Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/8rD8fq-91vy0Yg1PiWGaKgY_a4k.roa
File: 8rD8fq-91vy0Yg1PiWGaKgY_a4k.roa (raw, json)
Hash identifier: RCAfv3muF/4GG5n8V0wvWwx2vZVGQoNr2in0puGQkFM=
Subject key identifier: F2:B0:FC:7E:AF:BD:D6:FC:B4:62:0D:4F:89:61:9A:2A:06:3F:6B:89
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 167F
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/8rD8fq-91vy0Yg1PiWGaKgY_a4k.roa
Signing time: Mon 26 Aug 2024 05:22:16 +0000
ROA not before: Mon 26 Aug 2024 05:22:16 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9919
IP address blocks: 122.147.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5759 (0x167f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Aug 26 05:22:16 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F2B0FC7EAFBDD6FCB4620D4F89619A2A063F6B89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:86:62:23:a7:da:8f:60:a6:0a:f3:a4:d3:69:
a2:28:2c:4c:77:dd:1a:04:fc:6c:34:72:a1:f1:46:
20:76:eb:ed:1c:27:58:7f:9c:a7:8b:1e:cb:00:a9:
96:7c:cc:24:66:1c:3c:17:e1:c8:66:bd:32:e3:96:
0a:44:47:47:4d:ce:47:5e:af:30:ae:87:8d:58:bf:
f6:59:de:f2:6b:06:de:1c:b1:07:6f:e1:9d:81:15:
75:fb:b3:d2:f7:e0:ad:18:79:cf:56:ee:28:42:4f:
6b:a4:65:00:68:f1:17:b0:37:b4:ca:34:f7:14:56:
c3:cd:97:a9:be:65:75:1a:46:96:81:08:82:b4:47:
53:09:8c:c8:6c:41:73:1f:d6:55:cf:de:0e:17:ca:
f8:fe:52:99:80:fa:bf:af:d1:23:44:f9:88:b7:c5:
3b:b2:f2:3c:c2:62:ce:8d:b0:8d:0d:84:50:93:cb:
97:33:86:bc:f3:fa:9d:46:04:f0:67:03:45:2c:ef:
f6:dd:5c:28:80:e5:ab:f8:47:05:b5:ea:cf:5f:c3:
97:10:3d:f9:6f:3b:af:a2:e8:09:cd:57:95:29:be:
50:13:bc:4d:8b:9d:12:09:f7:b9:bd:f2:f9:a8:66:
d2:98:82:56:a4:4b:ae:75:c1:67:b9:12:10:e3:9f:
4c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B0:FC:7E:AF:BD:D6:FC:B4:62:0D:4F:89:61:9A:2A:06:3F:6B:89
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/8rD8fq-91vy0Yg1PiWGaKgY_a4k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.147.0.0/16
Signature Algorithm: sha256WithRSAEncryption
56:1e:ec:81:b7:ca:cf:98:f1:8a:db:34:dd:ba:aa:4d:cf:22:
82:cc:fa:79:61:38:e7:4f:c5:cf:8e:69:1c:9e:cc:7f:3f:f2:
b0:3b:6e:30:dc:e8:3c:d0:ed:cf:d7:f2:c1:d0:95:f0:71:30:
e6:26:34:90:ed:db:e0:68:94:26:8b:6e:79:e6:c1:ba:92:6c:
ff:0a:30:c3:e6:89:d7:c2:e2:b5:f0:9e:73:fa:57:b1:5b:7c:
1e:7d:24:8f:0d:c5:8c:30:f0:ea:43:31:dc:ee:b0:37:99:55:
18:d7:76:01:ee:f1:5c:50:c5:47:6d:50:07:7b:30:ea:42:1b:
23:1c:1f:9d:73:ef:44:f0:45:d5:39:36:f6:a0:a9:ea:7b:0e:
8d:b9:39:df:14:7d:16:f9:27:22:d4:ac:4a:59:fe:ee:57:e0:
ef:96:14:46:a1:02:55:4e:bc:df:e7:e5:ad:5b:70:53:17:46:
af:b4:21:96:d8:14:9f:18:d3:68:9a:36:9d:f1:32:d3:55:d9:
0b:36:ac:79:1b:c7:ba:cd:01:32:9c:72:e3:bf:27:d7:7d:d4:
97:50:57:d9:1b:50:ca:30:0a:f8:30:50:45:13:de:36:1c:90:
14:2f:6f:b8:26:bd:0d:49:e0:fc:a5:2b:c9:1c:fa:31:44:8d:
5c:13:46:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:44:37 2025 by rpki-client