Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MORICLOUD/gC4W1YziPAeFXDe1cc9dK3Y--ic.roa
File: gC4W1YziPAeFXDe1cc9dK3Y--ic.roa (raw, json)
Hash identifier: TbmJIlCTiHO3X/19PUGKrO7s+LkCGNtL75Xg4waMmac=
Subject key identifier: 80:2E:16:D5:8C:E2:3C:07:85:5C:37:B5:71:CF:5D:2B:76:3E:FA:27
Certificate issuer: /CN=34F47974E551C20236C3D89395F57F3BA02B57B7
Certificate serial: 0BFB
Authority key identifier: 34:F4:79:74:E5:51:C2:02:36:C3:D8:93:95:F5:7F:3B:A0:2B:57:B7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NPR5dOVRwgI2w9iTlfV_O6ArV7c.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MORICLOUD/gC4W1YziPAeFXDe1cc9dK3Y--ic.roa
Signing time: Tue 05 Nov 2024 03:29:01 +0000
ROA not before: Tue 05 Nov 2024 03:29:01 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 395793
IP address blocks: 103.129.160.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:03:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3067 (0xbfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34F47974E551C20236C3D89395F57F3BA02B57B7
Validity
Not Before: Nov 5 03:29:01 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=802E16D58CE23C07855C37B571CF5D2B763EFA27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:51:06:2f:7a:04:79:ec:6a:ac:96:f7:77:be:
cd:a2:f9:b7:b4:0b:c1:30:74:06:1c:3c:0d:3f:ec:
75:13:31:13:05:1d:c6:50:c0:96:78:75:8b:c3:60:
77:72:22:63:0d:3f:20:e4:47:b5:3d:c8:ef:5d:95:
dc:44:0d:9d:66:c3:7d:88:3a:8a:0d:8b:61:8b:25:
0e:93:ba:03:a1:72:06:f4:18:f5:fa:96:de:b6:12:
3e:af:0a:a4:a5:46:78:f0:66:d1:dc:0c:47:14:ec:
b8:23:64:2f:0d:24:ed:6b:c0:51:fa:19:59:d2:26:
af:72:75:f3:d6:b4:2c:99:4d:41:3f:3c:b7:0f:8b:
9c:00:4e:8c:1d:82:47:a7:21:21:01:53:33:4e:12:
c4:83:be:dd:1e:1d:62:a2:15:7b:57:94:16:f0:51:
9e:98:79:60:30:c8:56:8c:58:1c:82:08:c6:b2:fb:
bd:b8:a2:81:31:61:98:73:ed:78:71:8e:5e:d0:88:
89:a9:3a:6c:da:b6:a7:ba:30:ab:5d:15:aa:73:b9:
6e:b6:87:b5:ec:ca:f9:46:70:b6:36:4f:cb:8b:a4:
36:99:0c:70:bc:5a:c0:5f:4b:c8:c3:1b:e1:a8:79:
7a:6f:c5:de:95:41:6e:d3:67:03:06:6f:ae:d6:79:
02:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2E:16:D5:8C:E2:3C:07:85:5C:37:B5:71:CF:5D:2B:76:3E:FA:27
X509v3 Authority Key Identifier:
keyid:34:F4:79:74:E5:51:C2:02:36:C3:D8:93:95:F5:7F:3B:A0:2B:57:B7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MORICLOUD/NPR5dOVRwgI2w9iTlfV_O6ArV7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NPR5dOVRwgI2w9iTlfV_O6ArV7c.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MORICLOUD/gC4W1YziPAeFXDe1cc9dK3Y--ic.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.129.160.0/22
Signature Algorithm: sha256WithRSAEncryption
61:3a:c9:e6:82:43:d7:f9:f5:a8:8f:4a:f2:31:75:24:19:2d:
7b:76:c9:1d:08:4d:9c:71:82:68:64:2c:af:fe:b3:a5:d7:ff:
16:29:42:e1:4e:c6:ce:a3:05:f8:a0:27:2c:34:d9:aa:15:85:
65:99:85:04:37:4c:66:75:b1:58:04:bf:79:22:0d:03:31:54:
73:f7:83:d2:d1:5a:b2:40:0f:b5:b2:d0:df:f0:3e:70:aa:c3:
13:95:53:c7:07:b9:f1:17:dc:f1:dd:72:83:f3:54:8a:06:45:
cd:4c:9e:46:93:f4:27:03:58:0d:40:e9:ef:4d:28:7c:e5:0a:
c4:a0:52:05:b2:79:fb:c3:df:c6:b5:0f:8f:75:85:65:f4:49:
32:9f:6d:60:9f:1b:83:73:a8:8d:20:9f:23:74:49:7a:46:c7:
3b:47:8a:3b:59:a3:0a:2e:c7:0f:4b:5d:4d:f4:e5:51:65:ea:
32:08:80:59:12:37:fe:25:22:f3:7b:e9:85:84:03:89:05:45:
7a:43:8f:23:ed:56:7d:71:f4:25:db:0a:47:ee:19:6d:69:a5:
db:e6:b3:f8:80:f9:e4:09:d8:36:57:88:87:f9:d4:2a:2a:f0:
36:4e:87:dc:f5:37:95:b4:3d:19:fc:1d:cd:ab:08:b7:ca:a4:
0c:7a:3c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:38:01 2025 by rpki-client