Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CSPTEK/Bv118Itz2fiwTLfZOgJn23OvC9g.roa
File: Bv118Itz2fiwTLfZOgJn23OvC9g.roa (raw, json)
Hash identifier: s0MmSQcxnMyKfmejGG4xL/lTS28Dr1/SQ3uwtwdZ6AI=
Subject key identifier: 06:FD:75:F0:8B:73:D9:F8:B0:4C:B7:D9:3A:02:67:DB:73:AF:0B:D8
Certificate issuer: /CN=A082F5D992E6BC25E08997538616180702E857C3
Certificate serial: 03A6
Authority key identifier: A0:82:F5:D9:92:E6:BC:25:E0:89:97:53:86:16:18:07:02:E8:57:C3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/oIL12ZLmvCXgiZdThhYYBwLoV8M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CSPTEK/Bv118Itz2fiwTLfZOgJn23OvC9g.roa
Signing time: Mon 26 Aug 2024 05:11:51 +0000
ROA not before: Mon 26 Aug 2024 05:11:51 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38839
IP address blocks: 103.159.176.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 934 (0x3a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A082F5D992E6BC25E08997538616180702E857C3
Validity
Not Before: Aug 26 05:11:51 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=06FD75F08B73D9F8B04CB7D93A0267DB73AF0BD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:9b:c6:cb:32:02:27:03:37:86:c4:bb:e8:d0:
a6:a2:7c:9e:6e:3c:5a:fa:c9:c5:b5:46:2c:7b:a7:
a2:d4:00:b6:67:7c:17:e2:bf:1e:35:c8:e1:8e:52:
61:31:d5:f4:bd:23:09:c0:c6:7e:46:f5:bd:2a:2a:
64:32:5e:40:ac:4f:17:2e:cd:47:b3:d8:8f:ce:38:
fe:0c:0c:d8:02:fb:fe:77:6a:16:e4:62:af:0e:3f:
a2:99:79:36:4c:bb:39:86:57:bd:a2:50:86:7b:ad:
8b:a3:f7:98:9a:a2:11:2c:c6:1d:90:e5:74:52:47:
17:d1:68:fa:2d:61:86:07:56:2a:6e:c1:5d:4e:e0:
fd:c1:ee:ce:10:fd:b4:98:65:9f:84:47:21:45:24:
f9:1b:7d:58:24:c6:62:30:48:7e:a9:29:90:c4:80:
9c:16:03:72:80:0b:d7:4d:cd:df:fd:f6:9a:04:b9:
2f:a3:34:d5:57:32:df:9e:72:43:3e:26:b4:23:ae:
52:80:81:cd:f1:02:a5:b7:54:72:42:df:c5:49:c2:
06:c4:cf:0f:19:eb:8c:79:d8:70:ce:43:f7:f0:2f:
a1:80:9b:9a:10:35:00:eb:9f:b3:7f:89:9a:85:1a:
55:8a:e9:b8:72:34:5f:9c:ce:c1:82:6e:66:63:d8:
5a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FD:75:F0:8B:73:D9:F8:B0:4C:B7:D9:3A:02:67:DB:73:AF:0B:D8
X509v3 Authority Key Identifier:
keyid:A0:82:F5:D9:92:E6:BC:25:E0:89:97:53:86:16:18:07:02:E8:57:C3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CSPTEK/oIL12ZLmvCXgiZdThhYYBwLoV8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/oIL12ZLmvCXgiZdThhYYBwLoV8M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CSPTEK/Bv118Itz2fiwTLfZOgJn23OvC9g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.159.176.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:45:83:e8:8c:66:30:fb:e8:dc:04:3e:74:8b:f5:70:f9:af:
a6:f3:c5:e2:b1:41:29:41:76:b7:19:e1:be:a6:d3:d0:fd:a1:
6f:52:f9:3a:43:04:05:80:e5:d3:e7:cc:28:65:1d:bb:45:a7:
69:62:1c:78:db:fa:dc:69:d8:d2:e1:4e:08:19:4c:18:61:3d:
2a:7d:32:65:68:90:02:5d:70:79:d3:d0:77:75:5e:75:0f:ef:
d6:c8:9d:84:1e:c0:d7:7d:4b:4e:7e:d3:c2:59:b3:4a:59:fa:
7e:d7:f7:76:22:0f:f0:3d:c6:b1:05:d4:ee:a7:31:08:56:ce:
84:ce:ba:1b:08:1b:4f:33:b3:43:b1:be:6d:61:77:e1:35:45:
df:e8:ce:41:99:db:54:75:15:40:c4:a5:65:64:88:6e:8a:73:
b7:5e:e4:7b:60:5e:02:f3:2f:83:14:e5:e0:63:0d:7b:8d:cc:
c5:81:25:dd:80:5b:c1:55:e1:ec:58:eb:d8:87:48:4c:c5:89:
24:60:6a:4f:cf:06:1b:b5:b7:45:88:1a:18:f2:2d:67:3d:54:
90:10:2a:27:4d:0f:69:29:71:80:48:22:04:cc:76:fd:34:c5:
dc:51:37:a7:37:b3:14:9d:fd:be:79:a4:cd:f0:fd:29:73:80:
91:d6:54:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:47:31 2025 by rpki-client