Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWT/XwfhjI3v9YkOhZb8pJL7JVPlvjQ.roa
File: XwfhjI3v9YkOhZb8pJL7JVPlvjQ.roa (raw, json)
Hash identifier: 2uI0iXM25+6oaROTK5IJQ2YWm1rdgrMz4A7awXikG4Q=
Subject key identifier: 5F:07:E1:8C:8D:EF:F5:89:0E:85:96:FC:A4:92:FB:25:53:E5:BE:34
Certificate issuer: /CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059
Certificate serial: 0F0F
Authority key identifier: D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/XwfhjI3v9YkOhZb8pJL7JVPlvjQ.roa
Signing time: Mon 26 Aug 2024 05:12:42 +0000
ROA not before: Mon 26 Aug 2024 05:12:42 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24168
IP address blocks: 103.136.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3855 (0xf0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059
Validity
Not Before: Aug 26 05:12:42 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5F07E18C8DEFF5890E8596FCA492FB2553E5BE34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c9:02:33:18:43:eb:a5:69:8e:c9:1a:12:38:
df:ca:99:f9:d2:13:b5:82:96:5e:7d:40:a2:7c:14:
32:6e:42:89:42:3f:53:26:86:de:78:be:14:7f:4a:
82:bc:37:0a:2a:c9:a6:83:5e:71:68:e3:bf:15:d3:
8b:f6:eb:ec:7e:f9:9f:4e:5f:d7:f9:0c:33:9b:ec:
5e:06:10:9e:7d:16:d5:92:07:6e:1c:df:59:fe:23:
cf:25:87:22:76:cf:30:7f:53:63:07:04:88:89:7f:
ea:7a:1b:72:9d:e5:2c:c8:6a:8d:fe:28:8c:01:4c:
d1:cd:91:03:da:b9:7c:f8:3e:be:22:2d:d1:fc:0b:
86:b7:fb:d4:a3:3e:fb:13:17:e8:71:ce:90:ed:ee:
bd:ef:97:49:5f:e7:e4:72:f8:b2:6a:ad:3d:39:33:
10:60:78:39:bd:05:6f:88:fa:9b:51:42:40:60:59:
43:be:e3:11:80:be:ac:27:6e:05:9c:bc:96:0f:a8:
99:50:99:ec:78:da:da:d9:4e:e7:b7:68:a7:0e:e6:
9b:1e:68:bf:56:8c:89:24:bd:41:2e:72:5c:82:ba:
c5:b3:56:9a:4f:a0:5e:fc:d8:00:0f:a7:e3:17:b0:
eb:37:0c:94:ec:43:5b:7f:1a:b4:83:06:de:a7:fc:
8e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:07:E1:8C:8D:EF:F5:89:0E:85:96:FC:A4:92:FB:25:53:E5:BE:34
X509v3 Authority Key Identifier:
keyid:D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/XwfhjI3v9YkOhZb8pJL7JVPlvjQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.136.61.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:fc:ea:a5:e6:35:21:42:d3:7b:04:a4:b3:b6:4b:e3:ba:97:
fd:3d:a7:3c:b7:3b:91:17:a8:74:7f:48:f3:0f:d9:a2:62:ac:
e1:3c:5c:39:fc:be:61:10:ed:bc:5a:a9:03:4a:73:8b:51:e9:
8c:8a:34:41:3c:79:fa:84:77:67:8e:8e:7c:68:dc:65:48:f8:
38:4b:6e:85:24:16:0c:81:fd:87:00:4e:85:fd:9f:c6:51:f9:
4b:c5:cf:33:c4:ad:e6:4d:8a:a9:a6:5d:7d:51:bc:40:5c:e4:
71:65:9d:64:1a:19:4d:a3:22:8b:f1:1b:ff:9d:64:38:a8:ac:
7a:7f:59:09:f1:88:a5:75:6a:ee:c5:55:e5:af:49:f4:fc:d0:
95:f3:93:89:92:96:70:c9:94:4c:d7:8d:25:3a:42:62:6f:64:
e1:16:67:2f:4a:7e:21:c7:dd:cd:6b:f8:4e:6b:4f:b5:cb:0b:
ed:34:26:59:66:25:87:93:2f:b1:3e:ce:c5:98:fa:3e:c8:fa:
a3:fa:36:30:de:4a:74:bc:46:aa:2f:6a:f0:63:0e:d4:7a:ac:
2b:14:94:4d:5d:c6:31:f3:0b:c1:fe:60:1b:de:ee:ea:fd:94:
70:f1:c2:a3:fd:dd:bb:f6:b3:66:19:de:33:09:dc:36:62:c6:
7d:08:d5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:57:38 2025 by rpki-client