Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/LUfUIStzr6cPLFJf-KdLRUOzEMU.roa
File: LUfUIStzr6cPLFJf-KdLRUOzEMU.roa (raw, json)
Hash identifier: igLdoEznQq/SEqA4jSzvD/ndVPAhCyh7Og6hybX52oI=
Subject key identifier: 2D:47:D4:21:2B:73:AF:A7:0F:2C:52:5F:F8:A7:4B:45:43:B3:10:C5
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1633
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/LUfUIStzr6cPLFJf-KdLRUOzEMU.roa
Signing time: Mon 26 Aug 2024 05:21:53 +0000
ROA not before: Mon 26 Aug 2024 05:21:53 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4780
IP address blocks: 112.105.128.0/17 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:07:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5683 (0x1633)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Aug 26 05:21:53 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=2D47D4212B73AFA70F2C525FF8A74B4543B310C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:80:35:cd:80:9a:da:5a:bc:1a:26:49:1e:ce:
fb:16:65:46:74:a5:01:83:05:3e:fc:f0:58:6d:ca:
4c:e8:ea:e0:56:33:ce:7c:7e:c9:d5:1d:e7:be:f4:
ab:42:5d:24:e6:9b:bb:06:30:81:5c:8f:67:ae:07:
11:24:f1:1f:ee:9e:d4:a6:77:c1:8b:03:22:3c:fb:
c2:60:c8:89:8a:33:f6:02:17:f2:bb:26:6e:da:be:
29:d8:a6:6f:b4:ea:11:e5:2f:b8:4d:dd:74:84:54:
7c:60:06:c6:58:3d:91:05:7b:70:e3:72:fa:95:7a:
3c:da:0c:58:54:f2:c2:42:f3:b7:b7:73:f7:f8:5b:
63:59:c8:9e:2c:a9:39:e3:06:c9:48:e3:ed:9e:1b:
06:f0:02:60:ef:ef:96:a9:57:f3:b0:90:50:c1:fe:
f5:82:13:40:0f:5f:88:41:2d:23:19:49:41:df:64:
86:72:4c:a5:30:ad:2f:f0:a7:a1:ba:1f:1d:72:e1:
06:ae:c9:67:5b:8e:a2:69:04:95:ec:8b:23:7a:54:
86:fe:1e:fd:0a:c2:f6:63:da:b2:fa:28:cb:89:b1:
da:6e:99:b1:b2:50:eb:d5:13:0f:0f:98:47:2c:af:
ec:4b:47:43:e3:f7:15:15:72:9c:20:36:25:5b:7c:
76:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:47:D4:21:2B:73:AF:A7:0F:2C:52:5F:F8:A7:4B:45:43:B3:10:C5
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/LUfUIStzr6cPLFJf-KdLRUOzEMU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.105.128.0/17
Signature Algorithm: sha256WithRSAEncryption
0c:e9:49:02:f8:2b:74:5b:5e:2d:31:ee:07:63:4c:b5:82:2e:
75:66:27:f0:01:f0:6c:0d:a3:a7:39:35:8a:f8:59:50:14:86:
2c:93:a1:e6:a4:94:3b:27:0c:55:64:02:72:8a:4a:3e:c5:f7:
3b:b2:cb:d1:8d:cb:a3:c1:4d:ba:16:53:74:d4:de:32:bf:c0:
74:21:9a:a6:41:35:a4:6c:09:56:de:d6:d5:9e:51:7e:51:fa:
38:48:00:bb:1d:db:1f:42:86:6d:8c:78:6d:4f:e2:44:7c:83:
85:63:47:2d:d9:ca:85:f9:f9:82:68:5f:92:59:5f:7b:c8:19:
b9:90:39:7d:03:54:02:28:69:fe:28:9d:a8:9b:f9:e0:ac:57:
f2:0f:ba:f7:96:ec:24:ae:53:6d:ec:8a:7b:aa:c4:9c:ea:e0:
a2:19:da:7b:3a:03:bb:ea:d6:dd:c1:a6:b1:55:b5:53:d2:bc:
05:36:86:b1:54:19:6c:34:38:01:4f:f4:d1:a5:eb:cd:91:4b:
7e:7e:7e:3f:cc:08:6c:3c:af:c6:2d:37:21:95:49:47:78:ba:
51:66:f5:7a:6f:20:10:23:23:1c:1f:59:ef:de:3e:87:e9:0c:
db:36:9e:2e:ad:c3:b2:e3:85:e6:77:bd:4b:30:51:1e:d9:c4:
5b:5f:d0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:55:53 2025 by rpki-client