Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/5a8KEbvxxvYXRTywrNZjJuZC9xM.roa
File: 5a8KEbvxxvYXRTywrNZjJuZC9xM.roa (raw, json)
Hash identifier: T17KtAUj/YzXBydrJipZjJ62tp5LlvJFkKr+blRf6IM=
Subject key identifier: E5:AF:0A:11:BB:F1:C6:F6:17:45:3C:B0:AC:D6:63:26:E6:42:F7:13
Certificate issuer: /CN=D2A09CE42809F4DA9D7B1C4473DDF2F436A599C4
Certificate serial: 0313
Authority key identifier: D2:A0:9C:E4:28:09:F4:DA:9D:7B:1C:44:73:DD:F2:F4:36:A5:99:C4
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0qCc5CgJ9NqdexxEc93y9DalmcQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/5a8KEbvxxvYXRTywrNZjJuZC9xM.roa
Signing time: Mon 26 Aug 2024 05:20:45 +0000
ROA not before: Mon 26 Aug 2024 05:20:45 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18428
IP address blocks: 103.172.126.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:05:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 787 (0x313)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2A09CE42809F4DA9D7B1C4473DDF2F436A599C4
Validity
Not Before: Aug 26 05:20:45 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E5AF0A11BBF1C6F617453CB0ACD66326E642F713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:db:77:89:2c:89:ca:6f:c6:a6:46:2d:22:2e:
b6:f6:07:47:a3:e5:58:8a:5e:eb:99:69:c6:fb:a7:
8e:cd:ff:80:f8:4b:7c:14:85:6a:b1:a3:9f:ad:94:
1e:4a:7f:aa:83:db:f8:88:a0:de:05:ba:ae:74:d0:
5e:ef:dd:f2:c1:59:27:e4:4e:cd:eb:66:7e:6e:57:
f2:e0:9d:8d:7b:ad:a5:d7:1d:52:5c:7f:5b:d1:ab:
57:36:f7:11:bf:82:79:28:83:b6:a4:09:da:0c:17:
19:7e:13:0e:a8:c0:b6:67:bc:d8:c5:e8:51:34:47:
75:b7:c5:23:4f:e3:7b:4a:89:cf:c7:dc:2e:84:90:
d9:04:6c:5b:23:33:a3:be:b6:0c:bf:3d:b1:7d:c3:
4f:12:0e:fb:cf:d9:b1:3d:7b:3f:47:4d:21:b7:64:
db:d8:ad:3d:8d:b6:c3:b1:28:84:81:f1:df:5e:00:
41:54:62:2f:65:4e:5f:07:82:82:05:f4:fd:70:46:
b5:db:da:68:23:70:a0:c3:79:cc:60:22:d4:c1:aa:
44:12:13:55:b2:fc:77:13:4f:29:85:29:ea:22:94:
85:97:34:ae:82:0e:ae:f5:57:75:99:1a:71:07:5e:
d7:75:6f:12:25:26:4c:7e:da:39:86:f3:a3:c7:2b:
09:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:AF:0A:11:BB:F1:C6:F6:17:45:3C:B0:AC:D6:63:26:E6:42:F7:13
X509v3 Authority Key Identifier:
keyid:D2:A0:9C:E4:28:09:F4:DA:9D:7B:1C:44:73:DD:F2:F4:36:A5:99:C4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0qCc5CgJ9NqdexxEc93y9DalmcQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/5a8KEbvxxvYXRTywrNZjJuZC9xM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.172.126.0/23
Signature Algorithm: sha256WithRSAEncryption
19:27:5e:a7:bf:f1:64:74:74:89:fe:72:09:8c:8b:3b:c5:f7:
0b:1e:26:14:9b:e3:06:2b:29:e1:4b:f8:e8:48:fd:3d:73:e5:
35:a2:5f:c8:5f:43:88:00:bc:a1:0e:fc:21:8f:9a:35:2a:7a:
a3:3d:df:21:14:a1:d4:22:e1:4e:0d:79:79:53:0a:36:e4:15:
97:4b:60:b8:fc:e4:79:d1:dd:db:da:2a:14:ef:ef:7c:8b:c1:
ba:ce:6d:18:e6:14:b3:6e:aa:b0:3d:45:be:08:69:69:0d:b5:
b0:67:ec:b6:79:3e:32:ff:9c:44:3d:1e:31:3c:ce:e7:94:b0:
c6:8c:0a:5e:b1:1d:fb:a5:2e:5f:6d:b5:8f:8d:c0:3d:dc:ef:
4d:0f:ea:a5:53:da:fc:94:ea:01:24:b0:1b:a8:4a:56:69:9a:
a0:c4:77:ac:b7:c8:ec:b6:14:c6:85:96:7e:ae:5b:94:cb:f2:
3e:1c:a8:f9:3d:fe:d7:99:1c:b9:09:c7:34:e8:88:11:d4:9a:
e3:44:42:a2:17:69:d1:5f:ac:05:78:ab:23:24:81:0c:05:f3:
dc:d3:7f:06:29:ca:60:e6:58:e4:4d:16:c6:6e:55:85:86:3d:
8e:1e:1f:a0:3f:60:47:10:5c:61:b7:85:86:c6:87:21:31:42:
c7:d5:54:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:57:31 2025 by rpki-client