Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CLARK/0RoJn1kOpPb74NwfG3wag4PeNX0.roa
File: 0RoJn1kOpPb74NwfG3wag4PeNX0.roa (raw, json)
Hash identifier: so4/Wr/D5vu/sU2bUC82n0aVYN4OSwos2WYCL67AxfQ=
Subject key identifier: D1:1A:09:9F:59:0E:A4:F6:FB:E0:DC:1F:1B:7C:1A:83:83:DE:35:7D
Certificate issuer: /CN=74AF0402FEF56C34A192D1D2185E6FB546AA702C
Certificate serial: 0169
Authority key identifier: 74:AF:04:02:FE:F5:6C:34:A1:92:D1:D2:18:5E:6F:B5:46:AA:70:2C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/dK8EAv71bDShktHSGF5vtUaqcCw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CLARK/0RoJn1kOpPb74NwfG3wag4PeNX0.roa
Signing time: Mon 26 Aug 2024 05:11:31 +0000
ROA not before: Mon 26 Aug 2024 05:11:31 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 63910
IP address blocks: 103.130.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:22:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361 (0x169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74AF0402FEF56C34A192D1D2185E6FB546AA702C
Validity
Not Before: Aug 26 05:11:31 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D11A099F590EA4F6FBE0DC1F1B7C1A8383DE357D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a9:cb:ab:c2:f4:f7:f4:5c:04:e2:27:24:66:
83:77:67:b5:1d:5d:9f:23:fe:c9:d8:cc:02:22:49:
4b:fd:57:01:1d:7d:50:67:46:41:5e:8f:22:c4:31:
46:7c:fa:6d:63:54:cc:16:df:fa:3e:c4:00:93:a4:
d8:99:63:69:ef:e2:10:55:65:94:17:c4:08:d6:e4:
39:5a:06:76:ee:20:28:74:89:c0:64:94:9f:35:55:
96:f7:87:9e:01:25:1b:ab:14:75:79:1a:e4:e8:bf:
be:94:b0:06:c3:4d:34:68:9d:5e:2b:20:f3:29:27:
73:11:08:52:99:92:a4:bf:fe:40:8f:09:4c:d1:75:
42:97:07:42:9b:c1:8d:a6:c8:c1:a4:0f:ca:3f:7c:
35:17:dd:3b:df:40:77:f2:3d:5f:6b:a7:d2:28:41:
66:7f:f9:64:00:10:18:73:11:25:26:8d:57:54:98:
aa:81:cf:cf:24:22:55:76:b0:1b:14:7f:e6:cb:70:
64:c8:6a:ba:9e:e8:90:90:3b:b5:25:23:84:5b:ee:
12:25:a7:81:11:4e:9c:4e:b8:97:a5:ff:0b:a1:66:
e6:ae:7f:fb:eb:0e:20:12:79:b2:5e:97:58:9e:a6:
3c:87:d5:e8:14:12:16:cb:01:2c:95:55:93:00:66:
dc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1A:09:9F:59:0E:A4:F6:FB:E0:DC:1F:1B:7C:1A:83:83:DE:35:7D
X509v3 Authority Key Identifier:
keyid:74:AF:04:02:FE:F5:6C:34:A1:92:D1:D2:18:5E:6F:B5:46:AA:70:2C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLARK/dK8EAv71bDShktHSGF5vtUaqcCw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/dK8EAv71bDShktHSGF5vtUaqcCw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLARK/0RoJn1kOpPb74NwfG3wag4PeNX0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.237.0/24
