Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LIRUN/G4HskvBm--imavnIVH-f-8okIP4.roa
File: G4HskvBm--imavnIVH-f-8okIP4.roa (raw, json)
Hash identifier: gGdZxY8U4gikqOhwAMjVxGboO4VNjiMnccR62Py1M20=
Subject key identifier: 1B:81:EC:92:F0:66:FB:E8:A6:6A:F9:C8:54:7F:9F:FB:CA:24:20:FE
Certificate issuer: /CN=D966B55909324180A88A45E1F683CF4D2ED9BCA5
Certificate serial: D1
Authority key identifier: D9:66:B5:59:09:32:41:80:A8:8A:45:E1:F6:83:CF:4D:2E:D9:BC:A5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2Wa1WQkyQYCoikXh9oPPTS7ZvKU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LIRUN/G4HskvBm--imavnIVH-f-8okIP4.roa
Signing time: Mon 27 Jan 2025 03:40:29 +0000
ROA not before: Mon 27 Jan 2025 03:40:29 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 150766
IP address blocks: 157.66.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:19:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 209 (0xd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D966B55909324180A88A45E1F683CF4D2ED9BCA5
Validity
Not Before: Jan 27 03:40:29 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=1B81EC92F066FBE8A66AF9C8547F9FFBCA2420FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:84:b2:a3:31:7f:24:71:fb:89:d8:51:62:da:
3a:ef:54:cc:63:70:51:08:ea:5c:1a:c5:6e:39:21:
6c:7d:18:28:b0:66:e2:c2:f6:f9:c3:a3:05:00:f6:
ba:55:f9:7f:57:bd:5e:00:3e:98:36:db:d8:79:b2:
0e:7d:7a:15:e6:dc:fc:4b:c1:b4:6c:60:ab:ab:81:
94:77:03:a6:ec:d1:46:b6:4e:75:a9:65:ad:2a:a3:
6c:c3:65:ce:74:60:9f:af:86:a3:a2:99:d5:75:48:
e6:c8:7e:84:9d:1d:32:77:32:36:7b:1c:83:56:d8:
36:55:45:21:c9:fe:51:70:fe:ca:27:c5:da:fc:68:
f3:b7:af:64:c9:6e:69:ac:58:1d:6c:eb:17:35:d3:
d7:bd:34:ab:10:9b:c3:7f:15:bb:c0:06:d1:d9:f5:
97:22:1c:24:fb:91:47:04:ca:78:b3:5f:74:6c:bc:
de:aa:ad:8b:cb:75:1a:aa:7f:83:2d:4f:31:8f:b3:
1d:62:31:cb:7d:84:82:36:30:6f:7d:7c:30:0c:95:
ac:59:a6:c0:d3:ac:39:9c:f3:e3:08:a7:1c:64:de:
c7:d2:ce:e1:f2:55:70:c8:2d:9c:15:3c:3e:d1:15:
f9:f2:0e:c2:7a:03:e9:e9:e9:7f:b5:e3:53:5e:5f:
80:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:81:EC:92:F0:66:FB:E8:A6:6A:F9:C8:54:7F:9F:FB:CA:24:20:FE
X509v3 Authority Key Identifier:
keyid:D9:66:B5:59:09:32:41:80:A8:8A:45:E1:F6:83:CF:4D:2E:D9:BC:A5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LIRUN/2Wa1WQkyQYCoikXh9oPPTS7ZvKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2Wa1WQkyQYCoikXh9oPPTS7ZvKU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LIRUN/G4HskvBm--imavnIVH-f-8okIP4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
157.66.166.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:74:91:71:c2:37:80:e9:75:7c:19:f3:ff:90:c9:b1:95:fd:
04:4d:4c:d3:62:7f:d6:0b:79:a8:65:97:f5:75:2f:48:b7:8a:
33:58:18:0c:d3:27:26:1b:17:41:64:3f:2d:4e:46:41:f0:98:
94:7c:2c:34:6a:bf:40:ca:76:af:b3:eb:f1:2b:68:b6:b0:c7:
0b:a7:30:ca:d1:56:2d:8f:94:ac:4f:47:b8:8a:8d:25:6a:1a:
4d:db:97:d8:6b:93:27:dc:60:cd:0d:7d:40:0e:38:33:d7:e0:
73:e5:24:2d:51:b0:7b:d1:3f:80:72:07:35:c5:59:bd:28:20:
96:de:f7:20:8f:e1:0b:ea:21:1a:49:f9:99:d1:7a:e6:3a:9d:
27:aa:a9:92:24:64:20:25:16:f9:a1:bb:d2:36:22:cb:c9:c0:
10:94:fb:69:74:cb:1b:a6:9d:28:f5:b3:35:7a:04:81:b6:a7:
eb:08:ce:d3:55:fe:e2:c1:99:e5:d5:29:28:f7:c8:12:03:d6:
f7:56:07:b1:68:43:74:37:28:50:b0:ea:93:84:2f:1e:40:2b:
e0:46:b1:ad:f0:5c:c8:f4:63:c6:d4:46:66:d8:5a:54:e4:b4:
8f:d0:4d:c6:c3:7d:fc:3e:0e:c0:ef:b0:93:8e:ca:42:be:c0:
74:e8:82:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:12:37 2025 by rpki-client