Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MKY/PlWD7PkzktlMIG2F-fsLXobP7Oc.roa
File: PlWD7PkzktlMIG2F-fsLXobP7Oc.roa (raw, json)
Hash identifier: 65KzRazFD2S0jMzAwGy4/tL9zAYbuTSnWJif5iPhh+A=
Subject key identifier: 3E:55:83:EC:F9:33:92:D9:4C:20:6D:85:F9:FB:0B:5E:86:CF:EC:E7
Certificate issuer: /CN=9D9E97B00D2E15C41AE7071732018C2B137E53A1
Certificate serial: 0C2D
Authority key identifier: 9D:9E:97:B0:0D:2E:15:C4:1A:E7:07:17:32:01:8C:2B:13:7E:53:A1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/nZ6XsA0uFcQa5wcXMgGMKxN-U6E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MKY/PlWD7PkzktlMIG2F-fsLXobP7Oc.roa
Signing time: Mon 26 Aug 2024 05:21:05 +0000
ROA not before: Mon 26 Aug 2024 05:21:05 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 7478
IP address blocks: 210.244.192.0/19 maxlen: 20
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3117 (0xc2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D9E97B00D2E15C41AE7071732018C2B137E53A1
Validity
Not Before: Aug 26 05:21:05 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=3E5583ECF93392D94C206D85F9FB0B5E86CFECE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5b:2c:00:94:f2:44:39:3a:de:4d:7e:90:a3:
f5:2e:e9:7d:61:f4:a2:74:60:0a:0e:be:07:f2:2a:
28:71:4d:0a:05:bb:bd:06:07:27:de:24:81:d2:19:
19:5f:78:95:1d:7a:4f:11:7e:df:95:eb:a6:49:28:
9c:72:09:aa:d4:d3:36:40:29:75:b0:8c:d0:16:17:
eb:3e:21:1d:b2:95:f7:24:e1:18:82:67:ef:99:1d:
8b:c7:f9:47:bf:54:2d:bf:cd:3d:cf:0b:13:46:63:
de:58:7e:6b:a5:2d:64:6c:39:75:90:32:34:51:31:
b1:1d:1d:31:c9:95:b8:d6:79:12:51:5e:92:50:aa:
ad:47:69:f9:c6:78:85:5d:cd:73:20:a6:4c:53:2b:
fc:c6:d2:26:d2:77:18:b2:d9:b3:3c:90:8a:81:8a:
ba:72:a3:d2:3a:b6:71:96:eb:45:fc:11:00:80:44:
ff:06:2a:37:aa:f9:59:01:36:db:70:d9:06:36:53:
a5:19:3c:5f:6f:95:0b:12:4a:4c:96:0a:3c:8d:35:
3d:7c:cb:0b:05:e3:5f:56:2a:84:da:1c:a1:20:a5:
8f:31:a9:b6:98:63:e0:cf:bf:42:44:4a:43:2d:d0:
b0:16:1c:39:37:6f:f5:20:79:ea:34:da:69:45:e8:
8a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:55:83:EC:F9:33:92:D9:4C:20:6D:85:F9:FB:0B:5E:86:CF:EC:E7
X509v3 Authority Key Identifier:
keyid:9D:9E:97:B0:0D:2E:15:C4:1A:E7:07:17:32:01:8C:2B:13:7E:53:A1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MKY/nZ6XsA0uFcQa5wcXMgGMKxN-U6E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/nZ6XsA0uFcQa5wcXMgGMKxN-U6E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MKY/PlWD7PkzktlMIG2F-fsLXobP7Oc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.244.192.0/19
Signature Algorithm: sha256WithRSAEncryption
32:21:1a:c5:c8:f4:38:ab:9f:f6:c1:56:24:f8:3e:93:00:45:
1e:e2:68:4f:cc:38:30:bb:e4:54:49:1e:95:f0:61:8d:cd:61:
5a:17:ec:90:f8:c4:5d:e3:d2:3a:6f:ac:b4:df:82:7f:70:b4:
d6:91:71:0c:68:3b:5d:f9:a6:ef:c4:ca:dd:8f:49:d4:b3:5d:
7d:88:dd:1c:66:cb:1c:15:33:3f:99:c2:67:ec:8c:fc:5a:6c:
28:06:db:88:85:d1:0f:96:f1:ff:2c:08:d4:d8:bf:68:51:3f:
93:72:63:b0:55:28:58:21:4c:ba:81:0a:c8:66:dd:44:74:c7:
4f:24:dc:a7:b4:a7:9a:44:ab:90:37:57:da:eb:76:01:e5:ca:
4b:ea:55:13:ec:5e:6a:ec:28:ee:b5:7a:a4:96:16:0e:5d:da:
81:e8:a3:cf:d8:8b:e8:9f:ad:c0:f5:8b:89:ba:ea:d1:49:ac:
8a:88:c5:48:04:da:40:3c:f1:b0:5a:85:28:bb:ea:07:07:81:
ed:01:89:02:b2:36:a8:92:9a:bf:b4:a9:ea:10:aa:e0:49:97:
07:39:d4:2a:e6:c3:1c:59:a5:45:2d:66:2d:ef:8b:07:d0:2f:
db:28:fa:b9:6a:1c:c2:b5:bf:f2:4d:3d:24:59:44:e1:15:a6:
f8:03:18:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:47:01 2025 by rpki-client