Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/zaDSf5RQaqs0JPpv69vcmU4cpgA.roa
File: zaDSf5RQaqs0JPpv69vcmU4cpgA.roa (raw, json)
Hash identifier: BPIGyyt53u3DQMfzI21srqXApnrhD8PEc1V08TTp4FI=
Subject key identifier: CD:A0:D2:7F:94:50:6A:AB:34:24:FA:6F:EB:DB:DC:99:4E:1C:A6:00
Certificate issuer: /CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
Certificate serial: 0C42
Authority key identifier: 83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/zaDSf5RQaqs0JPpv69vcmU4cpgA.roa
Signing time: Mon 26 Aug 2024 05:19:22 +0000
ROA not before: Mon 26 Aug 2024 05:19:22 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131619
IP address blocks: 103.116.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:59:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3138 (0xc42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
Validity
Not Before: Aug 26 05:19:22 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=CDA0D27F94506AAB3424FA6FEBDBDC994E1CA600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e2:31:ab:da:ee:a2:ba:c8:df:cb:79:3b:25:
15:02:69:8a:e3:2a:ea:39:7e:d6:c6:e0:65:77:df:
3d:c1:8b:f2:e1:26:9f:90:2f:75:b2:e6:11:fd:36:
b4:00:de:56:01:25:67:f9:88:3f:76:0d:33:97:fd:
98:82:06:24:14:f1:6c:5c:b9:d6:8d:bf:8c:93:bf:
1d:a5:15:3c:7c:65:9e:48:e7:94:40:64:b7:31:f7:
ac:d8:ae:e9:63:fd:f6:eb:da:9f:df:79:5b:98:e4:
4a:50:56:c4:04:44:85:89:af:98:af:75:16:3f:34:
80:7d:eb:6e:ae:ed:bb:e8:5f:fb:70:d1:ea:bc:88:
9a:8b:e0:54:60:03:af:7f:d1:bb:53:a0:c2:aa:bc:
d0:52:a2:08:5e:61:18:86:49:b4:eb:b9:a0:47:71:
69:c5:33:0c:49:05:6d:fd:3a:96:97:3b:b4:46:8b:
c7:a7:41:57:d3:84:a5:fd:a1:f0:43:ff:f9:d6:23:
51:44:f9:c6:96:c6:37:57:14:a5:0a:5d:99:0e:73:
74:c0:a0:c2:82:d0:96:1b:83:b2:28:91:91:77:80:
53:7f:c9:5a:59:38:80:f8:6a:2e:2b:a5:d6:b0:da:
c3:a6:5d:5f:b3:94:ad:03:79:0a:1a:ef:26:97:ed:
1f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A0:D2:7F:94:50:6A:AB:34:24:FA:6F:EB:DB:DC:99:4E:1C:A6:00
X509v3 Authority Key Identifier:
keyid:83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/zaDSf5RQaqs0JPpv69vcmU4cpgA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.116.97.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:6c:12:2d:40:94:12:a5:a8:14:c5:18:de:e6:df:f6:5b:43:
7e:14:6b:40:5d:c6:65:9f:aa:01:f2:38:8c:11:00:93:de:8c:
d2:a7:c9:9b:35:ac:b5:5a:ad:72:c4:71:bb:0b:74:eb:33:de:
60:34:eb:7f:f6:32:f3:82:08:6e:b0:b7:6a:42:ac:d4:82:f9:
83:b0:1d:7b:77:91:86:db:37:35:38:ac:45:98:73:dd:92:82:
30:09:dd:54:63:0b:ce:a9:3c:8d:0c:99:03:f4:fa:db:93:56:
e6:f1:da:ff:b7:ce:b0:8f:be:7a:f1:ec:29:89:9d:69:a9:1c:
ed:2a:2a:cc:75:59:80:96:42:25:df:90:61:e4:f2:cf:d1:18:
c8:55:8c:f9:d9:a3:65:36:94:05:fc:a5:a8:53:13:4e:b8:e5:
9a:04:36:9e:d7:a6:67:99:49:c9:0a:02:4c:81:04:98:4d:5e:
83:2a:fe:fe:9f:b9:63:4b:cd:bf:c4:25:6d:24:5b:18:b4:23:
de:92:07:5c:0c:18:fc:17:50:48:a0:77:5a:1d:50:a2:df:2a:
08:a5:46:e5:1c:47:11:12:fe:8d:63:37:a9:c1:77:f3:e3:c4:
a6:2e:f7:ff:a9:53:57:17:3d:0b:f8:aa:b5:f1:1a:dd:8a:b5:
e3:73:fd:d1
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICDEIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMw
QkM0NDEwMTYyQTU4RDBEQjE3RTBBMzUxNTUxRkJCM0Q3NTFBMTAeFw0yNDA4MjYw
NTE5MjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENEQTBEMjdGOTQ1MDZB
QUIzNDI0RkE2RkVCREJEQzk5NEUxQ0E2MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCl4jGr2u6iusjfy3k7JRUCaYrjKuo5ftbG4GV33z3Bi/LhJp+Q
L3Wy5hH9NrQA3lYBJWf5iD92DTOX/ZiCBiQU8WxcudaNv4yTvx2lFTx8ZZ5I55RA
ZLcx96zYrulj/fbr2p/feVuY5EpQVsQERIWJr5ivdRY/NIB9626u7bvoX/tw0eq8
iJqL4FRgA69/0btToMKqvNBSogheYRiGSbTruaBHcWnFMwxJBW39OpaXO7RGi8en
QVfThKX9ofBD//nWI1FE+caWxjdXFKUKXZkOc3TAoMKC0JYbg7IokZF3gFN/yVpZ
OID4ai4rpdaw2sOmXV+zlK0DeQoa7yaX7R9ZAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUzaDSf5RQaqs0JPpv69vcmU4cpgAwHwYDVR0jBBgwFoAUgwvEQQFipY0NsX4K
NRVR+7PXUaEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSklHRU5U
RUMvZ3d2RVFRRmlwWTBOc1g0S05SVlItN1BYVWFFLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9nd3ZFUVFGaXBZME5zWDRLTlJWUi03UFhVYUUuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9KSUdFTlRFQy96YURTZjVSUWFxczBK
UHB2Njl2Y21VNGNwZ0Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAZ3RhMA0GCSqGSIb3DQEBCwUAA4IBAQCmbBItQJQSpagUxRje5t/2W0N+FGtA
XcZln6oB8jiMEQCT3ozSp8mbNay1Wq1yxHG7C3TrM95gNOt/9jLzgghusLdqQqzU
gvmDsB17d5GG2zc1OKxFmHPdkoIwCd1UYwvOqTyNDJkD9Prbk1bm8dr/t86wj756
8ewpiZ1pqRztKirMdVmAlkIl35Bh5PLP0RjIVYz52aNlNpQF/KWoUxNOuOWaBDae
16ZnmUnJCgJMgQSYTV6DKv7+n7ljS82/xCVtJFsYtCPekgdcDBj8F1BIoHdaHVCi
3yoIpUblHEcREv6NYzepwXfz48SmLvf/qVNXFz0L+Kq18RrdirXjc/3R
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:41:19 2025 by rpki-client