Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/q-a1_3Y9gkX5x2g6IdsFRP77IXU.roa
File: q-a1_3Y9gkX5x2g6IdsFRP77IXU.roa (raw, json)
Hash identifier: 8AfDeKcVLOER5uXNQ7BZPxYub7rr+BCnrW/bBLs/kyM=
Subject key identifier: AB:E6:B5:FF:76:3D:82:45:F9:C7:68:3A:21:DB:05:44:FE:FB:21:75
Certificate issuer: /CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
Certificate serial: 0C43
Authority key identifier: 83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/q-a1_3Y9gkX5x2g6IdsFRP77IXU.roa
Signing time: Mon 26 Aug 2024 05:19:23 +0000
ROA not before: Mon 26 Aug 2024 05:19:23 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131619
IP address blocks: 103.116.98.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:59:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3139 (0xc43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
Validity
Not Before: Aug 26 05:19:23 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=ABE6B5FF763D8245F9C7683A21DB0544FEFB2175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:01:0a:07:98:4c:5a:42:7f:62:85:d6:ff:a6:
17:b3:8e:32:3d:7f:27:e0:6f:0a:25:27:bd:c0:e3:
13:69:cc:1d:63:f5:82:6a:ea:c1:40:d4:45:da:96:
4b:37:44:9e:56:01:46:95:21:11:c8:84:fc:81:1a:
d7:66:26:82:92:b4:a2:2f:ad:96:6e:4b:2e:31:67:
c8:27:93:63:a4:ef:0e:ca:ff:19:e9:c8:5c:93:28:
fa:db:1b:a3:12:07:5c:b1:92:3c:29:5f:ef:68:b9:
32:52:0f:e2:b2:6d:6d:7d:9b:10:1c:11:d0:c4:22:
5e:65:91:07:a7:d7:1d:c0:4a:c2:a2:d6:ce:35:37:
db:d5:06:81:97:44:1b:17:4c:38:c1:eb:59:70:78:
b4:6f:57:fe:98:9f:40:21:89:23:d7:69:44:04:64:
1c:5c:3f:a6:d7:14:57:81:c4:bc:65:06:99:a7:e9:
52:11:5b:f7:fc:40:75:1c:94:a0:53:e4:d6:d4:4a:
56:cd:cc:a3:92:e0:aa:2a:69:3d:3d:1b:ce:b3:dc:
6a:42:27:d7:49:ae:b2:d9:ed:a0:35:cf:64:3c:c0:
88:58:27:9e:1c:84:e4:78:f2:be:ed:44:6e:f7:60:
e1:c7:96:64:ff:db:80:2a:50:23:57:ca:bd:ac:35:
12:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E6:B5:FF:76:3D:82:45:F9:C7:68:3A:21:DB:05:44:FE:FB:21:75
X509v3 Authority Key Identifier:
keyid:83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/q-a1_3Y9gkX5x2g6IdsFRP77IXU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.116.98.0/24
Signature Algorithm: sha256WithRSAEncryption
83:82:b3:6e:b3:e9:73:ac:a7:cc:c8:dd:fa:b4:b5:40:90:34:
b9:19:f5:9a:b6:3e:69:e7:c3:04:3e:ea:5d:83:d8:e8:84:c6:
5c:54:6b:3a:e7:7a:e4:8d:80:8a:d8:fb:82:ed:8c:0e:3d:1e:
9b:e6:81:18:9e:57:9e:af:89:44:1d:68:5d:db:84:ab:ed:5d:
36:31:25:e4:82:7c:1c:84:c5:1d:bd:ca:29:03:3f:6b:56:85:
aa:26:6b:4c:5d:c2:80:f1:73:ec:b0:22:05:36:ed:da:c8:5c:
c7:9a:fd:bf:a1:5a:ae:81:1a:fa:4c:8c:e9:cd:bd:a1:be:74:
97:b3:20:42:f6:d2:c2:e0:1f:a7:59:48:6f:a7:f5:16:78:c2:
59:1e:7b:e8:97:3e:69:43:f6:28:52:59:76:c5:03:53:4c:cf:
1d:fc:e5:b3:94:7d:75:d9:2f:80:4e:b3:89:b1:7c:c6:36:cc:
a1:e3:32:74:fd:19:98:45:20:ad:ff:27:d4:d8:05:83:b0:11:
33:37:3a:fe:81:17:96:0c:c6:7a:b9:a1:be:1c:1b:3d:2d:92:
8a:2b:6c:04:71:be:14:23:e1:4c:cf:f2:3e:1e:78:c1:c3:d0:
5f:63:21:06:0e:d3:0b:f9:4d:f1:7c:ed:99:d1:5a:dc:44:1d:
e1:d2:77:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:43:41 2025 by rpki-client