Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/2iesBgoJXBixxu4i7LdOG5Nm3xk.roa
File: 2iesBgoJXBixxu4i7LdOG5Nm3xk.roa (raw, json)
Hash identifier: sktV41dB92njPOGBPtdQzSB1qVYy/jC0rxYaMmGBI5o=
Subject key identifier: DA:27:AC:06:0A:09:5C:18:B1:C6:EE:22:EC:B7:4E:1B:93:66:DF:19
Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial: 0E12
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/2iesBgoJXBixxu4i7LdOG5Nm3xk.roa
Signing time: Mon 26 Aug 2024 05:25:01 +0000
ROA not before: Mon 26 Aug 2024 05:25:01 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38843
IP address blocks: 223.27.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:59:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3602 (0xe12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Validity
Not Before: Aug 26 05:25:01 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=DA27AC060A095C18B1C6EE22ECB74E1B9366DF19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fa:36:48:49:c9:e3:d9:f1:83:7b:8a:44:31:
f6:4a:a6:fd:99:07:ba:1c:6a:c8:d1:12:90:21:0a:
96:e2:92:82:89:f4:6c:6b:6a:fb:94:3c:01:97:72:
04:64:64:5e:3f:44:49:38:2a:7b:fd:ee:18:c8:db:
d9:8f:ff:50:34:9b:68:c9:4a:92:31:98:34:75:cc:
94:f7:50:ce:5f:a8:12:e7:c7:8c:62:f9:df:3e:dd:
d2:15:91:33:b1:d4:15:be:31:01:18:33:09:1c:1e:
99:82:de:24:cf:f1:fe:0c:75:32:25:4e:82:f3:49:
b0:b5:54:97:2e:fb:d9:2c:57:5b:d9:62:ef:30:22:
e8:95:96:8d:53:8b:c7:e5:50:e4:67:94:5e:90:7d:
1d:b9:16:85:20:53:00:e9:44:cb:c3:98:33:77:f3:
b6:6f:7a:1b:13:40:4f:6b:1b:68:78:4e:66:92:e2:
8a:b9:4f:76:e2:bf:af:7d:20:62:56:dd:9b:5d:30:
48:b2:6b:0f:5c:b1:05:3a:99:e7:c5:de:c4:35:b2:
8a:fd:94:92:55:b8:65:fe:55:9e:d1:a9:89:67:da:
4f:da:c5:5b:ad:65:b6:f8:fb:87:a8:60:a6:4e:6a:
16:f7:7a:0e:6b:1c:9a:bc:8f:12:77:af:43:9d:09:
63:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:27:AC:06:0A:09:5C:18:B1:C6:EE:22:EC:B7:4E:1B:93:66:DF:19
X509v3 Authority Key Identifier:
keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/2iesBgoJXBixxu4i7LdOG5Nm3xk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.27.47.0/24
Signature Algorithm: sha256WithRSAEncryption
43:13:a7:76:48:22:25:30:04:84:36:cf:19:9f:4f:ec:76:b3:
8b:0d:0e:43:20:d2:9d:22:15:a0:18:fc:b4:a9:d6:3a:2e:d3:
53:2d:02:bc:da:c6:3a:0a:85:07:00:32:fc:a8:f8:03:26:c2:
e8:20:6f:2f:68:81:58:9d:9d:bf:47:3a:a9:cc:bf:e2:03:25:
dd:1d:b8:df:b2:9a:db:72:b3:fe:3f:82:75:7c:34:f5:88:f5:
7e:ed:8b:67:0f:c0:ab:7c:2c:bf:66:71:90:ff:bf:7f:86:5c:
11:4b:42:95:47:8a:6c:a6:56:c7:3c:0f:69:0b:82:19:1a:e2:
d5:24:53:8b:76:6e:38:5b:b3:b3:44:d7:e5:eb:27:a4:37:51:
86:e7:13:4b:b0:8a:32:2a:3d:fa:74:74:41:98:29:25:0f:5a:
60:45:18:f4:a3:57:c0:50:05:5c:ad:ef:f4:3a:3f:ad:ea:f0:
b3:c8:13:35:25:d6:62:bc:26:89:3f:a5:76:20:45:00:80:2d:
36:b3:14:e6:88:9a:03:c7:e5:e0:e7:1a:89:29:1e:1b:11:52:
3f:ba:b1:95:3c:46:97:61:38:d4:1f:39:95:d6:49:b2:17:fa:
16:92:7e:85:f2:ca:66:18:ad:60:32:8e:a2:a6:c2:3b:5d:3a:
61:04:49:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:16:41 2025 by rpki-client