Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PAGIC/C1uxMJvQohjdqGRXYx7qHYD6L5c.roa
File: C1uxMJvQohjdqGRXYx7qHYD6L5c.roa (raw, json)
Hash identifier: H/EauVbBvGJUD+a3nrkpkKADAz40Iwm4bTjq0Nu5Keo=
Subject key identifier: 0B:5B:B1:30:9B:D0:A2:18:DD:A8:64:57:63:1E:EA:1D:80:FA:2F:97
Certificate issuer: /CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Certificate serial: 0C44
Authority key identifier: 52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/C1uxMJvQohjdqGRXYx7qHYD6L5c.roa
Signing time: Mon 26 Aug 2024 05:23:49 +0000
ROA not before: Mon 26 Aug 2024 05:23:49 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17420
IP address blocks: 211.73.192.0/19 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:58:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3140 (0xc44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Validity
Not Before: Aug 26 05:23:49 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=0B5BB1309BD0A218DDA86457631EEA1D80FA2F97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c0:25:46:4c:c8:6f:50:ad:e0:14:d1:d6:a9:
1e:7e:e9:ea:bf:8a:3d:9f:81:cb:fa:d7:17:57:78:
25:7b:6b:51:ce:da:58:67:8c:9a:30:7c:0b:38:02:
de:a6:f0:ae:2c:68:85:fe:95:7f:d3:7b:84:a6:28:
0c:7c:84:33:b9:61:46:36:4e:7e:57:c9:9b:5a:8d:
c1:d4:c1:cb:ac:02:3a:43:1b:4f:46:6b:1e:e0:0c:
4e:b0:8c:8d:9e:81:cf:f1:9b:9e:4c:51:77:66:4a:
e7:59:36:db:8a:0f:bf:25:5e:91:a8:9e:e5:20:c8:
5e:8e:3e:d2:c2:d7:73:c6:41:d4:8f:a2:4f:5a:5a:
04:29:24:66:e3:3a:cc:55:0f:77:72:a2:09:8f:59:
43:8a:03:a1:b9:6f:bb:c0:eb:52:a9:09:69:9f:63:
e3:40:94:2c:ad:f1:9e:7b:74:1b:92:06:b6:fb:32:
34:e4:33:b5:10:65:7a:3f:9f:9e:b0:b5:0b:19:84:
41:c1:08:67:d4:a6:5d:ef:59:4b:22:38:6c:10:be:
f3:f8:40:0a:fc:7d:a6:2c:58:87:63:f9:82:2f:b3:
08:6d:00:32:2e:2d:ba:95:8a:8a:00:e3:35:51:06:
9d:3a:53:95:00:53:26:fc:c6:1a:9a:7b:dd:00:87:
52:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:5B:B1:30:9B:D0:A2:18:DD:A8:64:57:63:1E:EA:1D:80:FA:2F:97
X509v3 Authority Key Identifier:
keyid:52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/C1uxMJvQohjdqGRXYx7qHYD6L5c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.73.192.0/19
Signature Algorithm: sha256WithRSAEncryption
2c:17:6e:76:aa:ad:df:49:c2:1e:92:3e:44:76:4b:d1:9c:73:
d8:75:d0:d0:88:07:33:31:a7:c0:85:b6:1f:ed:06:78:15:cd:
88:f3:6a:64:6c:7a:9a:33:af:c1:7d:8f:27:16:26:a1:6d:a3:
38:52:ae:56:6a:92:b9:10:fe:85:de:24:01:39:88:7b:0f:a2:
cf:7b:e6:2d:90:96:4d:cb:c9:33:e2:ed:55:6f:b5:80:01:7f:
f8:b1:45:fd:80:39:63:13:d9:b1:52:70:49:a7:e2:22:42:65:
a1:39:43:cb:5a:a5:bc:3f:09:4d:b0:34:64:d3:1d:7b:51:29:
bd:82:c6:1a:c9:3f:85:4a:c3:03:bd:37:3f:55:6d:48:14:35:
fe:51:9b:ef:e5:e3:f6:9f:2b:32:1f:69:5b:fb:4e:fb:13:3d:
2b:b3:30:59:4f:ed:ec:ac:3b:6e:d7:e5:39:6d:f3:59:88:3d:
27:35:c9:30:7c:0a:ca:97:7e:be:31:fb:e8:de:ce:56:24:c8:
29:11:ad:97:7e:a3:f0:86:6d:52:d5:ea:09:7a:9b:ec:4b:52:
2b:70:5a:62:75:26:aa:b6:f4:0c:54:11:3a:68:32:80:12:23:
8d:d5:3e:c1:ae:f9:5d:cf:12:8b:0d:e8:30:70:03:01:96:d1:
97:f9:87:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:30:28 2025 by rpki-client