Signature Algorithm: sha256WithRSAEncryption
97:80:22:2b:3a:8a:86:05:34:e0:5c:39:55:9c:9b:21:cd:20:
c3:8e:5b:d0:7b:b8:f3:e2:1b:ce:34:10:f7:38:ea:80:10:6e:
73:03:6d:3e:1e:63:d8:f0:00:28:4b:e4:0a:57:b7:07:e9:3a:
36:72:71:89:cc:c1:0b:0f:50:48:c3:f7:e8:32:c6:4e:d8:ea:
7d:d0:20:0d:d2:8f:f0:e2:24:2a:68:8e:c1:a7:f3:10:3c:d8:
34:f5:f8:6c:a4:5a:58:ef:d5:96:14:84:da:c9:d6:45:ae:9c:
ac:7d:83:8e:1b:6a:55:ca:cc:59:28:58:e7:83:97:0b:7b:ed:
38:cf:b9:05:42:84:2c:3e:a7:16:25:de:22:04:ea:13:45:84:
b4:79:8a:8a:5f:d8:cf:12:7a:c2:db:ef:c5:c3:bc:9a:bd:f2:
68:0e:13:26:fb:31:e3:df:d8:5a:c0:b3:8d:d9:10:26:1c:72:
f7:e7:20:c2:0a:49:f2:a9:2c:da:b7:c8:19:60:23:5e:a1:60:
20:7f:59:94:33:d7:c5:5d:b4:84:3a:50:07:33:4c:35:fb:9e:
6a:7a:88:87:57:a3:09:4d:0c:15:f4:ac:9b:c9:63:31:90:c8:
6b:42:c7:ff:af:b5:6a:a4:06:bc:60:2f:6a:a9:e3:8d:5c:fb:
6d:51:44:c6
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzRB
RjA0MDJGRUY1NkMzNEExOTJEMUQyMTg1RTZGQjU0NkFBNzAyQzAeFw0yNDA4MjYw
NTExMzFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQxMUEwOTlGNTkwRUE0
RjZGQkUwREMxRjFCN0MxQTgzODNERTM1N0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXqcurwvT39FwE4ickZoN3Z7UdXZ8j/snYzAIiSUv9VwEdfVBn
RkFejyLEMUZ8+m1jVMwW3/o+xACTpNiZY2nv4hBVZZQXxAjW5DlaBnbuICh0icBk
lJ81VZb3h54BJRurFHV5GuTov76UsAbDTTRonV4rIPMpJ3MRCFKZkqS//kCPCUzR
dUKXB0KbwY2myMGkD8o/fDUX3TvfQHfyPV9rp9IoQWZ/+WQAEBhzESUmjVdUmKqB
z88kIlV2sBsUf+bLcGTIarqe6JCQO7UlI4Rb7hIlp4ERTpxOuJel/wuhZuauf/vr
DiASebJel1iepjyH1egUEhbLASyVVZMAZtyDAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQU0RoJn1kOpPb74NwfG3wag4PeNX0wHwYDVR0jBBgwFoAUdK8EAv71bDShktHS
GF5vtUaqcCwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0xBUksv
ZEs4RUF2NzFiRFNoa3RIU0dGNXZ0VWFxY0N3LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9kSzhFQXY3MWJEU2hrdEhTR0Y1dnRVYXFjQ3cuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DTEFSSy8wUm9KbjFrT3BQYjc0TndmRzN3
YWc0UGVOWDAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4Lt
MA0GCSqGSIb3DQEBCwUAA4IBAQCXgCIrOoqGBTTgXDlVnJshzSDDjlvQe7jz4hvO
NBD3OOqAEG5zA20+HmPY8AAoS+QKV7cH6To2cnGJzMELD1BIw/foMsZO2Op90CAN
0o/w4iQqaI7Bp/MQPNg09fhspFpY79WWFITaydZFrpysfYOOG2pVysxZKFjng5cL
e+04z7kFQoQsPqcWJd4iBOoTRYS0eYqKX9jPEnrC2+/Fw7yavfJoDhMm+zHj39ha
wLON2RAmHHL35yDCCknyqSzat8gZYCNeoWAgf1mUM9fFXbSEOlAHM0w1+55qeoiH
V6MJTQwV9KybyWMxkMhrQsf/r7VqpAa8YC9qqeONXPttUUTG
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:46:58 2025 by rpki-client