Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/vR84NkaYPSGz12kFdKJlO1iljNY.roa
File: vR84NkaYPSGz12kFdKJlO1iljNY.roa (raw, json)
Hash identifier: mNqOiATchEMJ3zW7XtUx2EE7aSrj77Kgro4jmUGXX90=
Subject key identifier: BD:1F:38:36:46:98:3D:21:B3:D7:69:05:74:A2:65:3B:58:A5:8C:D6
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 15F2
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/vR84NkaYPSGz12kFdKJlO1iljNY.roa
Signing time: Mon 26 Aug 2024 05:21:37 +0000
ROA not before: Mon 26 Aug 2024 05:21:37 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18049
IP address blocks: 175.183.0.0/18 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5618 (0x15f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Aug 26 05:21:37 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=BD1F383646983D21B3D7690574A2653B58A58CD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9b:09:f4:08:7b:6e:f7:7c:89:83:dd:cb:1d:
0b:0f:1c:33:13:27:5b:97:73:7a:fd:d1:15:6f:0a:
0c:19:3b:d4:d3:b4:9a:f7:ad:2a:e7:d1:38:cc:bc:
79:d6:0c:4b:0c:4d:ae:e6:aa:31:de:75:9d:c4:e9:
1c:5b:35:e5:cb:23:e7:18:72:23:52:96:52:e4:60:
b9:04:dc:8a:f0:6c:65:a3:b2:9b:b8:1d:d1:c1:ac:
39:d6:02:91:a5:d5:01:0f:d1:82:47:6c:4c:32:6e:
81:32:46:fd:61:42:20:43:0f:d8:c9:3b:f6:ec:10:
61:3a:71:5c:ca:be:f0:28:03:b9:d0:2a:bc:a3:22:
37:99:2a:d7:de:55:31:fd:33:f6:dc:aa:16:a6:47:
be:e8:81:cc:30:9d:97:be:35:c0:41:ab:32:22:91:
ed:03:e4:69:85:1c:ba:39:3f:4b:bf:67:b7:6a:58:
7f:bf:aa:e0:00:55:b4:04:c6:26:52:9a:3b:25:98:
88:9b:5b:70:45:aa:22:4c:b9:8e:ec:ce:e4:ea:f8:
1f:ca:29:23:e2:a4:f7:e3:7b:f8:60:f9:97:b6:b2:
16:20:eb:50:55:c1:c3:cb:fb:39:e7:a7:f8:59:0a:
80:db:2d:21:e0:f8:2e:9a:ec:16:18:72:bc:9e:58:
7a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1F:38:36:46:98:3D:21:B3:D7:69:05:74:A2:65:3B:58:A5:8C:D6
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/vR84NkaYPSGz12kFdKJlO1iljNY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.183.0.0/18
Signature Algorithm: sha256WithRSAEncryption
02:6f:58:f6:be:fd:5f:12:45:4a:d4:fc:98:f4:1a:53:82:b8:
f4:47:e2:a0:f9:fb:e7:4a:fd:46:ea:ba:e6:44:20:33:9a:00:
6e:ac:51:bc:f8:df:a8:22:a0:6c:75:4c:63:79:98:c7:70:66:
e5:64:85:e0:3b:75:fc:9c:61:07:d9:48:87:98:e6:b4:d3:6e:
15:f7:84:cb:af:74:1c:77:60:9f:07:d7:a4:24:dc:9c:6b:81:
6b:65:02:0c:73:67:46:2d:b6:73:ce:ef:6f:2f:d6:f0:4a:43:
41:3f:4e:11:df:bb:ad:11:95:97:72:af:54:3e:49:1d:4d:89:
d9:d9:81:5d:e8:88:d5:0a:fb:3b:9e:b6:fd:a5:89:8d:09:9c:
d0:d4:8c:15:65:26:fb:57:f7:76:12:59:ac:f6:89:1f:80:5d:
05:3b:93:51:66:a1:a7:bc:80:10:6e:4a:bc:8e:ad:e1:1d:af:
1b:47:d4:97:08:49:f5:b9:33:05:84:ca:3d:9e:f7:ea:c2:b5:
c1:64:e2:ff:bf:73:b6:ea:08:15:ee:ef:7a:69:c1:c9:28:62:
f8:df:5b:ec:ae:cf:dc:d2:15:13:ff:3f:4c:71:49:a5:3a:85:
21:dc:9b:77:28:dc:43:90:bf:6a:1c:84:84:a2:0a:3d:97:c2:
3b:94:f7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:43:43 2025 by rpki-client