Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/oqL4GG55yuFwSZ-Hwc79xBPZrxY.roa
File: oqL4GG55yuFwSZ-Hwc79xBPZrxY.roa (raw, json)
Hash identifier: o9r/HicinzelOLCTWIYhbhxSk7aKIQnwSGTt0E0xGiI=
Subject key identifier: A2:A2:F8:18:6E:79:CA:E1:70:49:9F:87:C1:CE:FD:C4:13:D9:AF:16
Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial: 12C9
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/oqL4GG55yuFwSZ-Hwc79xBPZrxY.roa
Signing time: Mon 26 Aug 2024 05:32:33 +0000
ROA not before: Mon 26 Aug 2024 05:32:33 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 14618
IP address blocks: 2001:dc1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:03:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4809 (0x12c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Validity
Not Before: Aug 26 05:32:33 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A2A2F8186E79CAE170499F87C1CEFDC413D9AF16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0a:c0:3d:5c:ad:43:1a:25:37:4f:35:a2:f7:
2e:4d:75:97:23:48:7c:1a:44:b1:de:eb:80:c1:67:
02:b9:93:35:2f:2d:37:83:15:d6:31:58:4d:9f:1d:
7f:21:0a:9c:c0:e4:96:e9:0c:26:11:dc:6d:7a:dc:
a0:1a:38:8f:5f:34:cb:f0:c1:36:a9:4f:84:df:9c:
aa:b1:17:5e:8f:73:9f:89:c0:f4:8e:7d:91:3c:ac:
b4:e4:6a:ad:a0:78:87:ad:72:4e:40:ca:74:36:ec:
e7:64:f5:2d:f5:a6:01:59:9b:ab:0d:5b:15:d5:8b:
5c:d8:84:19:6c:dc:2f:50:42:74:2e:7c:0c:3a:2e:
a3:88:0e:f1:b6:85:38:03:33:d6:47:da:62:a6:27:
d5:90:ce:3d:a8:cf:0e:e3:c2:e7:34:3b:79:d6:a7:
dd:ee:df:5d:1f:4a:27:fa:ba:ce:32:ce:51:04:b5:
6c:5f:fe:fd:08:c0:ef:05:b7:c6:ed:f4:db:95:b1:
c6:dd:92:a7:53:56:11:20:19:45:34:cc:d9:d4:69:
11:a1:20:01:cb:59:91:e1:e2:2b:c2:86:34:38:d4:
97:c1:3f:ad:c7:a3:79:3b:ac:76:33:c3:d5:42:cc:
07:82:c0:21:32:d2:0d:16:82:da:39:32:7b:5f:75:
9f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A2:F8:18:6E:79:CA:E1:70:49:9F:87:C1:CE:FD:C4:13:D9:AF:16
X509v3 Authority Key Identifier:
keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/oqL4GG55yuFwSZ-Hwc79xBPZrxY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:dc1::/48
Signature Algorithm: sha256WithRSAEncryption
7e:12:af:25:02:99:19:3d:b5:aa:f7:a3:37:7a:ce:de:0a:7a:
1d:85:2e:e5:f2:5c:06:aa:dc:f4:56:80:ab:7b:8c:9e:60:83:
15:f6:16:49:ed:12:36:e9:df:36:61:8f:3e:26:17:13:b8:8d:
c3:85:3f:db:d3:d2:f8:0a:26:11:c0:a4:59:89:cb:74:7f:9c:
18:18:1e:83:c6:e5:bf:a3:99:bf:98:f1:58:91:48:a0:62:1e:
e4:4c:b8:76:64:a4:84:f0:5d:4f:2b:82:44:e6:3c:fd:ef:ae:
a1:2e:d4:15:cd:e9:9a:d0:1c:8c:ca:f9:06:81:ee:24:95:2b:
ae:61:1d:79:d6:14:11:e6:d6:74:7d:49:67:9c:91:85:4f:09:
a5:dc:5a:6a:f7:54:41:10:23:c8:3a:d3:ec:51:a5:1d:38:2e:
98:0e:8b:54:ce:86:c5:d3:b3:26:20:34:60:9a:d3:b8:36:ef:
d8:72:99:da:86:a1:0c:39:0f:a2:ed:ab:14:c4:38:5c:ce:45:
e6:07:82:0c:35:eb:61:88:dc:2a:f2:a6:1b:2d:cb:66:c6:c5:
3f:eb:83:ae:f3:d1:5c:73:ad:e0:ea:e1:d8:63:37:60:7d:e3:
2e:1c:6c:81:fb:58:36:eb:15:00:6b:78:a0:73:2d:41:92:24:
69:b9:aa:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:54:01 2025 by rpki-client