Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/kUVtn7uJcaAz6lzPW8AbWDJSIII.roa
File: kUVtn7uJcaAz6lzPW8AbWDJSIII.roa (raw, json)
Hash identifier: /juIOjyMfKn7iKE5HKh8GLBoUBjItI1MO/D0V+dOUug=
Subject key identifier: 91:45:6D:9F:BB:89:71:A0:33:EA:5C:CF:5B:C0:1B:58:32:52:20:82
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 10FF
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/kUVtn7uJcaAz6lzPW8AbWDJSIII.roa
Signing time: Wed 18 Sep 2024 06:04:35 +0000
ROA not before: Wed 18 Sep 2024 06:04:35 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9311
IP address blocks: 210.202.233.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:28:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4351 (0x10ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Sep 18 06:04:35 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=91456D9FBB8971A033EA5CCF5BC01B5832522082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:79:98:d0:25:93:ea:88:77:ed:dd:57:30:53:
9d:4c:a1:60:5e:a2:1a:96:c9:34:04:1d:5c:46:61:
bc:5a:04:d3:64:5c:7a:51:ff:18:6a:91:c7:d7:88:
98:e2:d4:30:45:f7:d4:e1:21:27:78:6d:16:8a:29:
aa:d8:f3:f9:a9:39:73:36:a7:5d:a8:26:c2:c7:bd:
3f:44:c4:bb:1e:26:1b:72:ab:bb:6a:77:e4:bf:ba:
bc:e1:97:60:9f:f9:e4:19:df:6c:38:53:e5:64:96:
3d:d6:30:76:38:38:ac:2f:f1:0d:0d:24:d7:d5:ad:
d4:cb:e8:bb:19:4b:3e:64:4b:16:59:c9:fa:17:a3:
a0:14:ba:a8:0e:1c:47:ba:de:d0:8b:fd:a0:44:81:
45:b0:e6:dc:84:96:3b:9f:a0:5c:dd:4a:b3:61:ed:
77:4d:2c:e9:e0:03:10:df:9c:a7:10:39:4e:01:07:
c5:07:08:ba:07:aa:2d:be:4d:d0:d5:fc:df:af:d8:
d2:92:95:a8:6c:c1:d1:97:43:47:d3:9e:d3:b6:fb:
60:0b:8f:b3:83:d1:0b:c8:66:0c:dc:bf:bc:7c:7d:
1a:40:0d:9e:bb:61:a8:08:63:88:fe:52:25:cf:ac:
18:84:60:49:c1:ff:d3:e3:ab:e4:91:23:77:6f:50:
fc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:45:6D:9F:BB:89:71:A0:33:EA:5C:CF:5B:C0:1B:58:32:52:20:82
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/kUVtn7uJcaAz6lzPW8AbWDJSIII.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.202.233.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:b2:f2:a4:76:1e:27:7e:40:d2:a1:7e:96:f7:df:c6:ab:da:
8d:f6:8c:8b:6f:e4:1c:4a:e7:b1:27:bd:14:f7:74:db:c2:a9:
55:5f:ad:77:2d:fa:ae:db:92:93:a3:2a:4d:cf:11:a7:06:90:
3c:e1:ad:fa:b4:69:e6:25:a9:fe:8d:71:7e:85:8a:3b:b2:1a:
a7:d3:67:86:ca:bd:e2:5c:e2:79:08:3d:79:17:39:b1:7d:2a:
14:c6:9d:07:ed:39:c9:c8:b5:e7:e3:81:5f:f4:46:05:52:bb:
7e:db:bd:4e:0f:44:17:87:73:00:e5:f9:37:f3:e6:6c:94:78:
3a:a4:83:45:ac:73:20:82:b4:0b:b9:ac:4d:c0:35:fe:21:53:
3f:fe:56:fc:5c:52:16:77:62:ab:8c:a4:bd:cd:90:a5:6a:96:
18:9b:a5:3a:95:90:bf:59:eb:4c:88:1b:91:cc:56:97:69:be:
fc:2a:a7:c8:a7:55:99:df:88:11:b0:6c:02:89:a0:09:23:fa:
87:73:8c:23:25:1f:68:f3:a8:9e:9a:68:71:4c:51:b7:78:e3:
cb:24:42:99:19:b5:da:3b:34:6b:a8:f9:45:6a:8a:b7:20:e4:
b6:f7:a8:86:95:da:f9:09:44:34:35:c3:10:5d:e1:ed:96:37:
57:f3:b3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:44:21 2025 by rpki-client