Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWT/0pltuwELCQVoyVgOBpKP7jQOqMo.roa
File: 0pltuwELCQVoyVgOBpKP7jQOqMo.roa (raw, json)
Hash identifier: Mut5jXTVO9d+NDJ9rN1hrP/VOcV5qkqX3IavJtEJbsk=
Subject key identifier: D2:99:6D:BB:01:0B:09:05:68:C9:58:0E:06:92:8F:EE:34:0E:A8:CA
Certificate issuer: /CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059
Certificate serial: 0F12
Authority key identifier: D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/0pltuwELCQVoyVgOBpKP7jQOqMo.roa
Signing time: Mon 26 Aug 2024 05:12:43 +0000
ROA not before: Mon 26 Aug 2024 05:12:43 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131641
IP address blocks: 103.136.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:30:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3858 (0xf12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059
Validity
Not Before: Aug 26 05:12:43 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D2996DBB010B090568C9580E06928FEE340EA8CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f7:d9:d7:86:bd:9e:db:9f:71:31:bc:33:af:
7d:eb:47:0f:f1:2b:1c:0f:17:ca:03:fd:3f:f1:53:
9b:c3:11:e9:7f:47:f4:93:f9:d3:74:8d:52:22:95:
bd:32:a6:9b:1a:b3:1e:7c:ca:55:e5:72:76:bc:72:
fa:8a:f5:3a:74:cc:f2:07:4e:fb:ea:f7:c1:e7:97:
e2:d7:cd:8d:c5:80:26:90:df:cd:24:7d:5d:05:ac:
0d:43:42:d2:1c:cd:6f:00:2c:ca:db:86:05:b7:08:
b8:46:76:d9:3a:49:55:6a:97:50:f3:76:bc:7f:92:
b8:e0:e9:17:16:24:24:86:93:24:29:19:1e:8d:ee:
58:6a:68:b9:36:68:5e:20:cc:ac:58:4e:ae:aa:4c:
65:a2:d7:f8:8b:76:db:23:a9:d4:67:92:14:57:5f:
15:cb:78:8f:63:4b:16:ae:f8:af:b4:99:06:70:e6:
48:ba:fd:84:ea:d3:f4:6e:dd:f3:9d:a2:9b:d3:97:
3b:22:52:f5:f6:e5:34:42:ce:fc:81:3c:43:cb:3e:
ea:20:94:e4:3b:2c:ae:5d:9d:e3:1e:be:86:d3:a8:
b1:e0:e6:21:98:dc:91:91:e1:3a:ef:6c:2d:04:0b:
99:13:a2:41:f9:e8:b6:6d:25:5b:10:cd:78:68:7c:
e7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:99:6D:BB:01:0B:09:05:68:C9:58:0E:06:92:8F:EE:34:0E:A8:CA
X509v3 Authority Key Identifier:
keyid:D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/0pltuwELCQVoyVgOBpKP7jQOqMo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.136.61.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:f2:7f:0c:47:19:1c:fd:13:16:de:61:b3:5d:aa:ff:16:97:
63:37:11:2f:0a:ad:9a:f4:5a:81:37:db:9d:a7:78:09:b6:0d:
5e:ae:c8:48:b1:fc:af:e5:5e:99:06:66:a5:a1:1c:d1:49:b5:
9f:af:06:38:1e:82:d8:70:50:c0:2b:e3:6a:0d:42:18:13:e5:
98:49:26:eb:ab:61:82:8f:a1:fc:7f:62:22:03:e6:a3:1d:0b:
ae:4f:69:b8:a6:92:47:18:cb:cf:2a:97:ec:29:47:fa:5b:08:
43:94:12:ca:ce:d0:76:43:b7:73:8f:d7:2f:e5:a4:89:cd:90:
52:f6:d5:62:be:2a:4d:4c:1e:41:45:2f:8a:aa:dc:4a:fe:12:
ed:74:48:ee:d8:d2:c6:fe:b1:d6:15:34:67:89:5b:1e:e5:46:
4a:cd:46:42:ed:ea:08:54:6b:6d:ab:8e:f6:38:3f:de:4a:ec:
ea:77:70:cf:26:7b:04:27:d5:75:c8:a7:7a:93:cd:31:4a:b4:
4c:7d:31:2e:60:e3:5a:dc:05:89:4a:f1:32:39:77:32:9b:23:
15:76:d8:98:12:8d:6c:3c:fe:db:eb:17:e7:d8:5d:37:90:9b:
c4:7b:8b:77:9a:4e:26:65:62:0b:8b:55:72:43:da:0b:f1:56:
d2:cb:ed:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:44:41 2025 by rpki-client