a1:0d:2f:
76:41:4c:6f:00:d4:78:b3:6d:f5:ae:6a:f8:b3:69:
1e:43:1d:38:ee:65:f9:a8:82:22:f6:2f:45:ca:6c:
d6:bb:14:a3:38:8a:10:05:9e:e4:cb:59:c3:e9:1d:
d9:43:4a:ea:9a:97:19:ee:69:c7:d8:70:e5:8a:7e:
b4:ae:9d:ca:02:e6:e3:1e:b2:87:fb:b3:82:4a:6f:
e9:a5:e9:5b:26:9d:93:1b:d7:b2:ec:46:52:4c:e8:
46:db:9d:7f:24:cb:16:b8:14:7a:c2:ae:1c:7b:ea:
20:8c:90:c9:b3:69:1a:99:9d:18:66:de:c5:30:08:
48:c9:ee:66:7b:eb:29:c9:cb:4e:6d:e9:39:ab:71:
9e:28:8a:87:6c:9d:0f:d0:79:4e:16:12:b4:1d:ae:
36:5a:54:ee:81:72:1c:73:54:3a:ef:6a:a7:5b:ef:
e2:7b:de:1d:2a:98:e9:97:47:c0:b7:b5:59:9f:9a:
1b:45:c5:77:60:c7:d2:5e:23:2d:e7:1d:00:17:63:
56:a8:f0:67:9d:59:0c:5e:22:19:93:39:23:35:e1:
78:f7:1f:5a:05:cf:1c:6c:c8:ed:d4:d8:f4:26:13:
2f:7a:31:14:05:9f:03:06:8d:dc:82:a9:38:39:9f:
9d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C8:0F:50:42:8A:AA:0E:16:00:F8:52:ED:7D:80:B5:00:ED:3D:B9
X509v3 Authority Key Identifier:
keyid:D9:66:B5:59:09:32:41:80:A8:8A:45:E1:F6:83:CF:4D:2E:D9:BC:A5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LIRUN/2Wa1WQkyQYCoikXh9oPPTS7ZvKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2Wa1WQkyQYCoikXh9oPPTS7ZvKU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LIRUN/88gPUEKKqg4WAPhS7X2AtQDtPbk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
157.66.167.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:be:c2:ae:f4:aa:7c:02:ec:95:cb:db:04:1b:98:5a:6f:2b:
14:a9:b9:c8:4e:2c:69:22:67:67:6a:85:ba:fd:46:45:57:d9:
89:c2:bf:03:ef:c9:a0:20:d3:08:15:a1:ef:34:fc:4d:8c:a4:
38:b8:25:0a:0d:78:df:11:4d:20:d2:d1:68:9c:a9:c0:0f:c5:
3c:58:6e:c7:6a:cc:08:a8:ab:d8:06:e7:00:5b:13:76:1d:b6:
04:e1:00:9b:7d:ab:85:f4:3b:e1:18:11:8c:78:1b:0d:d9:06:
51:c8:77:2d:45:cf:49:28:32:6e:61:64:37:01:81:fb:81:5f:
f5:38:1c:b0:af:1b:2b:aa:54:06:fa:8e:1a:a0:12:74:a6:99:
2b:d8:c9:a9:b7:c7:15:52:bb:56:b0:72:af:1f:0f:16:bd:af:
a6:57:5d:52:e5:a5:06:80:d3:26:65:a7:8d:a1:7a:ba:0d:81:
e6:45:e0:af:81:f7:51:ce:e6:6e:a0:cb:da:21:63:b8:05:21:
3a:a7:4e:01:4f:ea:07:4c:92:da:c0:1e:8a:f5:3c:f5:7e:d7:
26:43:59:cb:08:da:e8:bd:e4:6e:6d:f6:ce:aa:28:54:1f:8e:
78:14:5a:af:66:3f:da:56:ef:59:67:63:70:80:de:0b:e2:c5:
2b:57:2f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:18:11 2025 by rpki-client