Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/FAs3a4by-f09HWQAAgkuF-tcJjU.roa
File: FAs3a4by-f09HWQAAgkuF-tcJjU.roa (raw, json)
Hash identifier: 4ZeBG6PIXlivhqKDhlfa0oKP7pTdSabmGGNZd4C+VEk=
Subject key identifier: 14:0B:37:6B:86:F2:F9:FD:3D:1D:64:00:02:09:2E:17:EB:5C:26:35
Certificate issuer: /CN=57A994BD60555145CB6452DC6A980FC851136BDA
Certificate serial: 0552
Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/FAs3a4by-f09HWQAAgkuF-tcJjU.roa
Signing time: Mon 26 Aug 2024 05:09:29 +0000
ROA not before: Mon 26 Aug 2024 05:09:29 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 7480
IP address blocks: 103.156.184.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1362 (0x552)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA
Validity
Not Before: Aug 26 05:09:29 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=140B376B86F2F9FD3D1D640002092E17EB5C2635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ee:e6:63:5e:80:99:d3:14:01:79:60:05:49:
c5:c7:22:15:7c:53:30:95:12:01:21:7e:7e:c3:b0:
e3:02:a5:e0:dd:4d:7b:1e:b2:21:cf:ad:bd:81:60:
03:a6:b4:04:23:9e:12:99:90:70:78:1c:06:5f:54:
3f:a7:f9:8a:91:8d:31:a0:98:f3:f2:69:f8:e2:bd:
e0:09:11:8a:8c:82:28:6e:4d:f5:cb:1f:21:97:fe:
25:ce:51:ae:d6:bc:d8:2a:ac:07:e6:ec:41:84:c1:
81:3c:75:67:37:12:59:c7:02:07:f9:b9:65:63:72:
35:38:39:8d:6a:ff:5c:12:17:7f:54:ee:1c:60:4f:
27:d5:b8:88:5a:85:6b:2b:6f:0f:7d:f9:10:a7:5c:
1b:1d:65:8b:c2:e5:31:59:7b:50:6d:6b:c5:4f:dd:
81:04:91:f2:69:59:85:3e:4d:40:79:c1:7e:84:b1:
10:29:fa:03:b8:75:c0:5f:93:30:69:03:a5:8e:01:
d4:0c:cc:d4:b4:55:1b:d2:45:62:a3:68:4a:cf:41:
fc:06:40:d6:25:0f:de:b2:ed:86:68:07:77:9b:8f:
a0:69:87:1f:56:57:61:8e:5d:9d:c5:e9:df:61:c0:
10:69:db:bf:34:36:6b:08:e9:d4:2f:39:02:ee:d6:
da:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0B:37:6B:86:F2:F9:FD:3D:1D:64:00:02:09:2E:17:EB:5C:26:35
X509v3 Authority Key Identifier:
keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/FAs3a4by-f09HWQAAgkuF-tcJjU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.156.184.0/23
Signature Algorithm: sha256WithRSAEncryption
39:e0:3c:65:02:5c:ee:eb:dd:47:ee:3b:3e:35:a3:22:f7:f5:
9c:cc:48:95:84:4b:b0:27:ab:fc:11:33:81:18:3d:f0:eb:e0:
d8:c6:f5:e3:40:6a:63:75:77:18:8b:74:de:b8:98:4f:91:c0:
63:dd:57:66:99:85:0e:ad:83:86:9c:a0:71:46:81:6c:2e:6d:
93:a0:78:5b:8a:3d:04:d0:40:0c:39:8c:8e:1d:08:74:e4:12:
b4:81:36:96:f0:41:d6:4d:50:a7:45:48:71:17:17:a3:91:e6:
f6:c0:ea:f2:5a:90:e4:ec:7c:c1:03:73:5c:40:5b:ba:87:f3:
16:dd:e9:36:5c:48:14:b3:61:2c:fc:ea:fa:47:84:d3:0a:db:
20:3f:2e:68:25:b7:a1:77:ec:70:3f:cf:48:a5:47:c1:09:78:
95:dc:fa:f4:82:ac:ca:06:df:fc:b7:24:06:66:09:1c:35:05:
bf:ad:c7:83:98:02:85:77:83:a4:3d:b6:64:14:52:32:f4:39:
5f:25:9d:fb:f9:cf:13:34:52:1a:f1:99:28:a2:8f:34:f8:1c:
8b:f9:b6:26:d9:b0:cd:84:f4:01:93:74:18:fc:de:ad:22:74:
42:ab:92:6c:72:7d:41:8b:03:76:59:be:ce:f4:a2:5a:96:c7:
15:8d:aa:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:30:45 2025 by rpki-client