Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LEEMON/1u7g8UEAUSEBS-7B-whDwF9nn2A.roa
File: 1u7g8UEAUSEBS-7B-whDwF9nn2A.roa (raw, json)
Hash identifier: gWlXa7qoFVC+4PYYPzxEQ4kMm20tEFBSurxiNa/yfyM=
Subject key identifier: D6:EE:E0:F1:41:00:51:21:01:4B:EE:C1:FB:08:43:C0:5F:67:9F:60
Certificate issuer: /CN=0486F1D511D2C22EC95994B123B3A24962C1E327
Certificate serial: 0196
Authority key identifier: 04:86:F1:D5:11:D2:C2:2E:C9:59:94:B1:23:B3:A2:49:62:C1:E3:27
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BIbx1RHSwi7JWZSxI7OiSWLB4yc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LEEMON/1u7g8UEAUSEBS-7B-whDwF9nn2A.roa
Signing time: Mon 26 Aug 2024 05:20:11 +0000
ROA not before: Mon 26 Aug 2024 05:20:11 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9915
IP address blocks: 103.67.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 406 (0x196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0486F1D511D2C22EC95994B123B3A24962C1E327
Validity
Not Before: Aug 26 05:20:11 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D6EEE0F141005121014BEEC1FB0843C05F679F60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:04:9e:fa:72:c3:87:96:e8:c0:95:35:3b:d5:
aa:bd:12:f6:fa:27:27:d3:bc:1c:f8:9a:c0:5f:e3:
7b:1b:6e:03:80:95:b6:89:2f:a7:27:45:38:5b:81:
98:1c:4b:f7:65:ce:9f:2f:0b:c0:2e:14:87:f6:ca:
1e:74:36:a6:8c:82:8a:55:e9:55:87:0a:4c:0d:8c:
ac:7b:9f:8c:b3:e1:1a:55:03:71:31:12:67:83:4b:
d1:f1:90:82:3b:c8:e5:4f:03:9a:fa:ea:21:7d:ed:
a5:9f:eb:50:3e:1e:81:48:b4:6c:d1:bb:f5:89:0a:
6b:be:45:4e:71:ef:fd:02:e6:9e:f3:fe:a3:04:bc:
08:10:d3:27:cd:0e:93:4c:04:fa:c4:d0:de:69:8c:
3d:06:f8:7b:36:d7:4d:54:c1:d6:1d:67:5b:c3:a0:
db:46:e7:fa:c7:57:b8:c9:54:e6:1b:b0:6c:18:86:
d7:7b:48:bf:58:85:72:3b:fa:f6:19:56:81:06:75:
4c:09:84:13:0e:34:b6:2b:75:3e:8e:fc:ec:46:4a:
45:60:a6:80:e0:b0:9f:8f:38:69:5d:e0:01:d4:25:
6a:f8:a9:fb:13:23:4d:51:fc:e2:90:12:b9:84:f3:
9b:8b:6a:75:a7:02:d7:e3:59:94:8b:1e:43:11:45:
04:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:EE:E0:F1:41:00:51:21:01:4B:EE:C1:FB:08:43:C0:5F:67:9F:60
X509v3 Authority Key Identifier:
keyid:04:86:F1:D5:11:D2:C2:2E:C9:59:94:B1:23:B3:A2:49:62:C1:E3:27
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEEMON/BIbx1RHSwi7JWZSxI7OiSWLB4yc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BIbx1RHSwi7JWZSxI7OiSWLB4yc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEEMON/1u7g8UEAUSEBS-7B-whDwF9nn2A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.67.160.0/24
Signature Algorithm: sha256WithRSAEncryption
34:88:96:58:3c:6a:3f:05:c3:0b:06:9b:c4:c7:1c:3d:d7:0e:
41:6a:d2:65:70:2d:79:1f:20:8f:3c:c7:9e:61:c5:ee:15:d3:
a8:20:26:e3:44:42:54:da:ae:42:02:93:aa:c9:a6:a0:7d:e2:
8d:f0:5c:94:de:01:e8:5a:1f:54:8e:24:69:db:8a:4a:13:55:
c3:22:5c:65:49:93:1c:34:80:dd:f1:48:71:72:6e:00:ac:84:
6d:d4:4c:51:83:3d:1d:69:64:97:41:2a:67:cd:1d:b4:8f:57:
e2:b6:89:ea:98:96:af:c6:ee:44:0d:cf:07:e0:11:2a:4b:77:
e6:e4:31:8c:2c:ca:5f:b5:ed:91:2d:45:29:0d:d1:ed:c9:36:
50:64:d6:bc:95:9b:b9:67:70:4f:48:11:a9:cd:fa:90:8e:0b:
1a:0e:16:9f:31:c7:a0:88:80:c1:9f:16:00:da:6a:b7:63:3c:
48:3f:f8:37:58:7b:58:4d:f7:06:e2:25:be:91:ea:1a:be:f0:
64:16:27:d0:4c:13:8e:c9:a3:af:71:03:41:92:c6:9c:29:37:
ca:cc:9d:c7:c7:60:0d:f9:f6:fb:ec:d6:f4:5e:8a:53:2f:4d:
eb:bb:76:e9:23:ef:d9:75:e1:c5:c0:ef:71:1e:52:90:59:61:
39:57:7c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:57:48 2025 by rpki-client