Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/c_uAFlWxGVyCSsecXfZjAOR6D_g.roa
File: c_uAFlWxGVyCSsecXfZjAOR6D_g.roa (raw, json)
Hash identifier: Rf2foEDBFCOQXsZhq/oIo0QSZJ5593SI379VRam/V6o=
Subject key identifier: 73:FB:80:16:55:B1:19:5C:82:4A:C7:9C:5D:F6:63:00:E4:7A:0F:F8
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 16D9
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/c_uAFlWxGVyCSsecXfZjAOR6D_g.roa
Signing time: Mon 26 Aug 2024 05:22:41 +0000
ROA not before: Mon 26 Aug 2024 05:22:41 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9919
IP address blocks: 122.146.64.0/18 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:07:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5849 (0x16d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Aug 26 05:22:41 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=73FB801655B1195C824AC79C5DF66300E47A0FF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:32:16:c7:43:cc:bf:6b:38:68:33:d7:89:d2:
bd:e1:33:2d:94:82:bb:0c:b4:a5:23:28:bf:17:8d:
1b:eb:b2:44:9b:86:24:ad:4d:f2:d5:4b:ed:2a:ed:
ee:b8:b9:33:82:95:7c:fd:50:58:24:7a:2f:2f:eb:
16:49:f8:04:9c:7a:87:72:93:41:4b:ea:34:49:2d:
9b:0a:23:49:5b:98:c4:e4:23:3c:e5:70:a6:f8:00:
16:60:36:2e:e7:d9:c9:fc:60:21:55:b2:e1:b7:01:
5e:10:f9:4e:9e:6b:4b:7d:21:76:c7:aa:ca:d0:c7:
2a:53:8c:85:3d:ce:4c:db:4a:af:38:70:7d:88:89:
8d:f9:f2:d2:ff:da:0d:1b:82:15:40:61:d8:76:db:
0f:97:33:09:3a:0a:a6:66:fb:10:0f:0f:96:06:52:
7b:a7:18:cc:89:e4:2e:13:13:1f:64:99:48:8f:5b:
b9:8d:f2:6c:cb:d1:13:23:a0:7d:9d:7d:a0:a1:6d:
8f:52:13:56:78:32:cb:a9:33:60:1c:9d:34:d0:7c:
da:81:fa:51:a7:fb:22:5e:1e:ae:95:82:67:92:00:
a8:00:44:c4:79:99:bf:c4:30:40:52:bf:1c:0d:51:
a2:c9:76:c1:ba:dd:70:ca:ab:f3:e6:dd:06:86:2c:
90:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FB:80:16:55:B1:19:5C:82:4A:C7:9C:5D:F6:63:00:E4:7A:0F:F8
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/c_uAFlWxGVyCSsecXfZjAOR6D_g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.146.64.0/18
Signature Algorithm: sha256WithRSAEncryption
c0:f3:85:44:3e:c8:7f:88:02:96:c8:21:ac:54:6a:10:84:66:
fb:98:d9:2a:e1:5b:68:b8:c2:fe:c1:8e:1e:c7:14:3b:3b:bf:
c2:96:c8:ce:6f:65:54:b2:cb:38:92:06:88:1c:91:93:31:fd:
0d:3c:74:57:c5:30:52:d0:88:42:98:d0:91:7d:0a:70:5b:0b:
d5:68:cd:bd:4a:88:b3:89:c0:ef:b7:cf:c2:ae:73:3e:98:b4:
4a:b5:c3:48:2a:42:1f:01:83:77:0e:8f:5c:91:95:61:24:16:
53:83:df:6f:0b:5e:bd:08:4f:1f:26:cf:52:0b:2b:09:7e:e8:
95:fe:4d:15:62:9a:f3:09:1f:57:2a:a5:97:03:7f:dd:aa:27:
61:26:ee:f5:35:c1:15:a2:88:78:28:d2:0f:cb:b8:26:e6:cd:
57:e0:f1:9c:55:c0:04:fb:d9:5c:fb:62:13:26:86:c6:fb:df:
59:f4:22:db:18:c6:2b:77:07:0f:70:c4:63:db:e8:df:cc:18:
91:31:b1:b4:26:89:9d:66:b4:6c:30:df:27:cc:7a:b0:d7:d7:
31:ff:1d:a9:af:58:66:a3:b6:1d:b8:52:12:cb:6d:cc:28:e2:
b3:7a:1c:9a:73:15:a8:87:e1:a7:0d:a7:a7:18:5f:09:b1:40:
91:f3:64:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:51:32 2025 by rpki-client