Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/KFAERCluRY-TQLBjQrbYOk5kV90.roa
File: KFAERCluRY-TQLBjQrbYOk5kV90.roa (raw, json)
Hash identifier: 2QIbswsZhYupjAOFuZyKrdFtdipGlJ04T2r7F5MBgEU=
Subject key identifier: 28:50:04:44:29:6E:45:8F:93:40:B0:63:42:B6:D8:3A:4E:64:57:DD
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 0D29
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/KFAERCluRY-TQLBjQrbYOk5kV90.roa
Signing time: Mon 26 Aug 2024 05:19:37 +0000
ROA not before: Mon 26 Aug 2024 05:19:37 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18042
IP address blocks: 115.43.128.0/17 maxlen: 17
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3369 (0xd29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Aug 26 05:19:37 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=28500444296E458F9340B06342B6D83A4E6457DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2e:fe:81:11:dc:88:bd:d8:63:1c:af:a1:5d:
32:76:cb:0f:e6:21:1d:16:3e:8f:fa:27:48:dd:3e:
59:be:64:49:5c:c6:5c:af:88:39:92:47:3a:41:01:
50:5b:d0:02:3e:35:79:1e:57:12:76:16:60:58:3e:
72:30:79:68:df:35:e6:d7:b3:57:cf:84:bf:8f:65:
44:1e:f2:4b:82:0e:9a:b1:f0:56:c7:fa:75:34:12:
74:79:a4:19:d5:53:c9:2c:10:85:33:a4:61:7a:8c:
64:9f:7c:89:7d:0b:8b:fb:49:68:b3:0d:db:a6:35:
9a:84:c7:ca:bb:48:54:d8:56:fc:0e:ba:fd:a0:2a:
50:63:6d:84:e6:57:f2:18:24:d4:bf:74:df:ec:c4:
ba:1a:c2:05:0d:b2:5f:7f:8c:6a:fe:13:21:2c:15:
3d:98:ef:1f:12:59:fa:d6:f0:4f:1d:6a:a8:4e:3a:
21:48:dd:fa:e6:6d:09:10:dd:bf:97:9b:4f:1e:60:
1e:f5:d6:65:b8:ab:bc:67:17:eb:5a:26:81:c0:3d:
30:c7:e6:eb:10:1a:3e:40:6e:12:80:e2:4e:49:ae:
4b:15:5c:b3:45:69:d4:a1:fb:80:e0:d3:d9:13:a8:
b7:17:f1:0b:e1:97:84:fb:f9:34:b3:b2:69:60:76:
1f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:50:04:44:29:6E:45:8F:93:40:B0:63:42:B6:D8:3A:4E:64:57:DD
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/KFAERCluRY-TQLBjQrbYOk5kV90.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.43.128.0/17
Signature Algorithm: sha256WithRSAEncryption
41:62:d5:c5:03:8a:b5:6d:d3:a2:f3:83:c9:46:df:31:c3:20:
6d:00:81:61:0e:5e:4c:a7:07:d6:a7:31:2b:b4:5e:bf:d7:b5:
75:b9:8f:b2:9e:42:13:5d:96:75:5e:2c:61:26:38:78:6d:f9:
a7:a0:04:de:29:ed:54:83:3b:fc:36:63:b2:1d:52:ad:fd:48:
52:33:0a:d9:89:ca:0b:c0:6f:5f:1b:60:6a:41:36:52:4e:25:
72:67:30:16:8e:55:e8:ea:38:4d:5f:cc:c1:f5:2a:3a:76:a4:
e3:ff:87:ec:b6:76:39:fe:7b:e4:9d:6c:59:71:64:6e:17:2c:
9d:64:06:0a:66:1f:de:d0:b0:ca:2f:bd:72:2a:3b:9b:af:14:
e2:1a:cf:c4:91:53:37:b3:c9:5f:7d:a1:9b:17:07:82:b8:10:
3a:7e:fa:ee:d0:80:5e:9b:f6:2c:c8:e1:37:bb:50:c0:da:7f:
2e:e1:4a:82:f4:ee:a1:62:42:dd:36:9c:f4:b9:60:2c:90:d4:
e8:94:c6:1e:a3:2b:4f:90:b2:3f:63:8f:6c:ad:18:1c:ab:bd:
e7:40:7b:b6:6a:09:00:f9:ea:d6:a9:8f:77:10:71:6a:dc:44:
87:aa:bf:cb:33:d2:b7:56:6a:31:95:e8:19:be:13:3d:23:f5:
9f:d5:dd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:46:50 2025 by rpki-client