Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/eTcSoGbQHCn0pc6WkyKfV-EdVGA.roa
File: eTcSoGbQHCn0pc6WkyKfV-EdVGA.roa (raw, json)
Hash identifier: +Mh9xJH7Is+ymLVbpEQ+bWVEi3Yf8G8moMJxkEQKEcc=
Subject key identifier: 79:37:12:A0:66:D0:1C:29:F4:A5:CE:96:93:22:9F:57:E1:1D:54:60
Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Certificate serial: 0CD5
Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/eTcSoGbQHCn0pc6WkyKfV-EdVGA.roa
Signing time: Mon 26 Aug 2024 05:27:36 +0000
ROA not before: Mon 26 Aug 2024 05:27:36 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17709
IP address blocks: 59.102.128.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:13:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3285 (0xcd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Validity
Not Before: Aug 26 05:27:36 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=793712A066D01C29F4A5CE9693229F57E11D5460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:43:65:7c:5f:43:58:38:54:85:52:b4:d8:00:
66:42:5b:1a:ba:87:37:0f:fe:c0:a2:e5:b9:7d:fc:
96:c1:c0:56:9e:df:f9:6a:8c:01:44:90:2b:92:ef:
12:b7:c7:36:b7:59:28:70:6c:cc:b8:92:32:6e:95:
6f:39:07:5b:af:bb:9d:ba:50:3b:b4:44:b5:f8:a9:
90:4c:26:8c:1e:50:af:e4:b0:2e:4f:23:9c:3c:58:
f6:ad:bd:ba:56:75:8b:82:0a:38:f5:22:4b:e6:a8:
dd:98:43:cc:9d:a0:e8:5e:48:16:f6:62:c2:87:38:
bf:be:db:f4:f5:02:83:4e:03:02:28:35:72:b4:57:
cf:e9:e0:77:fa:43:5c:58:71:e7:8a:b7:ea:b4:2a:
29:9a:f8:7e:f1:c1:00:92:27:7f:ea:8a:56:12:7a:
6a:51:5a:86:17:81:96:f1:92:bc:64:d8:de:43:a1:
1b:ea:7b:cb:00:48:42:54:66:7d:36:df:26:d7:02:
85:6c:17:d4:10:24:18:ad:8d:97:87:ba:2f:1a:be:
2d:39:74:92:b4:b9:d0:95:fb:10:e3:81:40:53:a8:
75:ae:07:98:6a:fb:47:6c:8b:2e:91:22:5c:e0:d4:
f8:cd:27:72:6e:71:1f:8e:08:6b:0c:8b:ad:57:01:
24:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:37:12:A0:66:D0:1C:29:F4:A5:CE:96:93:22:9F:57:E1:1D:54:60
X509v3 Authority Key Identifier:
keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/eTcSoGbQHCn0pc6WkyKfV-EdVGA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
59.102.128.0/22
Signature Algorithm: sha256WithRSAEncryption
98:38:39:6f:0b:4a:02:61:94:8f:21:be:94:af:b1:7d:d1:ab:
c0:81:4e:14:12:7b:0a:ad:fa:2d:47:e5:9c:81:3f:a2:ab:f4:
e9:2f:1f:31:40:44:be:a6:d0:11:86:48:2c:21:34:54:97:3f:
7b:74:9e:42:46:5c:7c:da:07:25:ae:ae:8c:47:f7:b5:1e:b9:
d2:dc:88:4e:d1:11:5c:49:1f:eb:24:3d:2c:0b:d3:c8:ef:f0:
59:47:d6:02:c2:1b:4a:70:00:95:11:74:56:69:ff:0e:06:34:
08:4f:be:a7:30:01:d1:db:ec:53:6e:02:33:04:96:dd:97:8f:
1b:09:d5:a9:e9:5e:c0:1e:f5:73:71:4f:a0:d5:e9:0e:c9:fa:
88:98:74:16:35:c4:9d:df:e6:82:3a:7c:5d:5b:28:65:28:16:
83:80:da:ba:8f:d9:ba:6e:7f:01:4c:78:67:21:71:d0:e0:5e:
95:e3:c0:b2:d9:f3:ee:62:68:bb:bd:65:21:dd:73:2a:64:44:
e5:91:c7:e5:19:f7:62:f6:fd:5f:95:d7:3e:50:1b:7c:03:17:
cf:be:90:37:ba:f5:db:2d:33:35:21:b6:e2:90:53:37:3d:f4:
b5:a1:dc:fb:c1:ea:6d:d4:67:2e:79:3f:d9:dd:ea:7b:ef:b1:
61:1a:7a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:22:34 2025 by rpki-client