Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/m9QioW7GVx6G_7IKlawjs_rospg.roa
File: m9QioW7GVx6G_7IKlawjs_rospg.roa (raw, json)
Hash identifier: zhiRG5XFPdmVsta1iaDxMiwSgCGsMv5MCq8gP2OF9ZM=
Subject key identifier: 9B:D4:22:A1:6E:C6:57:1E:86:FF:B2:0A:95:AC:23:B3:FA:E8:B2:98
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 166E
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/m9QioW7GVx6G_7IKlawjs_rospg.roa
Signing time: Mon 26 Aug 2024 05:22:12 +0000
ROA not before: Mon 26 Aug 2024 05:22:12 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9919
IP address blocks: 2401:a040::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:07:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5742 (0x166e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Aug 26 05:22:12 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=9BD422A16EC6571E86FFB20A95AC23B3FAE8B298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:47:5b:4c:b2:f0:d5:25:8d:71:b3:b2:cb:ba:
e6:e3:2f:c8:7b:9f:10:9d:05:b1:37:27:63:84:57:
77:0d:5d:43:51:6a:46:fc:5a:6a:37:24:fa:18:72:
65:17:d3:d0:93:9e:a1:82:49:71:d1:30:94:e0:00:
03:c9:1d:09:74:67:84:6f:eb:da:e1:22:95:63:ff:
81:a1:4b:b5:7b:ce:8c:7e:41:ac:74:6c:92:15:23:
64:d3:60:ac:f4:0a:78:dd:e1:bf:f0:37:11:62:e1:
58:56:58:46:58:c1:eb:f7:d6:43:c5:89:86:ad:20:
27:e5:d3:ee:e0:ea:6e:60:7f:18:74:e1:41:8f:a9:
dc:7c:22:a3:6c:b3:9f:c9:05:14:46:60:79:f2:42:
8e:47:6e:70:01:f4:56:f5:38:6e:36:06:40:42:94:
bd:09:2d:5b:11:8d:b7:c3:c6:0c:b0:f6:61:ec:d7:
f3:3b:95:95:f2:86:4b:7b:63:db:87:7d:a9:d6:ae:
a1:8e:e9:d8:cd:6a:0a:9d:19:43:78:5b:8c:f5:ce:
6d:4c:2a:fb:c8:2e:46:91:72:0f:87:04:c4:4a:9a:
91:84:6c:b2:4d:0e:a9:b5:6d:28:e1:c6:1f:cf:fb:
27:bd:03:ba:ab:1c:ad:0d:ed:d7:1b:fc:ba:70:16:
6f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D4:22:A1:6E:C6:57:1E:86:FF:B2:0A:95:AC:23:B3:FA:E8:B2:98
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/m9QioW7GVx6G_7IKlawjs_rospg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:a040::/32
Signature Algorithm: sha256WithRSAEncryption
6d:41:db:fa:e8:48:61:43:f2:93:3a:ae:85:2d:2a:66:1a:87:
37:84:c5:72:6e:eb:1e:8c:65:0a:e2:71:20:43:82:e4:3d:98:
a8:d5:78:ed:ba:9d:62:6f:a6:33:3e:b1:9a:f3:ad:69:d6:8d:
b1:0f:f6:0e:10:c0:08:cd:9f:f9:69:ac:f2:40:dd:8b:13:5e:
66:9c:21:87:73:77:82:38:c5:64:1e:39:6a:f4:03:f1:56:52:
7e:0a:01:9e:99:94:a0:2a:c5:4e:03:a2:26:18:47:b7:3c:38:
7a:27:2a:55:8a:78:c5:92:d1:c3:5c:39:63:de:73:9d:72:28:
79:6d:85:77:10:82:98:f8:a2:c1:b3:b1:18:e2:81:b5:b5:f3:
e4:19:4a:d6:89:f1:26:67:30:4c:40:8a:2e:00:56:60:e0:c9:
60:c7:54:b4:23:9b:e3:c1:22:37:4e:49:e0:66:15:12:52:f9:
47:a7:b9:59:cc:c1:53:68:2d:ba:8e:12:b8:a9:f8:d7:a8:38:
1f:9e:64:04:8a:93:33:4d:e4:82:51:2d:9c:4a:c3:90:85:7a:
7b:42:82:19:f6:76:fe:78:10:54:23:9b:a5:36:ed:28:f9:a2:
d9:cf:0c:c8:6a:21:59:fc:b9:89:75:52:cd:4d:10:75:62:32:
37:81:53:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:55:49 2025 by rpki-client