Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/HdzrZhc6PteEuuy3HMHe2Syb0eY.roa
File: HdzrZhc6PteEuuy3HMHe2Syb0eY.roa (raw, json)
Hash identifier: ZUYw8SjKkY0vSV6IMYjxY1EI7iAY5Tbmi4mLm8EyWPI=
Subject key identifier: 1D:DC:EB:66:17:3A:3E:D7:84:BA:EC:B7:1C:C1:DE:D9:2C:9B:D1:E6
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 11E3
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/HdzrZhc6PteEuuy3HMHe2Syb0eY.roa
Signing time: Mon 26 Aug 2024 05:24:29 +0000
ROA not before: Mon 26 Aug 2024 05:24:29 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131634
IP address blocks: 124.108.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:09:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4579 (0x11e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Aug 26 05:24:29 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=1DDCEB66173A3ED784BAECB71CC1DED92C9BD1E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b1:df:60:e1:97:06:45:05:2d:80:b4:45:21:
68:3f:e9:c0:68:53:c0:22:3c:e9:28:ba:86:df:35:
0e:6a:7d:d7:c6:22:65:96:4e:c7:13:6e:4a:91:de:
16:6c:f2:a1:0d:89:ce:6b:c6:17:b5:a9:47:cb:b7:
a5:47:a4:78:13:dc:2a:a9:75:50:66:7f:26:48:01:
9a:7c:a5:d0:f9:ff:49:71:4f:88:ca:87:98:80:e4:
6e:41:17:d9:18:03:37:c4:34:7c:7d:30:fa:e8:fa:
30:b2:1b:42:9d:05:20:85:22:31:62:96:b0:cf:e0:
1a:80:03:55:8f:52:da:0b:8e:db:d0:e3:86:85:8a:
75:bf:83:e9:9f:4d:0a:c8:0b:d4:bd:59:3b:d7:77:
ca:6c:3e:3a:5e:76:32:ae:27:ba:c1:e6:70:16:83:
7a:22:6b:d1:ff:f7:ca:2c:91:df:5a:3c:0e:64:87:
a2:41:ba:78:61:34:58:e9:b4:d2:cc:67:df:b9:36:
39:15:d7:38:84:9b:14:0c:8a:e4:0d:62:16:8c:12:
33:17:df:1e:b9:7c:25:94:b7:fc:8f:7f:4a:81:cd:
bd:29:32:ae:d2:47:09:6c:38:d5:70:a3:d5:df:8d:
32:68:eb:88:fb:e7:e4:63:e4:f7:47:1f:3a:d4:6a:
f2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DC:EB:66:17:3A:3E:D7:84:BA:EC:B7:1C:C1:DE:D9:2C:9B:D1:E6
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/HdzrZhc6PteEuuy3HMHe2Syb0eY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.108.149.0/24
Signature Algorithm: sha256WithRSAEncryption
34:1a:d8:13:ac:66:77:80:2d:ac:1d:24:6b:42:cd:c1:6d:3c:
7e:2b:20:26:cf:f3:0c:ec:da:fa:86:22:c6:c2:b7:ad:e2:23:
ab:fb:02:12:62:2c:d7:89:f5:b4:68:94:07:b3:f9:94:ec:1c:
7b:f2:4d:2f:e1:8d:d2:31:28:fb:a8:e4:09:3e:17:7e:d8:1b:
0f:a0:69:cf:7e:02:9a:b5:1e:c5:dd:a5:9f:2f:a0:19:91:84:
a5:35:03:d5:25:ab:20:9c:15:a5:f8:75:98:21:14:de:eb:ef:
08:c8:36:6b:ff:32:71:6c:5d:2f:da:04:39:a3:03:ed:d3:0d:
60:45:2a:11:39:f0:e2:f6:3b:ad:cc:c4:ce:60:89:43:c2:95:
d7:88:bd:e3:28:e0:ab:e3:b4:27:ed:06:d1:dc:c2:bf:52:d9:
1b:b0:f0:0f:15:6a:7c:63:68:e3:4e:89:5d:90:07:dd:7d:a4:
5b:62:28:9d:31:e4:7e:8f:dd:f1:8a:4d:f8:6c:cb:15:51:bd:
88:63:fb:a1:7b:99:2e:3a:92:39:47:13:9f:36:68:ef:7b:ea:
bd:6e:ff:e6:71:7f:f6:0f:7f:bc:7e:b9:39:c3:f9:18:b7:9a:
e4:bc:5f:bb:a0:83:51:21:d3:1c:f3:6a:2f:92:19:69:8b:64:
6d:2e:35:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:05:02 2025 by rpki-client