Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/N-QWG6yDEZP9fy-pDU5bg5o36Pg.roa
File: N-QWG6yDEZP9fy-pDU5bg5o36Pg.roa (raw, json)
Hash identifier: rLP5rkSRAcknXoZEZBf4xZx3WFnoLKHz1F6sShLVfBc=
Subject key identifier: 37:E4:16:1B:AC:83:11:93:FD:7F:2F:A9:0D:4E:5B:83:9A:37:E8:F8
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 10BA
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/N-QWG6yDEZP9fy-pDU5bg5o36Pg.roa
Signing time: Mon 26 Aug 2024 05:16:44 +0000
ROA not before: Mon 26 Aug 2024 05:16:44 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 7482
IP address blocks: 203.79.216.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:27:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4282 (0x10ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Aug 26 05:16:44 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=37E4161BAC831193FD7F2FA90D4E5B839A37E8F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:06:8e:2c:4a:81:22:d3:99:03:4b:66:f0:90:
2c:88:1a:f5:1a:9c:90:68:21:12:80:f0:df:a5:50:
fb:62:8f:7d:07:04:fe:ee:7c:69:4d:cd:9f:9a:67:
e3:de:71:04:48:1e:23:41:ac:c3:45:2b:55:35:46:
f1:00:1b:af:49:3b:e4:fc:7e:92:65:c7:54:27:1c:
1b:21:d6:26:a7:1d:ea:f6:ea:78:8b:05:c6:03:92:
05:63:b6:9d:91:33:b7:75:31:94:75:0b:c0:71:f7:
3a:52:42:24:cc:36:ce:90:ed:70:9d:84:e9:75:67:
1c:61:c8:a1:53:07:b9:0d:76:99:7f:56:dc:f0:8e:
e6:bb:3f:dd:0d:08:ed:bc:a0:7d:57:6e:c3:83:f0:
00:cb:31:bb:91:03:c8:25:d5:a1:70:cf:1c:07:8a:
e8:7e:ca:6b:6a:fd:70:f0:44:78:e4:ca:a4:5a:49:
03:b0:ec:13:94:8e:28:ef:24:40:be:46:e6:8e:8e:
15:3c:6f:ef:36:11:81:3a:93:b5:f8:9e:82:94:40:
fb:fb:72:31:b7:ce:c4:50:6c:f2:44:96:b0:3c:1b:
0f:d6:aa:38:f7:28:5b:eb:f3:2c:69:9b:b6:b2:a4:
b5:55:50:71:12:c8:92:c9:2a:82:b4:70:a4:7e:97:
0a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E4:16:1B:AC:83:11:93:FD:7F:2F:A9:0D:4E:5B:83:9A:37:E8:F8
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/N-QWG6yDEZP9fy-pDU5bg5o36Pg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.79.216.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:3d:f7:4b:e4:78:28:e2:bc:77:66:b7:0e:bb:47:67:c7:57:
43:35:e6:64:6b:48:c4:0c:ab:10:a6:5c:88:ee:c1:b4:26:e5:
09:cc:01:dc:60:8b:a7:09:a2:10:41:e8:7d:0d:c2:a8:93:3b:
a6:53:44:cb:68:a5:9e:43:41:30:36:7a:f0:61:de:c1:e2:7e:
cc:f6:03:8d:bf:4c:4d:c0:df:3f:e5:a7:12:ae:af:6e:b7:89:
be:e7:fe:d7:ad:35:07:c1:28:4c:12:13:f6:4e:07:a3:60:56:
81:cc:c3:ed:ed:f7:19:82:b1:eb:79:55:6d:da:bc:5c:0a:bd:
7e:61:28:21:75:71:73:f7:68:ec:ca:d5:53:1a:35:db:29:6b:
75:7a:e5:65:5d:6a:1e:96:75:d2:ba:d3:7f:df:af:3e:27:8c:
00:45:7f:9e:19:e8:4a:97:90:9a:f4:55:ec:f0:db:c1:dd:1a:
68:2c:cb:84:2c:64:d3:d6:a6:79:62:82:0d:26:4b:21:c4:d1:
33:3c:4f:ce:7a:51:9f:37:4c:eb:37:4e:07:c5:c3:7e:fe:cc:
f1:03:0f:a9:90:70:a3:f7:58:3b:56:ad:19:19:3a:6f:89:67:
8b:06:cb:ec:c9:bd:f0:30:4f:1d:7d:23:4d:9b:53:5c:ad:4a:
03:d3:fb:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:51:54 2025 by rpki-client