Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CLARK/7V18K82Bwwod6v_l9_P3eZVztiM.roa
File: 7V18K82Bwwod6v_l9_P3eZVztiM.roa (raw, json)
Hash identifier: XuJ62ku496UJ92XBfi8/uWf2RPU+MPp1pmnsvYB3+Rs=
Subject key identifier: ED:5D:7C:2B:CD:81:C3:0A:1D:EA:FF:E5:F7:F3:F7:79:95:73:B6:23
Certificate issuer: /CN=74AF0402FEF56C34A192D1D2185E6FB546AA702C
Certificate serial: 016A
Authority key identifier: 74:AF:04:02:FE:F5:6C:34:A1:92:D1:D2:18:5E:6F:B5:46:AA:70:2C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/dK8EAv71bDShktHSGF5vtUaqcCw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CLARK/7V18K82Bwwod6v_l9_P3eZVztiM.roa
Signing time: Mon 26 Aug 2024 05:11:31 +0000
ROA not before: Mon 26 Aug 2024 05:11:31 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 63910
IP address blocks: 103.130.236.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:22:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 362 (0x16a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74AF0402FEF56C34A192D1D2185E6FB546AA702C
Validity
Not Before: Aug 26 05:11:31 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=ED5D7C2BCD81C30A1DEAFFE5F7F3F7799573B623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ce:5b:e7:04:ba:bf:d2:45:e1:5a:2f:21:3f:
88:c5:11:dd:67:8b:00:79:13:c7:3d:8d:0c:c8:e7:
f1:00:cb:a8:14:ea:c4:4f:73:4a:71:0c:48:81:8e:
c1:e2:36:92:ef:32:6a:bc:cb:45:04:82:2e:5f:4d:
52:89:07:d8:ba:a0:3e:4c:a4:93:c3:54:9c:bc:4b:
58:80:1c:16:3d:47:f1:4c:92:df:66:e8:7c:55:fa:
3f:84:1b:b3:2a:2c:09:5b:71:31:59:32:9d:b9:7b:
06:ad:52:d3:db:1c:6f:54:31:91:43:e5:50:98:a6:
fe:fd:16:3a:19:85:c8:11:c3:2a:34:42:5d:a4:a5:
88:d7:d8:55:cf:d9:6e:0e:af:48:61:6d:8e:22:44:
00:7d:15:d8:e2:5c:53:11:21:0b:a6:94:79:fc:a6:
38:ff:ed:f3:c6:d0:8b:93:09:54:4f:a3:61:b0:1d:
f9:9c:df:c0:0b:c6:0f:a6:66:d3:8b:ab:85:ca:64:
62:a8:02:68:c8:6e:64:43:1d:78:b0:df:da:7c:52:
8f:9e:f3:9c:f3:88:cf:03:92:2c:57:bc:5a:4a:ca:
a5:06:99:ff:c4:bd:ce:94:48:67:cc:42:02:2c:f0:
d8:e1:49:3a:84:0e:4f:ea:b2:43:c7:1a:b2:79:a1:
65:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:5D:7C:2B:CD:81:C3:0A:1D:EA:FF:E5:F7:F3:F7:79:95:73:B6:23
X509v3 Authority Key Identifier:
keyid:74:AF:04:02:FE:F5:6C:34:A1:92:D1:D2:18:5E:6F:B5:46:AA:70:2C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLARK/dK8EAv71bDShktHSGF5vtUaqcCw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/dK8EAv71bDShktHSGF5vtUaqcCw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLARK/7V18K82Bwwod6v_l9_P3eZVztiM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.236.0/23
Signature Algorithm: sha256WithRSAEncryption
61:f2:8c:92:94:9e:97:bd:6a:b3:6e:0f:41:34:0f:3d:07:13:
e1:fa:37:e7:d2:3c:03:2f:70:61:53:06:77:f8:76:b0:ea:2a:
09:83:e2:0e:cf:9e:0f:0e:a2:23:9b:d2:18:5e:8f:ce:b6:48:
cf:9a:4b:62:0e:e8:a8:eb:a1:5d:6e:4c:d3:24:a2:a4:90:7d:
b0:94:8b:d7:26:45:74:ed:6d:b5:28:e7:43:fc:3c:df:c5:60:
73:23:a6:13:10:e1:c6:45:3b:f4:70:90:fb:62:61:f1:3c:c6:
30:14:d1:32:82:87:5b:a5:16:8f:83:6a:d5:04:bb:93:ea:c1:
81:7b:d9:51:80:54:e2:5f:0a:72:36:aa:f2:6b:c6:6f:89:63:
0f:c0:00:cb:5c:6d:44:74:08:10:b5:69:bd:1f:13:b8:75:d6:
01:12:8e:22:e1:08:29:5c:38:6d:9e:19:c3:66:d5:90:ba:30:
73:ea:29:1d:03:11:ea:02:f8:6c:fa:68:15:cb:da:97:d9:7f:
e7:b9:20:46:1d:fc:cd:bc:3a:b4:44:7c:b8:e4:e1:88:49:ad:
99:8f:a6:ca:e6:0d:b2:47:73:4c:79:25:72:a4:40:d3:1d:d7:
9c:98:f0:30:46:3c:7d:c9:cf:c2:1e:84:48:94:9f:d3:14:0b:
be:97:ae:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:52:57 2025 by rpki-client