Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/uhOQ9PncOSF-Vq2BkbQ74NQZip4.roa
File: uhOQ9PncOSF-Vq2BkbQ74NQZip4.roa (raw, json)
Hash identifier: YkrJUHUKeUX8V3i/469Q1W7dOFEPnxks2IzfqOU3XXc=
Subject key identifier: BA:13:90:F4:F9:DC:39:21:7E:56:AD:81:91:B4:3B:E0:D4:19:8A:9E
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 103A
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/uhOQ9PncOSF-Vq2BkbQ74NQZip4.roa
Signing time: Mon 26 Aug 2024 05:16:12 +0000
ROA not before: Mon 26 Aug 2024 05:16:12 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9311
IP address blocks: 210.63.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:28:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4154 (0x103a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Aug 26 05:16:12 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=BA1390F4F9DC39217E56AD8191B43BE0D4198A9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:23:4e:09:74:b3:14:b3:49:7c:20:3d:88:2c:
d7:b2:66:e9:47:26:2e:ed:d6:ca:13:9b:70:9a:5a:
aa:f2:5e:5b:69:6a:69:a4:57:ac:b9:b5:b0:07:25:
1a:75:02:00:64:20:51:af:f5:69:e7:0f:67:32:d2:
b7:88:4f:6d:df:1c:7a:73:af:8d:fc:ee:4f:c5:2a:
3a:dc:f7:75:b9:f8:c4:42:85:54:f4:b5:e8:cf:0a:
d0:e0:2e:23:7a:3e:fc:4d:b6:6c:96:a5:6b:e8:af:
2a:ab:a1:83:46:8f:ba:cb:a0:c9:0e:73:49:2a:58:
26:2c:f5:c1:a3:fe:34:c9:53:d3:1d:e9:83:86:e7:
c8:ae:93:dd:ce:5c:47:96:82:af:e8:4d:a6:9a:d2:
29:fe:c5:fd:d4:fb:98:f8:02:75:c0:99:31:35:89:
93:c7:0e:09:f6:d5:4e:4c:23:94:37:d2:ee:d5:69:
09:e9:48:0a:7f:ce:ec:c8:fa:89:b6:6b:bd:a8:05:
c9:5f:04:fa:52:cb:f0:b0:fb:6c:3e:ae:c2:c0:16:
2d:a8:67:54:a5:f0:27:7b:37:3a:fc:67:c9:ad:9b:
45:39:bb:95:56:eb:a9:01:3f:15:1d:78:ac:6a:83:
8c:90:83:c1:08:fa:3e:53:59:ee:b0:bd:9e:a0:a6:
aa:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:13:90:F4:F9:DC:39:21:7E:56:AD:81:91:B4:3B:E0:D4:19:8A:9E
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/uhOQ9PncOSF-Vq2BkbQ74NQZip4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.253.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:6b:e0:1e:8e:e8:6e:5d:3a:82:9f:a1:c1:9d:60:0f:b5:2e:
e8:9b:62:f7:55:f3:e5:ef:1b:fa:57:f8:1f:90:ac:fa:ea:de:
67:5a:3e:31:17:f7:68:ec:b8:a4:60:fc:39:20:5a:c8:7b:5c:
53:f0:24:3d:e2:43:d1:8b:76:eb:2d:00:81:fc:ea:e4:5e:46:
f7:75:0b:e6:81:92:87:5d:05:04:9d:07:31:67:3f:d7:0d:18:
73:f6:8a:63:23:a8:30:85:d7:fc:9f:5f:b5:34:ef:a2:0c:4b:
24:f6:4a:c9:88:32:a0:6d:c9:ac:e9:06:2b:45:78:8e:c3:e3:
3e:cf:23:54:1c:b9:ac:28:26:2e:d6:68:2a:bc:6c:c3:cd:64:
82:5e:4e:b2:28:fd:2e:3a:5e:2d:85:80:9d:24:fd:74:a7:a6:
27:60:eb:08:db:86:50:48:26:9f:f3:b8:d5:0d:c7:c8:57:67:
14:7b:57:46:88:d7:da:aa:d9:b3:09:79:c4:72:97:55:06:f3:
7e:bf:bc:16:ca:04:ba:ec:c2:f8:23:50:3c:94:26:8d:55:64:
a3:be:27:69:a8:bf:c5:5c:81:e6:86:fc:4a:f3:b9:e7:85:e6:
98:19:7f:29:86:e2:fe:30:c9:10:0d:d9:64:4d:0b:8e:84:c5:
70:71:56:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:34:33 2025 by rpki-client