Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HST/jWRQnopxGAxPLwRRcpO8gQcJ7IM.roa
File: jWRQnopxGAxPLwRRcpO8gQcJ7IM.roa (raw, json)
Hash identifier: ImrPTa8Op7p18Dk4VZWp2G5tV8xGzv/Lp/zZS7mUfzE=
Subject key identifier: 8D:64:50:9E:8A:71:18:0C:4F:2F:04:51:72:93:BC:81:07:09:EC:83
Certificate issuer: /CN=833D5BF79B45C730ED141CB539A508D01AA30908
Certificate serial: 09F9
Authority key identifier: 83:3D:5B:F7:9B:45:C7:30:ED:14:1C:B5:39:A5:08:D0:1A:A3:09:08
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gz1b95tFxzDtFBy1OaUI0BqjCQg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HST/jWRQnopxGAxPLwRRcpO8gQcJ7IM.roa
Signing time: Mon 10 Feb 2025 14:16:41 +0000
ROA not before: Mon 10 Feb 2025 14:16:41 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131666
IP address blocks: 103.144.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Mar 2025 02:10:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2553 (0x9f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833D5BF79B45C730ED141CB539A508D01AA30908
Validity
Not Before: Feb 10 14:16:41 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=8D64509E8A71180C4F2F04517293BC810709EC83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a9:48:f0:ee:9f:0e:04:7b:08:2c:34:74:b6:
39:78:87:a5:ae:d3:5c:e8:31:88:11:b2:4c:4b:cd:
c8:55:67:1f:8b:15:78:0d:4e:ae:d8:93:26:45:c1:
b0:7a:dd:bc:4e:80:cd:a0:95:6f:73:d6:d0:c1:0c:
07:31:79:1f:f1:fc:33:e8:5f:aa:eb:65:1e:99:79:
32:bc:5b:35:01:00:b6:e3:be:c8:e9:2d:33:91:2d:
f6:5b:a7:51:a2:67:2c:6a:96:1b:f1:45:ab:c1:57:
84:9c:d3:a8:bf:ed:e4:8f:a2:4f:7c:09:b1:d8:e6:
c8:17:21:6b:55:e6:3d:0e:1e:00:7e:1b:5f:a8:b2:
7e:12:87:ca:c2:d7:24:80:9d:0d:58:67:67:08:25:
3f:c4:bc:66:34:d0:cd:da:0a:18:dc:83:4c:72:7c:
a7:97:8b:fd:a9:5b:6c:5b:16:39:55:c2:37:7f:fc:
79:14:b7:2a:32:fe:df:30:b8:e4:eb:48:f9:c4:fb:
e9:55:f4:8d:de:f2:25:91:50:c7:da:15:df:f9:0b:
70:02:62:06:58:14:79:e9:0e:f3:11:3a:a4:17:56:
15:4b:b6:32:96:05:bb:66:5a:60:3b:53:2a:90:5b:
1a:32:d1:d2:82:36:c8:61:8c:4e:13:45:fb:e0:3f:
e0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:64:50:9E:8A:71:18:0C:4F:2F:04:51:72:93:BC:81:07:09:EC:83
X509v3 Authority Key Identifier:
keyid:83:3D:5B:F7:9B:45:C7:30:ED:14:1C:B5:39:A5:08:D0:1A:A3:09:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HST/gz1b95tFxzDtFBy1OaUI0BqjCQg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gz1b95tFxzDtFBy1OaUI0BqjCQg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HST/jWRQnopxGAxPLwRRcpO8gQcJ7IM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.144.35.0/24
Signature Algorithm: sha256WithRSAEncryption
25:5e:c0:93:35:fb:d1:e5:72:2e:86:67:8c:1f:97:44:a2:26:
ef:89:9c:fb:54:6e:30:ad:f1:0e:85:7c:8e:80:38:71:15:8d:
49:19:29:65:59:63:fc:82:83:1e:11:99:14:ff:c1:c2:2b:e1:
df:d1:8c:57:4d:62:6d:f4:42:cd:f1:ba:28:cc:49:32:3d:b8:
cc:39:7e:06:4c:b8:75:c3:f1:6e:19:bd:bc:01:80:88:5e:51:
92:a6:0a:39:29:ba:f7:3c:59:68:bc:4a:99:0f:73:76:20:20:
cd:b5:ed:f1:7c:5d:33:32:3f:32:b6:2f:36:30:98:4c:71:5a:
cd:1b:a9:24:cc:c1:15:91:b5:fe:21:5a:77:ed:b0:1d:63:a8:
0a:ac:ca:2c:f8:a0:44:b1:0b:ca:20:43:cc:e3:1b:f5:5c:3e:
69:b0:3a:ec:59:72:aa:0f:1e:d9:a1:7e:8b:19:d2:2d:b1:f0:
ec:8c:48:93:b6:bb:e7:57:9e:ee:65:6c:e8:e2:51:93:0e:10:
5d:84:3c:d0:6f:4b:00:46:37:9f:72:17:f2:d4:f4:32:e9:2f:
e1:e7:bc:13:07:65:2c:fc:ca:48:f0:fd:70:8c:6a:78:13:93:
6c:6c:19:6e:52:6b:d8:c5:12:81:0e:a0:17:b1:ab:08:c2:04:
e6:53:ce:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:42:19 2025 by rpki-client