Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/LR7u73kSeqTTnhpsjtzdvluvsSo.roa
File: LR7u73kSeqTTnhpsjtzdvluvsSo.roa (raw, json)
Hash identifier: io3WuX6M7T4LGNvr0MKCn6ZJCi2t/cwcdap7Q8I5gSg=
Subject key identifier: 2D:1E:EE:EF:79:12:7A:A4:D3:9E:1A:6C:8E:DC:DD:BE:5B:AF:B1:2A
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 166D
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/LR7u73kSeqTTnhpsjtzdvluvsSo.roa
Signing time: Mon 26 Aug 2024 05:22:12 +0000
ROA not before: Mon 26 Aug 2024 05:22:12 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9919
IP address blocks: 2401:8000::/26 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:07:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5741 (0x166d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Aug 26 05:22:12 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=2D1EEEEF79127AA4D39E1A6C8EDCDDBE5BAFB12A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:15:74:b1:3b:48:12:88:00:44:8c:b9:c8:ac:
eb:0a:d4:94:8a:86:51:0c:b9:2d:93:5f:ab:c2:5e:
ee:65:15:fc:b8:01:66:ba:5e:26:b8:a1:56:3c:a8:
ef:9e:b6:94:76:11:bc:b9:7d:d9:b6:f1:3b:eb:7b:
00:90:81:5d:b3:cc:76:76:80:1f:c8:a8:f8:c7:c3:
e4:fb:d0:84:6c:dd:12:50:3d:df:6a:69:92:c9:db:
50:9a:27:2f:94:34:e4:b5:b6:0a:10:0d:50:03:2c:
a8:b5:56:e4:46:9d:1c:4d:8e:e4:31:04:22:3e:a9:
71:70:b6:f4:3d:5b:09:8f:cf:34:0a:93:4b:02:d4:
5d:61:06:b2:33:df:34:14:f6:59:57:45:df:c6:73:
7d:8a:ea:e5:a5:98:f0:4c:50:40:9b:42:63:3f:27:
2c:8e:d4:f9:b0:d2:d7:a5:d0:3f:3e:d2:50:a3:24:
9a:2d:ac:54:22:8f:fc:2a:0a:e9:d1:1b:df:39:47:
86:5b:54:1f:ff:05:95:65:54:e6:94:a3:40:91:55:
95:6a:9d:0d:29:e2:b9:a2:c5:de:f3:66:33:09:df:
3b:f4:e7:aa:7f:62:20:4b:c8:0d:8c:21:10:c3:cb:
fe:7c:eb:fa:b1:68:d7:17:80:b5:33:44:cf:d2:d8:
18:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:1E:EE:EF:79:12:7A:A4:D3:9E:1A:6C:8E:DC:DD:BE:5B:AF:B1:2A
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/LR7u73kSeqTTnhpsjtzdvluvsSo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:8000::/26
Signature Algorithm: sha256WithRSAEncryption
22:ce:3e:c1:91:87:35:35:51:80:06:33:dc:8d:b4:d7:20:75:
a1:78:61:8c:c9:9f:ee:37:be:8e:3e:7e:a1:b0:82:40:ff:a0:
8a:7a:16:08:7b:3a:9c:cb:10:f4:f4:d6:c9:52:eb:4c:41:13:
ff:28:28:a6:13:d1:e3:68:53:8b:53:6f:c5:ba:7c:68:88:f0:
ad:e8:b0:82:96:13:8c:dd:ca:3b:97:71:28:ef:93:f0:d2:6c:
f6:38:8d:ed:e5:30:e3:3e:b3:70:61:10:a5:ef:1c:47:fe:8e:
70:30:39:18:16:ab:fe:71:07:3f:5c:ea:f9:3e:96:82:b8:5e:
f2:a6:f8:57:3d:ab:38:69:f5:03:e5:79:1c:ef:f1:4a:e3:52:
1c:fc:36:1a:df:68:1b:89:27:e9:fb:2c:2e:cf:fd:c1:bc:19:
36:03:7e:59:46:51:58:35:21:80:ee:92:f4:26:bd:14:9e:38:
5c:c4:28:7b:e2:b7:84:1c:78:c6:aa:61:87:c1:0b:8b:bf:33:
91:09:9a:db:e4:71:fa:cd:91:85:11:f5:af:88:9f:c1:d6:38:
ed:fc:04:b6:88:d2:7c:c6:93:c0:35:48:7c:ec:bd:cc:7c:d9:
e2:66:c3:f1:95:31:77:a6:2d:98:63:0d:55:3f:c9:dc:61:4a:
0b:25:05:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:49:26 2025 by rpki-client