Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWT/rmbFsNuaESRs8w_rsSRZQS7QY0k.roa
File: rmbFsNuaESRs8w_rsSRZQS7QY0k.roa (raw, json)
Hash identifier: 4G8ephqng9TgsXmGYoGMc01JfAdzsZYCJzCS090a5lw=
Subject key identifier: AE:66:C5:B0:DB:9A:11:24:6C:F3:0F:EB:B1:24:59:41:2E:D0:63:49
Certificate issuer: /CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059
Certificate serial: 0F16
Authority key identifier: D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/rmbFsNuaESRs8w_rsSRZQS7QY0k.roa
Signing time: Mon 26 Aug 2024 05:12:44 +0000
ROA not before: Mon 26 Aug 2024 05:12:44 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131641
IP address blocks: 103.136.60.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:30:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3862 (0xf16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059
Validity
Not Before: Aug 26 05:12:44 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=AE66C5B0DB9A11246CF30FEBB12459412ED06349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5d:db:cb:90:59:1f:0e:70:9e:07:4c:bb:ba:
b0:b3:3c:39:3d:79:2f:bb:d7:43:48:7d:ae:a2:0b:
cf:78:a0:16:5c:3d:c7:04:25:5f:96:c4:41:ea:f9:
d7:b1:3f:a4:9d:2e:f2:07:7e:5f:0f:be:2f:41:92:
44:61:7c:01:11:7a:8e:b5:d9:28:c8:8b:4c:19:a3:
19:cf:80:5e:17:3c:e1:87:7a:04:80:77:fb:ce:4d:
73:99:4d:d8:2f:6e:50:b7:a2:e0:de:dc:a0:30:c8:
bb:62:4c:02:ee:b2:3f:48:31:2b:bf:5f:30:9d:8b:
ba:f9:8f:7a:ed:93:ac:3f:ef:41:a6:a1:a5:2b:6d:
8f:4b:61:1b:26:c7:12:5e:b0:a3:cd:c9:29:a6:00:
0e:f0:b7:30:5b:a5:d3:30:c9:8c:fa:43:22:6e:9c:
90:b2:88:c3:59:c2:02:3a:3a:05:a3:a2:36:00:fb:
e9:ae:52:ac:3c:27:fc:8e:69:0f:6e:76:99:a3:46:
67:08:9e:49:4f:8d:bd:36:24:c0:06:05:82:30:d8:
ea:e7:f2:d4:f7:72:34:61:8c:d2:07:b9:29:fb:6c:
9f:7a:aa:1e:11:31:e1:f4:49:b4:41:e6:ba:85:e3:
f2:9b:99:f1:79:f6:3c:d9:49:d9:d9:64:ad:f1:4c:
d9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:66:C5:B0:DB:9A:11:24:6C:F3:0F:EB:B1:24:59:41:2E:D0:63:49
X509v3 Authority Key Identifier:
keyid:D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/rmbFsNuaESRs8w_rsSRZQS7QY0k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.136.60.0/23
Signature Algorithm: sha256WithRSAEncryption
76:f9:fe:96:59:e6:58:e1:34:26:c1:30:26:08:0a:e2:d3:2f:
ac:cd:af:19:97:14:e9:ca:65:e3:79:78:80:18:92:5e:a8:fe:
06:d6:d6:2f:cc:2e:98:45:64:d6:66:06:e9:61:e9:e7:3e:2a:
57:82:2e:f5:cb:17:89:10:f2:81:c0:59:bf:27:ae:1f:31:d0:
76:69:2f:de:48:20:19:ce:1a:ab:df:58:4e:62:c3:79:ea:43:
50:4e:84:5e:1a:ee:a6:b8:30:2e:d4:88:9a:95:dc:71:f7:84:
e9:7e:1c:c2:84:26:a1:c7:d5:4b:34:e7:da:9a:d3:c6:2b:a5:
73:58:d6:27:7a:03:15:76:f2:62:be:27:ff:e1:68:8a:39:17:
d0:ef:5a:32:ff:4e:4c:68:7e:48:fd:a0:50:3b:fa:b4:22:33:
fd:5b:59:b7:c5:2a:16:ce:29:a6:b0:b2:19:57:49:6a:1a:01:
53:3e:7d:35:e3:98:a7:14:ec:b5:a0:12:51:18:3b:a2:2f:eb:
d8:1f:f5:69:0d:aa:40:6e:29:3a:37:fa:ae:22:54:8a:24:72:
21:ec:53:83:af:c3:ff:5f:b5:b3:85:f6:70:66:ce:48:f2:ab:
6f:89:4d:d9:06:05:5f:3b:6e:ac:ea:c6:92:a6:9d:37:0b:fd:
a8:33:6e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:57:49 2025 by rpki-client