Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/vTbWjZgliV2y_wzmKcY5m-Sob-A.roa
File: vTbWjZgliV2y_wzmKcY5m-Sob-A.roa (raw, json)
Hash identifier: snM2lq73RgTuGqs9/6BZrgC04AroBKYVlT6MVlt1LVQ=
Subject key identifier: BD:36:D6:8D:98:25:89:5D:B2:FF:0C:E6:29:C6:39:9B:E4:A8:6F:E0
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 1068
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/vTbWjZgliV2y_wzmKcY5m-Sob-A.roa
Signing time: Mon 26 Aug 2024 05:16:23 +0000
ROA not before: Mon 26 Aug 2024 05:16:23 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131142
IP address blocks: 223.22.16.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:27:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4200 (0x1068)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Aug 26 05:16:23 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=BD36D68D9825895DB2FF0CE629C6399BE4A86FE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0b:5b:a4:87:45:c1:e5:57:7d:a6:6d:0c:47:
0d:5c:f3:7a:eb:9a:f7:7a:98:4b:0a:30:c1:f5:92:
f0:e2:d0:e4:38:4c:1e:04:00:3e:db:d2:a1:7c:f0:
65:9c:b6:8e:81:cc:c1:89:71:bf:a8:1d:2d:53:c5:
ba:c1:e6:54:e9:81:64:db:bd:4e:f2:18:c2:a7:6f:
f9:29:cd:d1:97:63:db:b2:be:7a:b3:d4:79:f7:fc:
68:0d:b4:11:87:05:66:b0:62:39:21:88:b0:d2:a8:
2c:73:ca:2a:df:8c:57:45:07:39:ba:89:a4:fd:f4:
63:a4:ca:25:2e:d7:65:8a:ef:80:d6:60:94:6f:6a:
e0:d0:de:9e:76:53:9d:d0:ce:b6:8b:14:f0:40:d1:
c8:49:c4:fd:4c:a9:c6:0f:0d:f4:2f:7f:92:7e:69:
11:f7:1f:5f:b7:38:4e:fe:44:fc:e3:09:d0:65:ba:
c2:1b:58:e1:d1:d0:86:ad:dd:ee:46:a1:f1:a5:a4:
75:27:43:ba:3a:11:cd:67:a8:0b:ee:a0:75:ba:e5:
26:71:79:8c:1f:9e:12:7d:ab:d6:f7:bd:38:36:d9:
d2:66:a0:ed:9e:58:fe:c4:d7:3a:27:1e:e6:22:5c:
31:20:e5:b9:75:e9:f6:81:c2:fe:11:f9:87:35:12:
1c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:36:D6:8D:98:25:89:5D:B2:FF:0C:E6:29:C6:39:9B:E4:A8:6F:E0
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/vTbWjZgliV2y_wzmKcY5m-Sob-A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.22.16.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:9b:be:ce:f9:7c:90:c1:54:af:fd:ab:42:7c:3c:f4:f8:9b:
e4:bc:27:35:15:ad:a7:d6:ca:c1:dd:f4:89:f4:83:ff:a9:2a:
39:f1:bf:05:dd:75:6c:33:68:c1:af:e3:b2:7c:12:cd:d7:4b:
54:79:ac:1e:eb:65:b8:00:be:05:07:0b:46:46:e6:2e:77:2f:
ee:68:88:29:99:46:b6:ed:83:e6:1d:6e:1d:49:dc:cb:ed:30:
3f:5f:81:cf:ea:c4:e9:87:b8:34:58:f2:a1:22:1e:8e:ef:7e:
bb:0b:24:04:bb:b8:79:1b:b2:b8:d0:ea:61:a9:e9:f2:48:d2:
ce:5f:db:ad:a6:f1:ee:6c:69:52:fe:c8:dc:d3:93:6f:ee:86:
81:15:12:0f:69:87:68:70:16:c0:4a:53:14:27:42:d5:f9:2d:
3b:b6:cd:47:de:a4:df:08:61:3f:2b:c9:39:ec:76:12:b7:32:
62:95:b9:06:7e:a3:44:80:8b:ad:b2:bc:69:47:38:23:62:83:
6e:f0:5a:90:50:66:5f:a2:f2:82:02:70:a3:b2:8c:42:56:2b:
2a:c3:b6:99:a0:5f:ba:7d:18:a3:04:94:55:fd:2a:7f:c1:79:
a6:5c:0f:2f:8d:ff:68:ee:ed:f5:85:2b:65:94:4d:8b:15:5f:
6b:a2:31:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:49:21 2025 by rpki-client