Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/GVnP93hAncO8m_cIlDkSTVnBU9Y.roa
File: GVnP93hAncO8m_cIlDkSTVnBU9Y.roa (raw, json)
Hash identifier: /dVca0D0SZASRt1OEYvdj/yOD7WqbnkuOTyiha/tg4w=
Subject key identifier: 19:59:CF:F7:78:40:9D:C3:BC:9B:F7:08:94:39:12:4D:59:C1:53:D6
Certificate issuer: /CN=57A994BD60555145CB6452DC6A980FC851136BDA
Certificate serial: 056D
Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/GVnP93hAncO8m_cIlDkSTVnBU9Y.roa
Signing time: Fri 13 Sep 2024 09:06:22 +0000
ROA not before: Fri 13 Sep 2024 09:06:22 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 945
IP address blocks: 103.156.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:57:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1389 (0x56d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA
Validity
Not Before: Sep 13 09:06:22 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=1959CFF778409DC3BC9BF7089439124D59C153D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:23:fe:2a:13:bb:dd:8c:85:ed:5c:2b:23:2c:
e1:a5:81:d1:ea:55:7b:28:42:46:5c:b8:3a:e4:6f:
46:41:d8:3a:ea:83:86:7c:2a:a5:03:c8:03:c0:93:
32:60:cd:ea:75:c8:4c:26:8a:21:34:db:60:a1:dc:
cc:eb:30:de:bf:dd:2a:83:da:73:39:fa:10:a6:e8:
cd:0c:29:60:f3:ce:6b:98:2a:9e:43:39:8c:98:c7:
00:00:22:82:12:17:8e:0b:13:ee:36:f9:a2:c6:64:
07:89:b8:1d:c0:79:89:ab:4d:d4:bf:1b:38:1e:5e:
c8:ec:51:e9:02:53:14:76:54:ed:f5:3f:f7:e2:db:
63:44:ee:cd:05:1d:ca:4a:38:ec:48:26:27:70:d9:
50:74:b2:41:99:90:24:0a:f2:ce:ff:98:62:3d:9f:
b7:29:a5:e9:a2:dd:52:47:06:d3:8f:ee:71:6c:23:
9e:eb:49:85:a6:bd:ac:55:f9:67:a4:de:0c:e1:ca:
2c:c2:68:79:48:c6:0c:5d:06:97:e8:47:2d:7e:24:
c6:a3:db:f5:f5:52:82:75:25:1d:d6:23:05:22:05:
9e:30:fe:d8:3d:1e:0a:a1:d9:dc:70:7f:e0:51:cc:
a8:51:0f:cc:dc:4b:5a:f2:09:a6:db:84:5d:be:af:
db:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:59:CF:F7:78:40:9D:C3:BC:9B:F7:08:94:39:12:4D:59:C1:53:D6
X509v3 Authority Key Identifier:
keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/GVnP93hAncO8m_cIlDkSTVnBU9Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.156.185.0/24
Signature Algorithm: sha256WithRSAEncryption
20:ee:49:46:14:f6:89:d2:fd:31:03:42:b1:e6:52:10:aa:b0:
91:33:39:08:c9:c8:2a:4b:fa:3f:6a:a7:3f:19:7f:f9:06:ef:
b6:77:fe:e9:ec:d6:5b:a7:20:37:f1:ed:db:be:ff:3a:fa:b5:
4f:26:53:9d:be:11:6f:74:2e:86:be:65:41:cb:d3:53:f6:71:
5a:da:f8:bd:f1:ec:7b:96:08:c0:48:99:b5:06:5a:f0:24:a7:
c4:ed:c9:f5:2a:b0:9d:e1:1c:c1:01:e0:71:7d:bb:34:c0:2c:
76:4d:f6:df:74:4e:3d:89:ed:23:35:2b:48:37:60:21:c4:59:
b6:7e:6a:51:b2:fa:66:36:ff:05:26:1f:63:6d:58:e4:48:2e:
07:0f:60:a6:03:f1:3e:80:3e:68:87:22:6c:2d:10:8b:7c:78:
ad:9f:0d:b8:ba:b2:51:42:90:e7:d7:af:d1:dd:46:11:bd:83:
95:b0:7d:77:3f:40:bd:2d:fa:04:61:63:ef:6f:fd:a2:df:e2:
53:c8:68:a5:6f:76:32:3d:22:30:49:fe:7c:55:5b:6f:ca:82:
9a:64:f3:b3:a4:50:09:7e:24:0d:37:34:82:a2:f0:e0:df:6f:
fe:6a:08:8f:a4:37:a2:01:ff:38:a7:84:95:1a:de:94:82:8b:
45:44:2d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:38:03 2025 by rpki-client