Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/CBx0-HSBobA92yp45-Z0G4XCdlQ.roa
File: CBx0-HSBobA92yp45-Z0G4XCdlQ.roa (raw, json)
Hash identifier: /CdUxpVmYyvsrNpJQNFKJUuS19d9tKkwYNy/OqWlqDk=
Subject key identifier: 08:1C:74:F8:74:81:A1:B0:3D:DB:2A:78:E7:E6:74:1B:85:C2:76:54
Certificate issuer: /CN=1F7D627FE36A2EBF69809BC847B5433BF43E37E8
Certificate serial: B1
Authority key identifier: 1F:7D:62:7F:E3:6A:2E:BF:69:80:9B:C8:47:B5:43:3B:F4:3E:37:E8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/H31if-NqLr9pgJvIR7VDO_Q-N-g.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/CBx0-HSBobA92yp45-Z0G4XCdlQ.roa
Signing time: Tue 04 Feb 2025 05:58:22 +0000
ROA not before: Tue 04 Feb 2025 05:58:22 +0000
ROA not after: Fri 26 Dec 2025 15:30:27 +0000
asID: 152619
IP address blocks: 2401:e3e0:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:22:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177 (0xb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F7D627FE36A2EBF69809BC847B5433BF43E37E8
Validity
Not Before: Feb 4 05:58:22 2025 GMT
Not After : Dec 26 15:30:27 2025 GMT
Subject: CN=081C74F87481A1B03DDB2A78E7E6741B85C27654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:84:df:75:c8:d2:1e:86:54:38:1d:ab:a8:50:
92:b0:55:a7:da:b4:32:5f:75:11:07:63:b4:60:90:
68:7c:47:39:be:96:00:84:a3:28:74:03:52:ae:05:
bf:16:27:9e:b9:3b:06:db:51:84:53:c6:88:0a:a1:
d6:e0:eb:b5:0d:74:9a:ab:93:24:ea:57:0d:a6:41:
9b:13:5b:6f:dd:a0:6d:1f:53:bc:9a:46:a9:3b:30:
51:df:cd:88:09:89:ea:4c:45:3b:ba:9e:84:f8:d2:
11:87:7b:6d:0d:3a:cc:6e:04:12:f0:62:3c:63:98:
97:6f:03:d9:b5:3b:1e:e3:1f:ad:72:e4:29:e8:f7:
4b:06:77:18:a0:65:98:c6:a6:20:b3:02:e8:ff:42:
67:4f:08:9b:07:ae:1a:30:90:d2:78:89:17:24:1b:
40:89:22:96:c3:1d:0e:c4:46:5e:e9:24:9e:e7:04:
9f:d7:22:42:c6:1e:ce:95:9b:f3:7c:46:89:82:56:
0c:86:59:63:04:10:9e:6b:52:9e:f1:40:60:bc:2a:
bf:38:9f:13:a8:3e:82:00:d2:cd:46:4e:55:99:c4:
30:55:e6:c6:7a:46:94:45:59:03:eb:e3:c8:3c:16:
06:fe:9d:8a:46:d8:81:b8:be:57:7d:ae:3e:a3:cb:
40:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1C:74:F8:74:81:A1:B0:3D:DB:2A:78:E7:E6:74:1B:85:C2:76:54
X509v3 Authority Key Identifier:
keyid:1F:7D:62:7F:E3:6A:2E:BF:69:80:9B:C8:47:B5:43:3B:F4:3E:37:E8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/H31if-NqLr9pgJvIR7VDO_Q-N-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/H31if-NqLr9pgJvIR7VDO_Q-N-g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/CBx0-HSBobA92yp45-Z0G4XCdlQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:e3e0:2::/48
Signature Algorithm: sha256WithRSAEncryption
21:e9:8a:9f:36:9d:8a:70:13:aa:33:71:ce:7d:a3:58:e4:36:
2a:05:6c:3e:e4:b8:5c:bb:14:a3:8a:cd:12:60:67:a3:e2:a4:
b1:ba:b4:8e:89:71:3c:1b:97:c6:66:93:59:62:f6:37:d8:ca:
a6:ea:1a:a9:d9:33:e8:0d:c7:a2:68:68:1f:cf:31:96:93:88:
64:b7:16:cc:35:aa:59:b0:66:fa:25:0e:44:f5:c8:5b:98:07:
b8:1e:c6:38:e4:cc:50:d3:33:36:ce:19:98:7e:45:59:ff:33:
d1:95:91:ad:79:50:3b:67:b9:3a:38:93:ee:a1:fc:c5:b6:54:
2e:f2:ce:a0:26:e4:ed:4d:bc:a6:27:10:cb:07:e6:70:e6:34:
2e:17:c7:a0:78:df:a4:9e:33:f0:1f:cd:df:f9:2e:6e:c6:6b:
b7:5d:14:fc:8b:22:97:00:e3:1f:68:55:50:c2:48:ef:c1:ee:
77:36:f6:75:39:e7:f5:02:28:65:2d:0c:22:ac:79:48:25:c2:
21:9d:8a:97:3d:39:9c:14:3e:14:0e:ab:a2:2d:7b:bc:50:d6:
48:c8:bd:cd:2c:5e:a5:82:6f:dc:3f:5f:53:eb:b4:9a:93:1f:
15:db:9c:f3:c6:5d:6c:b9:80:6d:9f:87:ce:e1:20:ac:3e:49:
8c:a0:fc:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:59:44 2025 by rpki-client