Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FANTASY/6c_3uaVqWg3GcvpMAiAcUs7Ywa4.roa
File: 6c_3uaVqWg3GcvpMAiAcUs7Ywa4.roa (raw, json)
Hash identifier: 3mUFObv+hMcO0cwIZW9BrOjysP5E39hM+HxBwte8yeo=
Subject key identifier: E9:CF:F7:B9:A5:6A:5A:0D:C6:72:FA:4C:02:20:1C:52:CE:D8:C1:AE
Certificate issuer: /CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
Certificate serial: 09B8
Authority key identifier: 59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/6c_3uaVqWg3GcvpMAiAcUs7Ywa4.roa
Signing time: Mon 26 Aug 2024 05:15:40 +0000
ROA not before: Mon 26 Aug 2024 05:15:40 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131671
IP address blocks: 103.146.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 20:34:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2488 (0x9b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
Validity
Not Before: Aug 26 05:15:40 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E9CFF7B9A56A5A0DC672FA4C02201C52CED8C1AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6d:26:d2:93:2a:00:15:1f:80:bf:12:c7:a5:
a2:88:87:57:25:2b:8a:38:f2:d9:61:ef:0e:c4:4e:
7f:d0:b5:f0:af:98:07:9f:9f:39:e1:9b:9d:ef:df:
5b:76:a3:17:2f:a5:0a:e1:ad:9d:97:e7:51:3a:26:
06:65:84:30:fa:05:a1:61:ec:16:cb:77:f8:1a:9e:
6c:e5:94:32:3d:bf:b4:27:c9:51:ed:24:d1:f6:6a:
57:67:fa:34:11:de:f7:ee:8a:76:9a:07:0c:ee:78:
e0:7c:39:cd:5d:67:8e:04:c6:b6:a8:8f:83:34:21:
f8:f3:da:09:e9:a2:16:35:84:67:9b:03:75:ff:d9:
2c:c3:15:66:fd:61:33:6e:3e:e4:2e:ac:7a:97:a7:
02:59:a6:4e:e3:78:63:41:30:14:f9:2f:21:4f:aa:
de:fb:26:96:15:69:21:56:c1:9a:29:c8:fe:ad:58:
b7:df:71:12:43:5b:d8:4e:91:83:05:b3:bf:bc:25:
b2:a8:81:d3:e9:76:95:80:31:8c:ac:ba:00:e1:42:
47:34:18:78:fd:70:86:9d:5b:2d:8f:03:53:7b:ff:
42:2c:76:11:5d:95:88:31:34:b6:b3:9b:5d:77:db:
09:58:1c:10:20:bf:69:75:51:cf:90:23:53:dd:4a:
fc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:CF:F7:B9:A5:6A:5A:0D:C6:72:FA:4C:02:20:1C:52:CE:D8:C1:AE
X509v3 Authority Key Identifier:
keyid:59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/6c_3uaVqWg3GcvpMAiAcUs7Ywa4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.146.213.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:da:dc:cf:04:b6:44:06:fc:c6:ca:ac:0d:e2:56:da:27:3d:
b9:14:cf:fb:c2:fe:2d:23:14:df:7f:ea:29:e0:04:04:4c:ae:
ff:f9:d3:4d:aa:e0:a3:68:43:fb:2f:aa:96:25:a5:e6:a3:85:
fb:bf:1f:11:24:a9:ab:3b:64:5d:78:9f:fe:ef:0e:e9:6c:59:
66:14:1b:60:94:3c:82:45:81:ee:a2:4f:31:45:45:73:5b:45:
1a:ab:b5:b2:91:93:9e:cb:84:2c:6d:39:39:3d:36:f8:67:5a:
fa:b8:80:28:22:f6:41:74:31:be:10:aa:4e:1a:ed:f2:a9:a4:
3d:ad:55:14:08:b2:ff:b8:6e:bb:8f:23:61:76:e1:05:d2:d0:
64:3f:c9:16:6f:ab:fb:ec:f5:da:0e:b2:e8:cd:50:3f:15:c5:
fb:31:83:25:1e:74:db:85:10:3c:ab:c3:ec:d8:fd:b5:c5:bb:
00:18:ba:16:ba:e8:be:02:99:6b:f4:74:ea:be:ac:8f:13:d3:
ed:dc:1d:a2:6d:00:0d:e9:7d:91:80:2e:80:a4:4a:e3:dd:95:
f2:2e:c0:28:b6:5a:54:d8:e4:58:3e:f2:8f:28:eb:4b:45:1b:
53:4c:2a:54:9f:ff:19:c8:cc:4b:c8:63:1f:d0:05:5d:23:8c:
12:18:67:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:46:00 2025 by rpki-client