Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/G4OB_kGikFOHl_0IlFILLrXL-Qs.roa
File: G4OB_kGikFOHl_0IlFILLrXL-Qs.roa (raw, json)
Hash identifier: z5icdzIEz6tC00jawFG6cEZzPYlBUM3/Xpf5corBa8w=
Subject key identifier: 1B:83:81:FE:41:A2:90:53:87:97:FD:08:94:52:0B:2E:B5:CB:F9:0B
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0FEC
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/G4OB_kGikFOHl_0IlFILLrXL-Qs.roa
Signing time: Mon 26 Aug 2024 05:15:53 +0000
ROA not before: Mon 26 Aug 2024 05:15:53 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131627
IP address blocks: 219.91.64.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:28:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4076 (0xfec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Aug 26 05:15:53 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=1B8381FE41A290538797FD0894520B2EB5CBF90B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:37:0e:53:8b:d6:19:f7:44:f4:f0:bf:b9:a8:
c0:f8:ff:2c:a7:dd:44:7c:44:5d:58:df:18:06:ae:
24:f7:db:40:8c:cb:4a:b7:07:27:2e:10:50:60:3a:
23:e5:32:e5:f8:fe:3c:7e:ca:87:3a:cf:af:64:96:
3e:23:38:22:b1:3d:d0:2b:29:a7:ba:af:b4:97:67:
1b:e7:de:9f:88:24:0c:58:8b:a7:17:3f:39:a4:cb:
42:af:ff:46:9b:e0:a9:9a:03:ec:b7:d9:5d:80:5f:
85:3b:eb:c5:2a:44:d9:7a:4d:d1:48:1f:d2:c2:78:
89:12:77:e5:3d:24:f1:41:5d:f7:95:8a:5c:ab:1b:
ea:da:72:c1:2c:9d:d4:7b:cc:af:4f:e4:a4:9e:57:
fe:cf:26:51:fb:a6:11:5b:89:d6:f3:f9:6d:b4:4c:
e6:6d:47:3a:65:dd:cf:16:5f:93:94:e5:2c:6b:ba:
9b:30:10:af:fd:2a:3a:3f:ba:0b:af:8a:ec:80:74:
bc:96:82:b2:06:1d:42:25:39:d2:3e:d1:69:25:5c:
63:12:4e:4c:c4:6c:34:f1:65:61:85:bb:68:93:a0:
ec:24:33:25:93:37:0d:a1:21:79:38:4c:1a:ad:5e:
60:36:4e:62:fd:3f:ba:43:5e:19:dd:7d:9a:3d:16:
bf:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:83:81:FE:41:A2:90:53:87:97:FD:08:94:52:0B:2E:B5:CB:F9:0B
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/G4OB_kGikFOHl_0IlFILLrXL-Qs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.91.64.0/22
Signature Algorithm: sha256WithRSAEncryption
19:3e:8f:a2:aa:3a:90:11:1b:68:47:7f:20:7f:5d:49:9b:d8:
26:91:e8:3d:48:69:f2:12:c6:0d:3b:05:a8:ed:ca:f8:fe:1c:
ab:40:2a:46:f9:7a:1c:59:82:27:ae:79:65:d9:b8:80:92:ce:
df:5b:6a:ff:01:77:e8:41:c5:9e:70:b5:1b:6e:48:71:dd:9d:
01:79:bc:39:2d:bb:68:30:5c:bb:bf:02:a0:9a:44:a0:f5:b9:
fd:47:06:85:6a:87:13:c3:0b:e4:6b:fd:50:4f:7b:55:6b:21:
d0:ec:8e:0f:3b:9d:8b:d5:dc:54:e1:9f:81:e6:44:2f:72:b4:
ea:9b:dd:f2:c5:50:d4:c6:bc:37:9c:29:2b:80:06:16:fd:97:
9e:b4:1d:50:c4:3f:71:7b:21:bd:7e:ca:3f:78:d4:28:28:93:
f0:c9:71:3b:18:72:32:c2:72:06:6f:24:03:d4:f6:3c:93:93:
90:76:80:d7:f2:6d:cd:74:0b:43:2c:25:b1:f1:bb:fe:70:01:
08:15:8e:33:7c:38:74:b5:b1:94:1b:4d:6d:ac:06:75:21:2f:
e2:2c:5b:ce:a2:7e:e7:b0:f0:97:9a:16:94:18:45:f6:06:ca:
6c:56:e7:ef:c8:38:57:98:eb:b6:12:6e:6b:2c:21:63:c7:1f:
65:8f:dd:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:51:52 2025 by rpki-client