Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KUANGSHIH/ZmJz8EQa4oPLBSEwCJDNAtyfJBc.roa
File: ZmJz8EQa4oPLBSEwCJDNAtyfJBc.roa (raw, json)
Hash identifier: GMEdZTFXYEq15I0FFJlPzzVH5TSEFxld5dmbfcmdki4=
Subject key identifier: 66:62:73:F0:44:1A:E2:83:CB:05:21:30:08:90:CD:02:DC:9F:24:17
Certificate issuer: /CN=27109AE250EF2ECAF79BF4890F0D6CBE5E2D7CC6
Certificate serial: 0E9E
Authority key identifier: 27:10:9A:E2:50:EF:2E:CA:F7:9B:F4:89:0F:0D:6C:BE:5E:2D:7C:C6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JxCa4lDvLsr3m_SJDw1svl4tfMY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KUANGSHIH/ZmJz8EQa4oPLBSEwCJDNAtyfJBc.roa
Signing time: Mon 26 Aug 2024 05:20:05 +0000
ROA not before: Mon 26 Aug 2024 05:20:05 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 134823
IP address blocks: 103.136.210.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 20:34:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3742 (0xe9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27109AE250EF2ECAF79BF4890F0D6CBE5E2D7CC6
Validity
Not Before: Aug 26 05:20:05 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=666273F0441AE283CB0521300890CD02DC9F2417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a4:cd:ee:25:61:62:6d:1d:e5:fd:55:28:f3:
e3:fe:e1:f6:6f:0f:29:01:d5:cf:cb:b7:1f:0c:77:
ac:c2:57:0a:16:73:44:96:14:df:8b:d0:21:e8:b5:
5f:32:3d:48:82:c3:47:b4:8e:8a:1c:33:9c:c8:1d:
2f:53:dc:6b:07:ca:eb:bb:b9:ac:4a:4f:8f:b9:df:
85:90:83:39:55:c1:d6:71:79:02:9f:8f:1f:54:e2:
52:1f:e2:ff:1f:7d:c9:09:20:9f:a3:1a:f6:03:db:
ab:a3:fa:59:ac:7e:96:24:4d:11:46:49:6d:20:27:
fe:5c:ba:14:82:55:8a:85:8c:c8:66:42:67:67:b9:
98:af:20:95:61:3a:84:cc:52:51:de:61:cd:5b:c1:
cd:2e:75:a4:da:6d:0f:8a:13:cc:a6:9e:9b:2a:27:
42:2e:0b:c7:6d:69:c6:63:24:91:e5:cc:e1:17:34:
0c:db:5e:3c:c1:4a:30:43:df:be:3c:b1:46:0e:b2:
fc:3d:cf:36:09:75:c9:1b:e8:d8:00:67:57:1c:9f:
45:98:4c:67:fb:35:6f:26:d2:7f:54:f4:12:d1:4f:
6d:da:b8:06:76:87:5a:a6:27:ac:65:8f:a8:fc:dd:
29:35:18:3d:91:bf:08:d6:9c:90:c9:0d:99:81:b1:
3a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:62:73:F0:44:1A:E2:83:CB:05:21:30:08:90:CD:02:DC:9F:24:17
X509v3 Authority Key Identifier:
keyid:27:10:9A:E2:50:EF:2E:CA:F7:9B:F4:89:0F:0D:6C:BE:5E:2D:7C:C6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KUANGSHIH/JxCa4lDvLsr3m_SJDw1svl4tfMY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JxCa4lDvLsr3m_SJDw1svl4tfMY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KUANGSHIH/ZmJz8EQa4oPLBSEwCJDNAtyfJBc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.136.210.0/23
Signature Algorithm: sha256WithRSAEncryption
00:6d:25:b6:0b:63:6b:ab:f7:c7:d0:2d:2e:cd:bf:e3:55:03:
ac:08:27:96:d2:2a:2d:50:b8:01:c2:4f:80:a5:a2:e5:8b:c0:
3a:5c:ac:12:8e:8e:2b:dc:1e:6a:c5:88:d6:07:ad:19:e3:50:
09:a6:84:77:3e:a8:03:50:d6:1f:30:75:c9:1e:58:7d:79:bf:
86:ac:5d:df:85:07:ba:64:9a:4f:6b:09:ea:26:74:04:d1:cf:
02:49:08:51:b2:ca:3b:50:f1:8e:db:c7:89:79:c5:59:ed:da:
d5:22:55:19:d5:e6:40:d4:5a:33:4c:57:47:40:3f:80:ff:21:
81:d7:ad:77:59:0b:cb:34:35:10:fc:77:34:dc:6c:81:a1:80:
4a:63:52:ea:f5:ea:76:9c:37:5e:1a:60:d8:94:45:75:a9:78:
de:8e:c2:c8:26:15:46:32:a9:b1:19:de:73:84:9c:1a:dc:a5:
16:ca:c2:09:4a:d3:f7:fa:6b:04:15:ff:b9:ae:12:78:b6:3a:
cb:08:81:c9:e9:94:86:3a:59:94:46:f3:49:36:86:ee:f5:71:
e4:c9:21:bb:a0:bd:1f:68:56:b1:c9:f9:ef:af:0d:4e:52:39:
a7:09:bc:50:31:c1:46:60:64:ec:28:e8:2d:ec:ab:6f:65:96:
d2:0a:66:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:52:40 2025 by rpki-client