Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWT/pfXVBP4K8gRNYr9PMBkWnTL0G88.roa
File: pfXVBP4K8gRNYr9PMBkWnTL0G88.roa (raw, json)
Hash identifier: h4lTsUBEzGLJ9hwPsQ0y2+iDJ3MKMNq15HjQbhXVIRA=
Subject key identifier: A5:F5:D5:04:FE:0A:F2:04:4D:62:BF:4F:30:19:16:9D:32:F4:1B:CF
Certificate issuer: /CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059
Certificate serial: 0F14
Authority key identifier: D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/pfXVBP4K8gRNYr9PMBkWnTL0G88.roa
Signing time: Mon 26 Aug 2024 05:12:43 +0000
ROA not before: Mon 26 Aug 2024 05:12:43 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18424
IP address blocks: 103.136.60.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:30:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3860 (0xf14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059
Validity
Not Before: Aug 26 05:12:43 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A5F5D504FE0AF2044D62BF4F3019169D32F41BCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:13:23:32:96:42:93:5a:2b:4c:b0:1a:95:fd:
cb:ad:38:30:c9:de:b0:dd:9a:1d:20:50:19:22:ef:
d8:97:bb:6f:75:09:9e:03:84:36:00:33:49:50:fd:
c8:6e:2a:55:f6:92:4e:8d:32:0d:cb:29:31:b3:fd:
50:9f:33:4a:40:d2:ad:19:e0:b0:4a:8d:f2:2f:ce:
63:5a:3d:08:d4:70:19:ee:9b:c1:04:41:fb:86:ca:
a6:cd:25:9d:7b:ac:17:80:3d:b1:16:4a:58:22:f2:
4e:38:55:6a:05:3a:98:dc:4a:f5:b8:a5:b2:6a:e4:
84:c2:79:90:85:2a:e3:9c:5a:ad:1d:21:75:7b:38:
d6:81:4c:b1:14:31:e2:52:8b:ae:e9:f7:b4:55:f1:
45:0b:54:ea:14:5f:c5:49:09:d5:18:e7:65:97:50:
6f:b3:2c:b1:68:ca:79:ac:79:08:b1:3e:4c:85:e6:
97:a8:65:ce:26:dd:be:95:00:61:a6:b3:b2:56:03:
27:97:8e:e7:58:38:06:1b:01:1e:27:8a:7f:52:dc:
54:6d:e3:b9:09:fc:e2:4b:e1:44:e7:c5:7b:46:45:
66:84:9d:2a:d1:39:15:c6:fe:2a:4b:77:73:be:09:
0f:27:9a:1b:c6:21:9d:11:ee:cb:48:1e:59:4a:8d:
b0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F5:D5:04:FE:0A:F2:04:4D:62:BF:4F:30:19:16:9D:32:F4:1B:CF
X509v3 Authority Key Identifier:
keyid:D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/pfXVBP4K8gRNYr9PMBkWnTL0G88.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.136.60.0/23
Signature Algorithm: sha256WithRSAEncryption
98:24:c3:e0:1b:53:0c:61:3e:71:85:29:28:8c:80:a7:86:62:
13:96:9b:e9:6a:9a:7a:04:77:f8:cb:4b:34:bb:00:fe:c6:e8:
cf:94:03:81:6c:c1:43:b6:37:3d:b2:b9:52:e3:88:cc:3e:f0:
d7:f4:41:b6:83:72:65:ae:ba:7d:80:00:31:50:b5:e9:2a:aa:
5b:00:ba:cd:e5:10:f6:e5:b4:4c:8a:86:fa:54:9c:c0:f5:88:
3c:dd:1e:cb:67:9c:43:0c:d6:c3:f7:07:3b:c3:76:15:e3:8e:
b9:aa:fd:1e:40:b5:eb:06:7f:7b:f2:9a:e2:68:d9:bb:47:91:
1e:6a:d1:92:4d:6f:6f:13:f3:5f:0d:ef:c5:b3:0b:e7:f0:64:
72:77:4a:fe:9a:7e:72:6a:dc:41:59:0b:46:34:c1:17:ed:7c:
5b:2f:3c:0d:d8:58:62:65:67:d4:10:1d:f6:e8:6b:ac:8a:bb:
47:d6:e9:aa:f0:a7:4b:42:5b:27:b8:23:91:97:5e:9f:ae:bd:
7e:d9:40:54:b2:f2:f3:f6:59:b5:88:cb:5d:5b:3e:c9:a3:bc:
85:08:26:81:4f:82:89:2b:52:31:07:14:37:2f:57:a0:3a:8f:
f8:80:82:7f:03:9f:7e:7f:78:5b:70:36:92:3c:1d:a3:a3:93:
49:45:88:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:57:38 2025 by rpki-client