Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYVC/GeazUuf46mEyj3o2jIdggdIbDyw.roa
File: GeazUuf46mEyj3o2jIdggdIbDyw.roa (raw, json)
Hash identifier: iVUyyySqa7cgEiyqsrJ2+hhMyKjxyCWRMc1WZ4hE2YY=
Subject key identifier: 19:E6:B3:52:E7:F8:EA:61:32:8F:7A:36:8C:87:60:81:D2:1B:0F:2C
Certificate issuer: /CN=370F3943433AD963E299A9BE9239D0F3E37A082A
Certificate serial: 0261
Authority key identifier: 37:0F:39:43:43:3A:D9:63:E2:99:A9:BE:92:39:D0:F3:E3:7A:08:2A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Nw85Q0M62WPimam-kjnQ8-N6CCo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CYVC/GeazUuf46mEyj3o2jIdggdIbDyw.roa
Signing time: Mon 26 Aug 2024 05:12:09 +0000
ROA not before: Mon 26 Aug 2024 05:12:09 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 45102
IP address blocks: 103.183.154.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 609 (0x261)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370F3943433AD963E299A9BE9239D0F3E37A082A
Validity
Not Before: Aug 26 05:12:09 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=19E6B352E7F8EA61328F7A368C876081D21B0F2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:02:32:ea:fa:af:87:d9:b2:4b:7c:1a:56:0c:
09:3b:d2:8d:20:99:1c:4d:4b:cf:2e:57:cc:bb:9e:
4f:d8:20:48:2b:06:79:55:04:3f:7b:2c:8a:34:ec:
26:cd:0a:04:d0:61:1f:e0:d2:2a:75:df:9a:66:9e:
33:e4:cb:c2:9b:bc:3c:7f:7d:fd:0f:96:75:f3:c5:
ca:b7:35:15:97:cc:14:3c:10:a3:c7:c8:00:9c:10:
20:4a:1b:c1:d9:16:63:a7:bc:d0:23:99:ab:77:b5:
53:31:ca:87:11:75:e5:66:a1:8c:9a:f5:d9:f6:6c:
46:b7:d7:e2:65:02:81:2c:0f:a0:20:18:72:53:88:
61:1c:87:98:5f:17:fc:1c:ee:cc:a0:93:33:db:6a:
d5:85:d4:e8:27:bc:93:89:24:fa:04:df:00:01:2f:
36:28:76:43:4b:44:52:74:4c:2d:fa:ae:be:1d:cc:
21:e2:5a:f9:69:3e:6b:ce:94:d7:b9:0a:72:dd:8e:
1f:b5:11:f2:4a:f4:8e:2c:c2:67:c7:f3:21:90:b8:
c0:e9:25:fd:a2:a5:24:f1:ef:22:60:d2:a7:4d:a9:
1d:8b:fe:19:62:45:17:f9:8e:4f:08:06:cf:7a:3c:
c1:6d:37:ee:50:c1:de:28:ae:c2:ff:70:21:3b:3d:
aa:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E6:B3:52:E7:F8:EA:61:32:8F:7A:36:8C:87:60:81:D2:1B:0F:2C
X509v3 Authority Key Identifier:
keyid:37:0F:39:43:43:3A:D9:63:E2:99:A9:BE:92:39:D0:F3:E3:7A:08:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYVC/Nw85Q0M62WPimam-kjnQ8-N6CCo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Nw85Q0M62WPimam-kjnQ8-N6CCo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYVC/GeazUuf46mEyj3o2jIdggdIbDyw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.183.154.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:11:d9:52:15:b9:e5:b1:f0:75:e0:46:e1:52:8e:3a:0a:89:
bc:2c:d3:b4:36:19:7d:a4:9c:25:a7:30:b0:5b:df:32:59:b3:
7c:31:04:49:68:cd:e1:2d:b2:3d:0f:f5:d0:92:cb:31:ab:c3:
50:35:d8:58:93:6b:83:d6:80:97:0a:3d:05:be:0e:60:3e:13:
bf:e1:32:23:db:e4:bb:38:36:5b:8c:d0:59:48:7c:82:d0:53:
f4:7f:de:0a:f3:5e:a7:e1:fe:3f:aa:fe:87:81:70:1d:a4:43:
00:ee:2c:0e:db:c5:5a:75:a9:4e:06:4b:7d:a3:c3:ef:ed:df:
cf:49:48:bf:2f:9a:c4:14:20:38:6b:13:26:af:4c:3f:43:2e:
1b:99:13:46:b8:e0:67:ff:16:a3:99:1d:ae:f7:a3:ee:0b:95:
01:c1:18:f7:29:75:95:60:de:74:fb:c2:ed:99:a7:63:14:46:
52:3e:89:90:d9:c3:b7:b0:f3:03:b5:66:2d:53:0e:4b:19:bd:
48:3e:b6:89:5a:66:20:07:a5:51:5b:67:fa:56:e8:30:94:15:
36:54:ce:c9:4b:3c:0c:7b:42:8d:da:97:25:d1:aa:13:35:3a:
26:fc:a7:10:9f:b1:59:ea:4e:ef:20:f7:ab:cc:57:05:82:59:
b6:71:04:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 12:02:49 2025 by rpki-client