Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/vahKbEeCin_51qS2274e3sF7-XA.roa
File: vahKbEeCin_51qS2274e3sF7-XA.roa (raw, json)
Hash identifier: ZEAmt19vQwnYhzdBp2iFVF4S/GBJi/V/076UCIfWMUY=
Subject key identifier: BD:A8:4A:6C:47:82:8A:7F:F9:D6:A4:B6:DB:BE:1E:DE:C1:7B:F9:70
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 1026
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/vahKbEeCin_51qS2274e3sF7-XA.roa
Signing time: Mon 26 Aug 2024 05:16:07 +0000
ROA not before: Mon 26 Aug 2024 05:16:07 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131591
IP address blocks: 103.231.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:28:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4134 (0x1026)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Aug 26 05:16:07 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=BDA84A6C47828A7FF9D6A4B6DBBE1EDEC17BF970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ef:71:eb:46:8d:d3:cf:90:36:14:f8:96:e0:
c5:45:57:63:98:69:b7:ec:a9:9b:23:ed:5c:c0:ba:
4b:d7:a1:99:2d:d8:a6:0c:a0:9b:7c:56:08:7d:5e:
28:bb:b2:41:ae:00:f5:ab:5c:3b:a7:ab:49:7f:fb:
86:36:4e:6f:d4:40:1b:70:95:85:e1:d7:ae:2f:4a:
53:af:fd:05:34:ea:38:0b:8f:0c:62:e8:ab:33:2f:
c6:d3:20:42:0f:04:f9:ab:d2:c7:bc:0a:15:50:4d:
10:a1:46:eb:24:9e:f8:cc:f1:ab:e0:c9:fb:98:81:
6b:8a:7b:30:33:87:b7:f8:55:72:83:de:e2:ff:46:
65:9a:78:dd:be:be:07:fe:4e:33:94:f5:b6:24:59:
d7:ac:fb:81:0c:1c:1d:a9:67:f9:3b:80:97:b8:a6:
42:84:16:ae:5d:34:9c:7d:3e:96:f3:f5:5d:7b:22:
e7:40:17:41:d4:6d:a9:04:00:4c:4e:12:4f:8c:8d:
db:ad:c2:5a:7a:87:24:90:d1:96:7e:29:74:64:a1:
b1:07:8f:0e:fd:2b:41:0f:72:d1:93:55:d7:72:61:
ce:63:72:82:75:7f:54:44:13:14:21:2d:11:ec:c3:
1f:1f:93:af:e1:09:a2:ac:08:5d:18:3d:23:ae:0a:
2f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A8:4A:6C:47:82:8A:7F:F9:D6:A4:B6:DB:BE:1E:DE:C1:7B:F9:70
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/vahKbEeCin_51qS2274e3sF7-XA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.231.49.0/24
Signature Algorithm: sha256WithRSAEncryption
90:5f:3b:be:10:1c:f6:79:28:a7:08:28:0e:ea:a9:0c:22:1e:
2d:80:70:38:23:5b:5b:29:91:bd:5f:9b:28:d2:1f:6a:13:40:
80:43:2f:29:ff:da:37:58:cc:d3:9f:0f:66:03:d1:ef:3b:f4:
6f:54:f1:ed:20:0c:5f:2a:5f:06:4f:d5:c1:d6:f3:db:9e:fb:
1e:ca:94:b9:92:ec:1b:1b:ec:f6:f0:be:e0:cd:87:2a:e9:e2:
0b:0b:79:da:b5:27:2c:c9:86:f8:a8:c6:da:91:71:c3:f0:e1:
a7:1a:7c:a5:e9:af:12:ed:6b:9c:e0:e1:9a:59:38:77:14:5c:
2c:1d:0e:11:f8:5a:3d:60:1f:a8:e2:ee:f9:00:e7:64:e7:7e:
f4:6f:c9:13:26:41:4a:c8:d7:25:17:88:2e:8a:d3:57:07:75:
eb:0c:8e:93:c0:5e:2f:38:c7:81:12:c3:67:02:26:83:3b:a8:
ab:23:bd:4e:c3:c3:b8:fe:bf:71:20:3e:1c:27:9f:9e:46:63:
b4:8a:ec:0c:3e:5d:11:90:8a:76:1e:25:32:bf:f4:db:79:a9:
a5:65:77:d9:26:74:de:4c:9d:22:de:f3:f6:8b:9f:51:a8:b2:
84:b6:79:8a:44:98:c1:1c:75:b0:a9:d3:b7:76:7f:41:5c:ce:
7d:02:c9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:54:17 2025 by rpki-client