Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/x2d0fHBHdfe9KS57WdKOV1dLYxA.roa
File: x2d0fHBHdfe9KS57WdKOV1dLYxA.roa (raw, json)
Hash identifier: hLS/Gpy+oUywC+8r9726EEEHwkFJCLlZxitSzaC+Cq8=
Subject key identifier: C7:67:74:7C:70:47:75:F7:BD:29:2E:7B:59:D2:8E:57:57:4B:63:10
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 1036
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/x2d0fHBHdfe9KS57WdKOV1dLYxA.roa
Signing time: Mon 26 Aug 2024 05:16:10 +0000
ROA not before: Mon 26 Aug 2024 05:16:10 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 7482
IP address blocks: 203.79.128.0/18 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:28:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4150 (0x1036)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Aug 26 05:16:10 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C767747C704775F7BD292E7B59D28E57574B6310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ec:c5:86:9e:8f:0f:f2:45:8f:dd:52:0f:53:
36:24:fa:ed:11:e6:c4:27:72:4f:d5:d9:b5:11:cf:
78:d5:c7:55:70:67:ae:22:3c:94:2b:24:c5:e5:83:
7f:10:82:74:86:71:60:1f:bb:5f:a9:99:c3:5a:ec:
e5:6e:66:22:16:be:72:d3:ba:b6:e9:e1:4b:f2:6c:
72:18:55:6b:f6:e3:16:32:21:07:d3:8f:8d:66:f0:
d4:29:94:19:4d:ee:a4:69:dd:e6:f2:80:d4:95:7c:
5b:d2:0f:04:77:20:d6:6b:dc:32:6a:e5:80:09:ce:
6f:2a:a0:3f:c8:fc:8a:d2:a6:db:c2:07:99:74:20:
c5:54:d5:07:0b:2a:eb:6b:9f:70:30:6a:1e:e1:b8:
71:1f:c7:6e:08:81:db:cf:34:05:2e:26:6d:a9:e2:
45:79:1e:2d:e0:e2:ea:92:7e:a4:bc:50:31:54:f3:
5d:55:5a:4e:83:e4:54:cd:fe:fd:27:45:16:60:d2:
e7:d9:c8:37:9a:94:a8:f1:55:3a:f6:d3:bf:69:c1:
d5:e2:e4:f0:ff:ec:ad:ad:22:d9:22:0f:c9:7d:ff:
ea:39:2d:59:76:d2:40:0b:d6:d7:a2:72:75:6a:86:
ce:2c:27:eb:3e:b7:6d:1a:07:ca:47:d8:77:7c:da:
72:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:67:74:7C:70:47:75:F7:BD:29:2E:7B:59:D2:8E:57:57:4B:63:10
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/x2d0fHBHdfe9KS57WdKOV1dLYxA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.79.128.0/18
Signature Algorithm: sha256WithRSAEncryption
3f:2e:f9:8b:f2:cd:e4:69:26:73:e0:9f:ac:a3:0b:71:5b:67:
c7:3d:32:e2:28:ad:c5:66:f0:d9:16:b9:3e:6a:03:75:0a:b5:
31:80:32:28:64:07:08:49:82:61:11:8e:07:9a:b3:c6:f3:1d:
df:6a:42:e7:c7:4f:05:04:13:09:e8:e8:b5:ac:0d:ae:c3:8f:
af:c1:77:7c:79:0f:21:9f:42:bd:c7:6c:c5:d5:35:a5:4c:cc:
4f:0e:13:01:08:6c:6e:b0:38:bf:76:70:f1:17:7d:4e:22:bb:
e3:9f:4d:07:bf:f7:0b:4c:dc:46:cc:48:f5:bb:1f:0c:b6:f9:
d2:ca:8f:08:32:9a:2a:61:73:ce:6f:c1:e3:4a:2d:65:78:da:
bb:08:3d:4d:d0:e5:8a:73:77:c6:b9:6c:66:46:ed:f1:e5:c1:
9b:af:20:06:c3:4e:4a:43:05:50:9e:23:ba:ab:6d:a2:e9:a9:
ff:f1:2f:18:e2:bd:57:df:49:6c:42:3c:5f:ab:cf:de:c8:bd:
a9:e3:a4:41:5c:0d:9d:1b:ff:f2:ee:6a:eb:a4:a7:b4:a9:34:
2b:4b:e1:2c:9f:de:31:41:37:58:77:e3:fd:77:70:45:98:d2:
3a:4f:b4:a6:95:19:31:f8:7a:9b:2c:2d:5f:76:60:6a:3a:87:
fb:c2:f5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:51:44 2025 by rpki-client