Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CENTROID/JKW0KCrjDXxfG6-vHwvTqhThn0Q.roa
File: JKW0KCrjDXxfG6-vHwvTqhThn0Q.roa (raw, json)
Hash identifier: wtv67iAjWcS5Fib6QFNMPx3e/gGNJQ1slxP3U2XRVgg=
Subject key identifier: 24:A5:B4:28:2A:E3:0D:7C:5F:1B:AF:AF:1F:0B:D3:AA:14:E1:9F:44
Certificate issuer: /CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8
Certificate serial: 0BEB
Authority key identifier: 79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/JKW0KCrjDXxfG6-vHwvTqhThn0Q.roa
Signing time: Mon 26 Aug 2024 05:10:13 +0000
ROA not before: Mon 26 Aug 2024 05:10:13 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 135293
IP address blocks: 103.104.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3051 (0xbeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8
Validity
Not Before: Aug 26 05:10:13 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=24A5B4282AE30D7C5F1BAFAF1F0BD3AA14E19F44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:73:0a:4a:f3:fd:65:e3:51:2d:d3:3e:59:2d:
b9:8b:6a:97:df:07:3c:3d:e8:aa:c9:4a:f3:ba:e1:
a6:e0:83:20:4e:c0:89:7d:00:69:d6:8c:fa:cb:43:
aa:86:df:f0:89:a2:59:28:38:83:21:44:f5:0f:1d:
58:21:6d:49:37:e6:f9:38:0b:01:c7:b3:79:35:f8:
22:9c:2c:43:24:72:b5:dc:08:f2:42:3c:4f:81:e4:
e0:6c:be:13:3d:b8:f6:f1:20:e6:5e:f1:38:0a:67:
4a:06:0a:1f:9c:db:00:da:4e:05:29:3a:6e:f9:0f:
43:65:72:90:ac:23:ca:ae:39:69:71:4d:69:87:da:
27:d4:20:ff:e4:eb:42:a7:de:19:fd:fc:18:9f:14:
05:70:3d:9d:cb:ee:9e:b8:8c:7c:a6:eb:34:96:69:
e4:9b:3e:92:0b:84:d7:12:6a:e6:11:06:d2:c7:fd:
29:7e:6f:cc:7b:80:4e:9d:e1:12:f9:52:7d:26:5a:
98:95:47:0c:e9:4e:95:db:ef:97:7f:01:9e:c3:78:
fa:6e:53:d2:05:60:3b:99:15:db:fa:9c:a2:ae:32:
25:ed:c6:8a:9d:57:b7:91:14:54:12:86:d7:aa:87:
a2:b6:97:fd:57:03:16:1f:5a:93:70:ba:ea:ad:a7:
a6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A5:B4:28:2A:E3:0D:7C:5F:1B:AF:AF:1F:0B:D3:AA:14:E1:9F:44
X509v3 Authority Key Identifier:
keyid:79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/JKW0KCrjDXxfG6-vHwvTqhThn0Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.104.149.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:f3:7c:2c:40:42:bb:0a:00:81:df:4e:78:95:d2:33:95:c4:
35:f5:d9:fd:95:bd:22:67:66:97:42:6e:59:68:fd:65:12:c2:
98:06:12:17:26:1a:7d:3b:6d:1b:cb:2b:02:e4:53:d7:5c:53:
25:39:da:7c:1b:e8:53:0c:52:f6:54:53:bb:c8:e6:14:32:f0:
55:cc:a1:5b:25:40:08:83:41:d3:c1:59:be:b2:d3:24:7c:1f:
ba:d7:47:44:8e:96:f6:f4:15:dc:e8:c6:34:d0:1b:3a:37:56:
78:18:60:9f:b0:5e:63:10:f6:b6:2d:89:f7:2c:c5:9b:f2:ad:
5b:2e:2f:f0:77:f2:67:22:0f:09:f2:57:70:e9:09:4f:25:53:
95:3e:71:72:7a:b2:51:1f:a8:4f:27:35:c4:c3:41:47:bc:91:
77:ba:5b:c2:d5:0f:65:2c:e9:e1:bc:c5:54:6d:b0:a4:68:51:
3a:21:ef:fc:0f:50:7e:ed:e8:5e:78:d3:eb:a5:7d:87:05:3e:
dc:ff:ab:a1:6e:ca:00:5c:9e:36:52:83:ec:5d:08:c7:7f:fe:
0a:62:c6:af:7c:b2:eb:7a:42:f5:b2:fa:f5:50:6c:ec:30:29:
09:67:7b:57:ea:13:dd:b9:ea:df:bb:26:c6:d7:84:a4:f0:d4:
4b:fd:db:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 00:44:28 2025 by rpki-client