Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/zEa4c7v01Frqxd9Xshi-ZeyreJc.roa
File: zEa4c7v01Frqxd9Xshi-ZeyreJc.roa (raw, json)
Hash identifier: k6zhzMQfY/W34Nfd/YVXCQIkex3EzsWGYflXKMxEkdI=
Subject key identifier: CC:46:B8:73:BB:F4:D4:5A:EA:C5:DF:57:B2:18:BE:65:EC:AB:78:97
Certificate issuer: /CN=87A4AFD9E7FC1FED4F9545DE41CE4413DACB0E05
Certificate serial: 0C72
Authority key identifier: 87:A4:AF:D9:E7:FC:1F:ED:4F:95:45:DE:41:CE:44:13:DA:CB:0E:05
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/zEa4c7v01Frqxd9Xshi-ZeyreJc.roa
Signing time: Mon 26 Aug 2024 04:56:17 +0000
ROA not before: Mon 26 Aug 2024 04:56:17 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131149
IP address blocks: 43.254.16.0/22 maxlen: 32
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3186 (0xc72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87A4AFD9E7FC1FED4F9545DE41CE4413DACB0E05
Validity
Not Before: Aug 26 04:56:17 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=CC46B873BBF4D45AEAC5DF57B218BE65ECAB7897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:12:a2:35:57:b3:33:86:c5:fd:7b:44:02:ca:
76:4f:d1:ea:6e:32:82:26:a1:f0:d3:e0:94:c3:bb:
a7:56:0e:63:83:b7:68:b6:2d:15:e0:1f:f6:15:aa:
85:e9:8c:90:90:9b:9f:ad:e2:95:cd:92:34:96:d7:
dc:54:f5:55:08:ed:35:d9:c8:7c:92:14:de:e8:bf:
36:0a:8b:f0:81:79:e0:1b:ee:16:01:cf:10:ae:93:
f3:b6:3c:8a:bd:0d:aa:b9:c8:32:39:2f:c5:8b:08:
a6:63:b2:25:df:ae:5c:e9:cf:cc:db:24:21:f6:b5:
5f:c0:e4:2c:d4:8d:e4:15:b5:47:6b:c1:26:56:b8:
36:d4:a1:2d:ff:71:76:a6:b4:75:36:df:c0:c8:d5:
e1:00:21:21:4b:6c:b9:b3:e2:dd:89:16:6a:ee:cb:
42:3d:d0:a5:00:9e:96:77:25:86:df:96:30:c0:73:
05:21:e9:08:ab:20:a4:83:a0:0c:41:55:4d:32:da:
2a:22:82:d6:bf:3f:b5:7a:55:38:8d:3e:f4:91:b4:
38:57:4b:fd:45:f8:c9:c3:ba:9f:db:e0:cf:89:98:
c6:ed:35:67:25:da:fe:76:7b:a9:e9:e1:30:03:fa:
8a:ce:86:a2:cc:64:7e:6f:de:77:f8:c6:2f:c8:99:
9a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:46:B8:73:BB:F4:D4:5A:EA:C5:DF:57:B2:18:BE:65:EC:AB:78:97
X509v3 Authority Key Identifier:
keyid:87:A4:AF:D9:E7:FC:1F:ED:4F:95:45:DE:41:CE:44:13:DA:CB:0E:05
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/zEa4c7v01Frqxd9Xshi-ZeyreJc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.254.16.0/22
Signature Algorithm: sha256WithRSAEncryption
16:f8:96:dd:97:cc:95:f9:ee:e5:1a:10:fc:c1:22:10:57:7f:
67:d2:c5:b0:bf:34:93:2b:35:e0:99:32:d8:c5:35:9a:38:1d:
48:fa:38:27:c5:4b:93:21:c7:55:d2:56:9e:25:57:4c:8b:61:
d0:bd:3c:8a:95:6c:58:6d:c0:b0:ae:1a:88:2e:b5:d5:38:13:
36:45:56:19:6a:1c:5f:9e:89:9f:05:39:d3:3e:a7:8e:15:1c:
1c:b4:bc:8c:c2:b0:6e:2b:53:a7:e5:22:ae:c4:52:15:7f:0e:
07:6c:87:0c:8c:91:e2:f1:46:9a:0b:cf:d0:33:dd:8b:1e:04:
5c:6c:1e:f2:dc:22:09:5d:69:8d:70:db:49:83:79:66:a7:8e:
bd:90:ce:d8:53:8f:13:13:d1:82:64:b7:fa:58:c5:80:af:9b:
39:31:b7:99:fa:c7:8b:3d:b0:c7:e8:f2:0c:5a:53:f4:9e:3e:
8d:fa:bb:d8:f7:41:25:ac:39:a0:92:b8:67:d6:8f:d1:1f:7e:
d1:e1:05:b6:04:cb:8b:a5:19:6c:c6:b0:a1:88:37:7e:ed:73:
d6:65:59:4a:d7:25:8d:65:3c:a2:5b:e1:39:8b:72:0d:50:12:
1e:e0:f8:5f:2d:68:0c:24:47:eb:a5:84:32:9e:74:d3:a6:e8:
64:50:7e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:19:02 2025 by rpki-client