Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JGZ/m0UGC5l0fLaqImz09MS-0MiZMnE.roa
File: m0UGC5l0fLaqImz09MS-0MiZMnE.roa (raw, json)
Hash identifier: uvDTSrEFVS5YcQ491bUj0OL9lUi4tYbExWooiMiDkFU=
Subject key identifier: 9B:45:06:0B:99:74:7C:B6:AA:22:6C:F4:F4:C4:BE:D0:C8:99:32:71
Certificate issuer: /CN=72C436BE92AE0ADCB314EBC1ACE319FF77BDA3FC
Certificate serial: 0180
Authority key identifier: 72:C4:36:BE:92:AE:0A:DC:B3:14:EB:C1:AC:E3:19:FF:77:BD:A3:FC
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JGZ/m0UGC5l0fLaqImz09MS-0MiZMnE.roa
Signing time: Mon 24 Feb 2025 01:06:07 +0000
ROA not before: Mon 24 Feb 2025 01:06:07 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 19551
IP address blocks: 180.94.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Feb 2025 03:17:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 384 (0x180)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72C436BE92AE0ADCB314EBC1ACE319FF77BDA3FC
Validity
Not Before: Feb 24 01:06:07 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=9B45060B99747CB6AA226CF4F4C4BED0C8993271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a0:a5:8e:27:75:5b:dc:b7:0e:1c:13:3a:c1:
cc:c7:63:3e:c5:0b:35:a3:3c:c0:32:ce:6e:0b:eb:
0c:e6:4e:09:cc:1e:ed:1d:ae:4e:30:ea:84:5d:ae:
0c:41:b4:d1:7c:73:54:77:6e:f8:2d:93:51:a3:e4:
35:7c:47:fe:39:50:44:3c:72:ad:c3:91:d7:20:bf:
81:9b:33:eb:bc:aa:b0:ab:03:92:d6:d7:de:d0:4a:
2d:68:0a:cf:58:e0:92:2d:88:aa:f7:66:e1:96:d8:
9d:27:e3:fa:ec:ab:64:b9:f0:2d:e6:f2:a1:e3:f9:
88:8c:46:c5:ed:a9:2f:66:07:71:9f:3a:92:f2:18:
a9:f2:5f:82:6d:af:9c:2c:79:1a:7f:17:f3:cc:7d:
c4:be:f8:69:93:56:9a:3d:9d:bc:7b:18:2c:da:6a:
ff:16:9a:35:53:28:b5:a5:de:20:4d:92:a4:7c:0f:
b9:ad:b3:a0:1f:ac:2b:64:6e:9e:31:4b:e1:43:9c:
09:41:f7:5f:b5:bf:3e:7d:49:9f:55:9b:5c:ec:8a:
86:07:5d:cb:4b:7f:e5:f0:5b:4e:5e:e8:aa:f3:5b:
11:c6:78:c1:05:ca:c1:80:ea:ad:38:21:ee:6d:79:
c4:29:80:fd:46:3f:4c:45:cf:f9:6b:ab:b7:a7:50:
b5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:45:06:0B:99:74:7C:B6:AA:22:6C:F4:F4:C4:BE:D0:C8:99:32:71
X509v3 Authority Key Identifier:
keyid:72:C4:36:BE:92:AE:0A:DC:B3:14:EB:C1:AC:E3:19:FF:77:BD:A3:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JGZ/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JGZ/m0UGC5l0fLaqImz09MS-0MiZMnE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.94.31.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:8c:70:25:15:b8:a4:54:68:b2:f7:b6:fb:fd:98:1b:81:05:
1a:1e:6d:48:dc:9a:2c:a1:23:be:8a:c0:3a:08:8e:29:8b:54:
73:4a:61:ef:0b:ad:5c:02:ed:df:52:66:0e:1f:8f:ca:75:b1:
2f:6c:d0:56:57:0a:06:71:73:25:4e:3a:93:ee:de:a5:c3:f3:
f7:45:ea:42:8d:fc:fa:a7:99:5e:8b:6c:6f:27:f8:b0:01:d8:
76:a8:89:f9:11:e8:1d:ad:50:38:37:4d:6b:26:b8:ff:98:e3:
6f:95:73:49:40:9b:de:1f:d2:a8:c1:cb:b2:f0:4a:20:e0:6a:
a1:6a:37:eb:15:6a:3a:5c:51:80:0f:b8:a3:e0:c2:20:c6:a4:
85:3d:0b:76:2b:68:b0:63:5e:d8:6e:6a:e8:86:08:ad:a3:7c:
d8:5a:eb:4c:aa:3e:5b:d9:b9:60:aa:34:70:c1:cf:ae:14:05:
78:be:91:70:79:8d:7b:1c:33:39:6d:28:1f:bb:5b:cc:19:eb:
45:f9:be:0a:c2:38:05:6c:fd:93:ca:13:64:f5:4d:c4:6d:ef:
8e:95:dc:58:76:95:72:43:4f:e5:a0:12:a2:cd:66:d3:17:45:
e7:fb:af:b8:0c:6c:f8:66:5d:dc:1f:cf:ba:9e:71:c6:bc:f6:
7f:ee:de:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 17:53:20 2025 by rpki-client