Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/yYP6Qh6ILrbw_r-9pcEgHMhwc9E.roa
File: yYP6Qh6ILrbw_r-9pcEgHMhwc9E.roa (raw, json)
Hash identifier: EmUlJ6ljb/u+XdFwKXAgVQ4eMAGaNgzhV9jwC9+1Jw4=
Subject key identifier: C9:83:FA:42:1E:88:2E:B6:F0:FE:BF:BD:A5:C1:20:1C:C8:70:73:D1
Certificate issuer: /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial: 0CEB
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/yYP6Qh6ILrbw_r-9pcEgHMhwc9E.roa
Signing time: Mon 26 Aug 2024 05:27:06 +0000
ROA not before: Mon 26 Aug 2024 05:27:06 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24158
IP address blocks: 2402:7500:600::/40 maxlen: 64
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:58:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3307 (0xceb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Validity
Not Before: Aug 26 05:27:06 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C983FA421E882EB6F0FEBFBDA5C1201CC87073D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ed:fc:d6:ff:bb:80:bd:a5:28:b3:3c:81:f6:
26:e0:44:b1:34:26:59:3d:f5:e3:a8:ec:1f:65:1e:
1d:c8:70:3c:06:68:05:f9:10:4f:89:e7:83:35:4c:
ce:b7:86:4e:ea:29:a8:5d:57:27:ac:95:39:1a:ed:
a6:83:28:0f:d1:5f:98:af:91:75:f7:0c:a4:2a:31:
87:8a:91:3a:3d:5e:b7:fe:8e:fa:36:ca:5c:95:90:
dd:78:79:dd:0b:aa:68:d8:54:5e:50:dd:98:00:32:
b2:a9:65:59:9b:d1:d3:cb:0a:f4:09:b4:84:41:89:
e8:6f:1c:2e:e0:7c:99:c7:5d:d4:23:bd:06:15:3c:
ea:78:76:00:25:0d:3e:5c:ad:f8:9b:36:40:59:1c:
92:ef:68:23:14:92:2e:ef:ad:8d:cd:2c:e9:be:13:
27:9b:5c:31:c7:4f:ec:40:ab:9d:93:94:ce:0e:75:
cc:d5:06:be:1b:f2:9a:46:f5:00:8e:82:c9:87:df:
62:0f:d8:ba:07:39:7d:8a:6f:c3:a2:d5:0b:ca:90:
bc:32:84:0d:40:ab:b5:15:41:88:47:20:3a:06:ae:
fb:9e:6e:fd:1b:c8:51:7a:cc:48:52:75:09:33:26:
f8:25:2e:cb:e3:ff:df:c6:cf:f5:2a:1b:f6:79:0c:
94:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:83:FA:42:1E:88:2E:B6:F0:FE:BF:BD:A5:C1:20:1C:C8:70:73:D1
X509v3 Authority Key Identifier:
keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/yYP6Qh6ILrbw_r-9pcEgHMhwc9E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:7500:600::/40
Signature Algorithm: sha256WithRSAEncryption
ce:fa:97:a0:76:6a:60:44:45:1f:3d:37:c7:7b:24:8b:bf:60:
b7:ed:2d:03:5b:29:dc:39:cc:90:64:0c:4a:08:2f:22:dc:af:
4a:2c:66:bd:ed:9e:0b:9f:b4:95:a4:10:1a:e9:23:a2:ae:5d:
0c:3e:bc:5b:b6:7a:af:78:e7:39:d2:03:62:4b:ea:9f:7b:8e:
fb:50:f9:50:c8:39:5e:a8:d1:f8:66:95:06:16:2d:ae:42:33:
97:b3:47:c7:6a:f8:6b:a9:27:db:46:b0:73:27:95:78:4f:10:
a9:bd:bc:4b:1f:b2:7d:31:93:2b:a9:eb:0c:4f:a6:78:4b:d1:
de:da:f2:29:94:0c:e3:33:cc:c9:ac:41:e9:26:77:4e:97:ac:
90:14:70:49:47:72:7a:57:5b:f6:6e:b2:92:66:b5:03:7a:b2:
10:55:cb:e1:36:ee:87:4e:22:eb:4c:b5:43:95:f0:d2:6d:ec:
2a:8c:ce:aa:46:41:68:4a:d6:13:e0:d0:58:29:bb:c3:d8:1c:
e0:97:c2:5f:72:74:96:05:69:6e:64:74:1d:81:bb:c1:b0:db:
51:61:2a:31:9c:1b:4e:46:81:8a:2e:fe:dd:c6:36:5a:0f:4a:
e3:f1:d8:f7:28:b3:7d:ff:79:7c:31:3f:d0:17:59:e7:3a:14:
52:65:13:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:25:39 2025 by rpki-client