Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/2ayOrcOYIWl43LuPJPsHUiUqFMc.roa
File: 2ayOrcOYIWl43LuPJPsHUiUqFMc.roa (raw, json)
Hash identifier: GB2igJyxNr+70QwcDlDDUFtBscib1LxwMcoXnxwfbmg=
Subject key identifier: D9:AC:8E:AD:C3:98:21:69:78:DC:BB:8F:24:FB:07:52:25:2A:14:C7
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 1049
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/2ayOrcOYIWl43LuPJPsHUiUqFMc.roa
Signing time: Mon 26 Aug 2024 05:16:16 +0000
ROA not before: Mon 26 Aug 2024 05:16:16 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131627
IP address blocks: 219.91.68.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:27:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4169 (0x1049)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Aug 26 05:16:16 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D9AC8EADC398216978DCBB8F24FB0752252A14C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:af:c4:64:84:16:9d:e4:27:25:77:5a:8e:76:
d1:0b:44:c8:31:45:2d:02:3c:c5:93:02:80:35:d8:
d3:8a:00:df:4a:72:30:d8:4b:06:43:e0:da:7f:a9:
b7:60:9a:cf:45:11:46:9e:e6:00:35:12:d1:60:f8:
4a:fd:65:49:e1:1c:91:fd:a5:a0:b8:cf:4d:f8:77:
6e:b1:e1:5c:a0:f7:1a:99:61:a9:c5:7a:dc:5b:48:
8b:f5:a7:53:98:fd:53:8e:ae:51:93:65:6f:3f:4a:
36:c7:11:58:32:7d:11:07:85:91:c0:f3:ac:9a:3f:
1e:52:c2:bd:47:65:13:64:fe:57:f0:b8:86:87:2b:
a5:73:55:05:a6:47:56:e2:6e:6a:4d:d2:72:7e:da:
0d:f3:bf:f8:e8:fc:a9:a2:2b:a6:0f:46:e1:7b:cf:
ad:d6:ea:18:a9:1a:fa:36:2c:bc:d0:55:8f:4f:af:
33:1a:17:f5:c8:c8:40:9e:9b:e1:ef:21:35:f8:c7:
dd:cf:f1:0a:3e:d4:d7:43:65:65:46:65:ab:4c:62:
b6:1e:7e:0c:3a:73:4d:97:c1:bb:7a:13:8f:2e:ac:
47:1b:6c:30:e4:fc:41:d1:9f:29:2f:67:7d:14:e6:
07:e3:5d:ee:b1:e6:a4:74:7b:cc:ea:fb:f0:48:ea:
56:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:AC:8E:AD:C3:98:21:69:78:DC:BB:8F:24:FB:07:52:25:2A:14:C7
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/2ayOrcOYIWl43LuPJPsHUiUqFMc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.91.68.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:b5:53:e2:a0:c4:1e:65:68:35:c3:43:f3:9b:69:f6:9e:a0:
56:e0:2a:3b:cb:46:5a:77:54:89:0a:3d:80:8c:a0:63:6e:de:
f0:2a:c8:9e:a2:59:34:bf:59:b9:05:de:30:a5:e4:d1:36:00:
e5:4b:ec:3c:19:e0:c4:4b:0d:34:55:17:25:8f:6b:bd:6f:3a:
e6:a8:fb:f4:22:d2:2b:03:c7:bf:fb:97:41:3e:61:43:35:ac:
51:7e:f3:40:f8:24:81:b8:56:26:8e:ec:30:75:ad:2a:8c:45:
f6:d3:77:79:b2:04:5e:cd:05:a2:1e:f8:49:65:02:d4:5c:b2:
c7:f9:84:af:f3:1d:b1:9d:7f:b4:3a:3f:fa:fc:78:10:86:96:
ef:5e:2d:c9:ec:73:a8:c7:a4:c2:ee:c2:e7:8c:a0:e1:3b:59:
94:12:38:87:ea:10:a6:a2:5b:d1:08:7b:d1:31:18:88:b8:9e:
1b:8f:67:c4:fa:6a:95:cc:b7:05:5e:a6:39:30:98:ee:d3:e2:
f5:b2:83:d0:c2:7a:d5:72:56:e1:97:58:c1:5f:45:2b:e9:0f:
b3:b3:6b:00:3f:c8:ed:ed:11:e3:39:c8:0c:a4:85:73:8f:9d:
28:29:d7:6c:51:56:be:44:ac:35:b2:4d:87:2e:be:a9:50:b2:
f7:8f:3f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:51:49 2025 by rpki-client