Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/YHHROvRz2Mdyo_QmlmCHyH93qB0.roa
File: YHHROvRz2Mdyo_QmlmCHyH93qB0.roa (raw, json)
Hash identifier: YFUxiUh5fj1aT4C7DQS1c7iUwRV+7JsasUZg6rg2u2E=
Subject key identifier: 60:71:D1:3A:F4:73:D8:C7:72:A3:F4:26:96:60:87:C8:7F:77:A8:1D
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 163F
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/YHHROvRz2Mdyo_QmlmCHyH93qB0.roa
Signing time: Mon 26 Aug 2024 05:21:57 +0000
ROA not before: Mon 26 Aug 2024 05:21:57 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9919
IP address blocks: 218.210.64.0/18 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:07:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5695 (0x163f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Aug 26 05:21:57 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=6071D13AF473D8C772A3F426966087C87F77A81D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d0:19:02:dd:d0:fe:d6:4f:1c:f8:9e:3a:83:
5a:63:29:ae:d9:f7:7a:e0:aa:a9:2b:20:4d:ed:aa:
8c:4d:12:24:7e:9c:70:b3:ff:bb:c5:19:54:f8:15:
db:02:e7:0c:5d:25:6f:d4:6b:52:5a:f2:2f:55:ec:
0f:e9:28:60:d3:fa:77:73:db:14:7a:12:2c:dd:49:
a8:a6:f1:8c:7f:d6:c3:a4:c9:11:98:55:d2:6e:d6:
5a:ba:22:b0:a4:ba:54:16:f5:62:50:b5:6f:73:69:
59:9e:f0:37:6b:d8:93:b7:57:3f:b0:1a:37:d8:10:
54:db:e3:24:87:d4:21:12:9f:70:9c:a9:40:b9:85:
12:19:f5:b7:26:5c:76:b4:cd:ad:15:b7:08:cc:7b:
7d:30:18:8d:c3:c3:58:e8:92:35:32:e6:81:39:41:
6f:99:67:9f:b6:18:fe:14:49:fc:4b:05:80:28:b0:
d7:66:fb:05:01:20:3a:bb:d3:11:e9:db:c6:95:a2:
77:d4:99:d9:5a:cf:b5:63:0b:e7:48:b1:a8:32:3e:
06:c1:02:f7:09:7d:de:42:99:43:fa:67:3b:8a:2e:
a5:93:3c:1d:d3:3a:d3:cd:9d:df:a2:32:8f:55:01:
6c:8a:1c:98:cb:ce:e8:37:ec:c7:53:94:97:dc:98:
33:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:71:D1:3A:F4:73:D8:C7:72:A3:F4:26:96:60:87:C8:7F:77:A8:1D
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/YHHROvRz2Mdyo_QmlmCHyH93qB0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.210.64.0/18
Signature Algorithm: sha256WithRSAEncryption
0c:d1:b9:0e:1e:27:e7:8d:fd:a5:e4:16:39:20:34:97:a2:9d:
44:f1:d3:53:04:81:56:60:0a:67:e8:3e:0e:7d:a2:be:a1:52:
e0:10:bb:e5:7a:a4:67:4f:b8:ba:a8:f9:0c:93:d2:14:05:39:
2d:b4:2b:12:94:c7:6b:11:9f:38:75:a1:38:76:ea:51:31:80:
ef:59:b9:c6:0a:5e:fe:78:51:69:9a:e6:8f:42:85:f5:a9:f2:
8a:24:32:27:76:5c:95:17:cb:cc:ee:c8:dc:a2:2b:d5:7a:5f:
17:1c:1f:d2:c1:2d:f4:25:2c:61:cb:50:55:34:08:05:84:6d:
54:d2:19:5f:b6:8c:c9:cc:c3:8f:bc:70:aa:d3:71:e9:48:7d:
0a:ce:8b:fa:9b:e3:4d:a3:19:8a:ac:05:b0:31:2c:7d:be:d7:
2d:63:37:40:d7:d5:be:43:73:b4:ff:4d:3c:78:44:2f:42:ce:
d9:70:87:d4:54:e6:ee:19:4e:0a:b6:1a:34:f7:63:c1:b0:aa:
14:5a:5d:dc:4e:35:a1:89:b7:02:6b:98:7f:e8:7e:86:c9:cf:
1e:6d:ff:dc:8a:50:4c:5e:6d:df:ed:c5:24:2e:78:f9:8d:c8:
c3:2c:3b:e8:48:9e:4f:fc:e6:5e:d0:35:b1:d4:54:f3:ac:26:
0c:63:c7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:59:37 2025 by rpki-client