Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/ObPRsGwxGZljrjG65pEKeuefddE.roa
File: ObPRsGwxGZljrjG65pEKeuefddE.roa (raw, json)
Hash identifier: aIH/ysBf2jplyST6oCScjswRnnW7Z3pu0Nirt03cKc4=
Subject key identifier: 39:B3:D1:B0:6C:31:19:99:63:AE:31:BA:E6:91:0A:7A:E7:9F:75:D1
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 1084
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/ObPRsGwxGZljrjG65pEKeuefddE.roa
Signing time: Mon 26 Aug 2024 05:16:30 +0000
ROA not before: Mon 26 Aug 2024 05:16:30 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17709
IP address blocks: 210.201.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:27:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4228 (0x1084)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Aug 26 05:16:30 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=39B3D1B06C31199963AE31BAE6910A7AE79F75D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fc:9f:47:a0:be:15:68:a5:32:9a:80:58:3b:
04:d9:ae:24:e2:67:f5:d3:cb:91:59:e8:cc:35:36:
cb:e9:b5:6d:9d:80:80:8f:a5:28:7f:5b:6b:9b:c4:
9c:89:06:f2:92:cf:60:26:c0:71:1b:6e:67:8c:de:
29:0f:c7:b9:c6:f3:89:d9:81:1c:a1:83:06:80:13:
70:68:9f:a2:cc:ea:6c:24:16:9c:55:8a:e1:33:ac:
4d:22:0c:ae:1c:fa:42:b9:12:8d:59:bc:d5:10:f5:
f3:df:db:b7:b6:ad:9d:02:16:e9:b1:9a:b4:7f:ac:
5e:a6:f6:2e:43:53:1f:27:f3:97:d0:c9:3e:cf:7b:
a9:8f:33:31:6a:e3:58:88:3c:f5:71:df:39:14:0f:
98:02:62:ef:a2:e3:3e:d0:63:e9:22:70:3c:77:76:
9a:70:a1:ca:71:04:af:1b:79:c2:bf:83:0e:5f:3d:
89:3e:c4:b6:d9:ad:dc:e0:b6:dd:59:d8:15:1e:cf:
84:b1:4c:55:be:a5:27:39:84:4b:74:ed:e9:63:4f:
8f:64:99:5c:22:72:2f:d4:d7:62:e6:f6:9f:ab:2c:
18:bc:f8:62:27:4d:0e:60:64:e3:6e:8a:8a:2b:5d:
7e:10:fd:84:7e:31:7c:67:d3:8b:59:d8:80:06:fc:
d9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B3:D1:B0:6C:31:19:99:63:AE:31:BA:E6:91:0A:7A:E7:9F:75:D1
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/ObPRsGwxGZljrjG65pEKeuefddE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.201.78.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:1f:92:7e:27:57:d5:4a:b0:46:38:a1:7d:40:61:90:36:e7:
98:cd:89:6b:b2:27:8b:4e:ef:7e:0f:56:d9:a0:32:e0:01:9b:
6e:16:f6:31:ef:1a:70:32:53:77:44:ce:e6:05:bf:2d:79:00:
94:f2:4e:9d:c6:74:cd:b3:c5:8a:42:78:d9:53:8c:82:31:19:
f4:5f:02:72:fe:e4:19:39:83:d9:21:c5:b2:0f:9c:04:f9:31:
19:70:de:6b:fd:c3:50:a4:7c:10:54:40:f9:61:27:ac:87:51:
60:59:57:7f:9a:78:9e:7b:f7:ba:c3:e7:b3:0a:c4:f0:a5:b0:
d9:48:13:b1:b0:1c:f9:7a:11:f8:26:db:18:90:a7:ca:c8:48:
d4:cd:01:9b:30:15:91:47:32:d6:9e:e6:5c:1b:fb:2f:6e:c8:
a6:4e:e1:e8:db:9f:61:1e:cc:1c:0e:f6:2d:73:01:74:25:53:
e1:d9:49:e9:3c:73:36:7f:2f:0d:fb:e6:06:f5:69:9b:83:c5:
cb:8b:fe:05:e0:a7:52:86:22:8b:a0:d4:0a:47:db:46:be:13:
8e:d6:e4:04:cc:04:c7:01:02:10:72:88:27:c3:69:8f:23:f6:
6e:72:48:48:07:a1:be:91:0d:d2:70:49:eb:15:d3:a6:11:10:
dc:6a:a8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:54:14 2025 by rpki-client