Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/TxxbkBfv8dhzrpjb38_f_WZkThc.roa
File: TxxbkBfv8dhzrpjb38_f_WZkThc.roa (raw, json)
Hash identifier: 9tyucX7hroDdxRBu7Mw5I2HDuJiVp6oA64MTJ4e5kJ8=
Subject key identifier: 4F:1C:5B:90:17:EF:F1:D8:73:AE:98:DB:DF:CF:DF:FD:66:64:4E:17
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 1039
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/TxxbkBfv8dhzrpjb38_f_WZkThc.roa
Signing time: Mon 26 Aug 2024 05:16:11 +0000
ROA not before: Mon 26 Aug 2024 05:16:11 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 7482
IP address blocks: 210.203.0.0/17 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:28:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4153 (0x1039)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Aug 26 05:16:11 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=4F1C5B9017EFF1D873AE98DBDFCFDFFD66644E17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c8:d7:ca:a7:58:88:d2:8b:67:d5:84:2d:d0:
55:5c:5f:f7:aa:33:e7:dd:13:f3:e0:83:02:01:8a:
18:9f:98:fe:93:d3:51:61:ba:e0:24:e8:25:a6:00:
1a:a6:31:ed:68:93:e1:fd:39:53:2d:9c:eb:48:33:
18:d7:f6:8e:77:15:db:de:3e:2e:84:2d:7c:1d:4e:
b6:b8:ed:a1:95:cd:ba:e4:ef:48:88:51:36:2d:1e:
29:71:c5:54:fb:3d:1d:f5:15:9a:95:83:7d:30:29:
90:be:30:b8:ff:46:e5:10:34:39:42:f7:b5:c6:bc:
8e:3c:ce:5e:73:19:54:cf:0e:a9:2d:16:1c:f6:e3:
a5:9a:9d:75:3d:48:13:85:d3:b1:4f:79:19:b0:25:
58:3a:d0:77:49:72:fd:42:68:a6:c6:11:84:6e:9b:
47:52:4f:aa:6b:ec:6e:32:b4:ec:12:29:ef:11:eb:
fb:d5:b6:a9:d7:99:71:de:4c:37:0b:34:66:01:b7:
22:ce:fc:64:a6:f2:ac:1d:5c:05:d6:2d:ee:7c:e8:
38:40:02:3d:5d:ea:a5:07:15:56:1a:aa:94:c5:88:
00:17:62:29:8b:31:01:1b:de:fb:54:e2:8a:41:d6:
1b:25:a8:dc:8a:67:25:d3:9b:a9:9f:10:94:17:1b:
cd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:1C:5B:90:17:EF:F1:D8:73:AE:98:DB:DF:CF:DF:FD:66:64:4E:17
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/TxxbkBfv8dhzrpjb38_f_WZkThc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.203.0.0/17
Signature Algorithm: sha256WithRSAEncryption
84:a2:b3:b8:b9:a0:19:d0:32:fc:d7:0c:2d:ee:85:44:1a:4e:
a8:c5:f6:0c:a9:88:f5:7c:7f:7c:9e:0e:7c:40:9b:2c:e3:0e:
48:09:fe:d9:83:3f:22:57:1a:23:17:d7:a4:40:de:6f:57:d3:
c4:eb:66:77:74:37:80:7c:63:02:43:08:b9:56:f7:13:d0:97:
b6:2f:ff:48:d7:7a:23:b0:70:a9:8c:ba:ce:88:88:7b:8e:cf:
1e:73:f3:2e:dd:9e:6e:10:b1:21:a4:2d:2a:ed:ab:01:15:15:
e6:3e:10:56:7e:3f:f5:3f:ec:cc:ee:6a:5e:74:01:d6:84:8f:
b1:09:ea:e2:9b:3a:e5:ae:8d:c5:fd:e8:c5:c6:5a:88:40:e7:
a7:5e:25:73:76:5f:a8:1a:21:f9:fe:5b:78:ed:de:da:d9:0c:
b2:8e:45:38:69:7b:43:42:19:7e:af:93:0e:b0:0b:1d:3f:3b:
d9:16:1d:36:41:95:aa:95:c1:83:05:a4:03:79:bb:46:3e:00:
96:09:1e:34:17:d4:78:ea:9a:aa:4a:b2:5e:c5:20:49:57:1a:
87:41:5d:18:f1:9f:a7:26:87:62:1a:a6:bf:dd:c1:3e:b8:a6:
7a:3d:d0:0c:31:da:11:0f:29:56:13:c9:cf:17:08:88:37:b8:
44:85:c0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 22:07:21 2025 by rpki-client