Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/g_Jo3tPny8HOjFQRRFQkMeLPYrE.roa
File: g_Jo3tPny8HOjFQRRFQkMeLPYrE.roa (raw, json)
Hash identifier: MTsLIWYGD4Pvt3fm0UX6be8M2314uKntTz12IK2aMss=
Subject key identifier: 83:F2:68:DE:D3:E7:CB:C1:CE:8C:54:11:44:54:24:31:E2:CF:62:B1
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 165D
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/g_Jo3tPny8HOjFQRRFQkMeLPYrE.roa
Signing time: Mon 26 Aug 2024 05:22:06 +0000
ROA not before: Mon 26 Aug 2024 05:22:06 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131627
IP address blocks: 106.105.0.0/20 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:07:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5725 (0x165d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Aug 26 05:22:06 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=83F268DED3E7CBC1CE8C541144542431E2CF62B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:31:38:d7:5b:23:73:ba:57:b4:c9:dd:68:16:
bc:dc:d9:b3:a5:02:e3:66:79:31:8f:b4:5c:b6:60:
dc:fb:a0:49:c8:03:d5:16:21:61:10:1f:d2:34:cb:
74:b3:47:fe:ca:87:d4:9e:06:8f:18:d1:27:c5:fe:
93:db:4c:c9:1e:69:a5:6f:5a:8c:1a:54:06:21:29:
38:31:e6:8e:26:11:95:2b:aa:40:ab:aa:89:35:36:
4f:8b:b5:33:8f:6d:0e:c4:16:77:67:af:a9:98:37:
3e:da:08:5d:b4:38:26:a8:c7:d4:e9:bd:52:ff:f6:
de:5d:2c:a3:7a:a4:a1:75:36:16:3a:7d:65:29:a2:
65:e8:ab:9c:fb:09:44:2d:45:ea:81:e9:74:00:48:
9e:7a:97:6c:4b:bf:ce:af:ae:82:b3:aa:c3:64:22:
b1:ad:09:59:a1:00:db:51:e9:d3:64:24:e1:a9:b6:
d9:80:36:64:c7:e7:17:52:c5:12:ec:cf:b3:1f:60:
1d:39:0e:5e:e7:34:c7:a1:2a:07:fd:95:1a:ce:29:
5c:87:ee:9f:4c:5f:50:4d:b9:21:56:fb:32:82:b2:
d3:1b:86:eb:ae:22:23:2a:a4:21:c2:cd:a3:dd:13:
37:ec:01:5e:54:b3:65:51:99:ba:56:0a:b0:9e:42:
b2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F2:68:DE:D3:E7:CB:C1:CE:8C:54:11:44:54:24:31:E2:CF:62:B1
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/g_Jo3tPny8HOjFQRRFQkMeLPYrE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.0.0/20
Signature Algorithm: sha256WithRSAEncryption
3d:ef:76:ad:87:44:52:28:a9:7a:fe:58:e1:00:a8:ed:0c:cd:
a4:63:b9:ee:ec:5b:ec:a2:71:04:2e:0c:12:9d:7d:d0:10:a1:
2b:5c:ad:0c:31:da:50:58:d3:b6:59:62:02:b3:50:04:d5:16:
e2:89:08:3c:11:c9:d1:1f:7f:8b:d0:0c:0b:c1:cf:f9:14:5d:
b7:07:fe:0a:45:59:02:a8:fa:19:d8:10:f0:b2:20:58:56:e4:
5f:9a:d3:09:73:42:65:07:23:fe:a6:eb:bb:f7:a5:0e:66:da:
f0:4c:c1:95:73:8b:4c:ed:22:c8:67:3a:9b:bf:02:e0:cd:3e:
36:c6:8c:6e:ec:4b:9a:43:14:62:17:a0:a6:1e:57:9f:0d:5c:
c7:5d:19:81:94:9c:3b:b2:ca:b3:46:c0:11:2b:07:66:35:7d:
64:13:21:bc:3f:a1:4b:d5:6a:b6:23:7f:3d:8a:a7:f0:6c:97:
e4:d3:28:58:49:18:8e:8e:e6:c2:cb:aa:4d:51:cb:69:ca:37:
2f:34:d7:dc:53:8a:0f:1a:33:17:d8:ed:a7:48:0f:d8:4d:88:
64:03:11:d1:cb:0e:ca:5b:fb:14:4f:1a:94:aa:5b:77:99:16:
1b:64:02:84:71:e7:88:00:28:bb:09:0e:28:14:14:b4:86:74:
82:e3:2e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:51:27 2025 by rpki-client