Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/0TskJ-MVZyr6X5WHtGbsd2FW4uA.roa
File: 0TskJ-MVZyr6X5WHtGbsd2FW4uA.roa (raw, json)
Hash identifier: GkmpQFy10987tf5d6hx0D2iAWMWaUtmtlknYjBkbeII=
Subject key identifier: D1:3B:24:27:E3:15:67:2A:FA:5F:95:87:B4:66:EC:77:61:56:E2:E0
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 1032
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/0TskJ-MVZyr6X5WHtGbsd2FW4uA.roa
Signing time: Mon 26 Aug 2024 05:16:09 +0000
ROA not before: Mon 26 Aug 2024 05:16:09 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 7482
IP address blocks: 210.202.128.0/18 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:28:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4146 (0x1032)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Aug 26 05:16:09 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D13B2427E315672AFA5F9587B466EC776156E2E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:70:57:27:a6:0a:74:41:f5:44:90:c2:3d:18:
0a:1f:f4:17:41:86:18:48:f4:c3:ff:27:75:f3:dd:
7b:51:50:27:14:86:64:30:2f:9a:2a:85:bd:86:a5:
a0:33:fe:a7:c1:b9:4f:19:ea:b5:f3:66:32:b5:7a:
df:15:08:38:ba:a8:a8:5e:9a:84:a8:3f:d2:fa:fb:
e4:6a:e7:0a:56:d0:e0:0f:f3:fa:81:04:dc:21:f7:
23:9a:aa:00:2c:d2:da:11:94:86:21:05:18:40:8e:
53:ba:3e:30:3f:d5:25:b4:d7:8c:0e:23:14:ad:e8:
7a:2b:ff:75:be:5f:d4:af:03:6e:50:0b:fc:c5:84:
36:b9:0e:20:a8:9f:be:b7:09:b2:ab:e8:13:22:99:
0b:c2:9e:87:f8:c8:2c:5c:ad:83:d8:37:55:8d:83:
4f:d3:9f:36:9d:2a:70:fe:12:46:5d:48:e8:d7:76:
a3:9d:60:23:8d:eb:7d:c6:7e:41:f3:9c:11:9c:be:
ec:5c:9b:9f:46:41:c2:9e:76:de:4a:08:98:2d:47:
9b:57:04:ef:07:cf:7d:81:97:48:19:5e:dc:39:c5:
92:12:78:44:d3:6a:9b:1e:89:1c:5e:73:d1:df:26:
05:e5:cf:bc:86:1c:0e:64:40:82:18:ee:af:9d:c3:
12:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:3B:24:27:E3:15:67:2A:FA:5F:95:87:B4:66:EC:77:61:56:E2:E0
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/0TskJ-MVZyr6X5WHtGbsd2FW4uA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.202.128.0/18
Signature Algorithm: sha256WithRSAEncryption
cd:6b:ed:d7:1e:70:4e:c4:29:29:7a:60:94:6f:41:5c:28:12:
53:0b:72:66:f0:42:68:c1:15:96:89:1c:9b:e1:1b:05:83:68:
5c:f0:4f:53:95:81:45:67:e8:f8:18:42:91:fd:79:27:3a:a0:
48:fa:3e:e6:4b:cd:40:80:1d:a9:3a:2f:78:e2:3a:ca:a3:6d:
40:c8:9d:5a:97:d8:44:e9:6c:fa:4e:31:0f:e4:41:32:21:4b:
b6:a7:d8:d4:60:dc:78:ff:48:44:7d:61:a6:b6:37:a6:29:11:
f2:b7:84:ef:52:06:58:d5:08:39:35:09:3d:6f:bb:47:c6:eb:
c1:e6:d6:35:ab:3f:e6:e0:1c:d4:cc:c2:76:45:93:08:18:7c:
a4:66:05:6f:8d:47:68:7b:fe:0e:9b:61:de:77:72:95:1f:77:
47:09:5d:4f:35:e4:2b:97:5e:ef:31:f4:38:82:55:3e:a7:ca:
14:ca:6d:d8:84:cc:1c:b6:0e:74:38:32:6a:72:7f:9f:5c:6d:
c4:47:14:21:04:a8:af:96:29:63:73:db:be:a4:9a:7b:e0:1e:
d3:36:02:f3:a9:95:91:5c:52:f8:4d:13:fa:32:af:f2:ed:61:
1b:14:36:09:0f:ac:b6:8a:db:e7:48:81:ec:d7:a9:b5:d8:b8:
3c:8c:cf:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:43:57 2025 by rpki-client