Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MYSENSE/NGLAZ5o7u4Ou1kWIM6ZNjBjnl_M.roa
File: NGLAZ5o7u4Ou1kWIM6ZNjBjnl_M.roa (raw, json)
Hash identifier: y5z8QH4QhPCXLdCbSEdG5sgzVosOpW/b2ZdCVEuJ0ro=
Subject key identifier: 34:62:C0:67:9A:3B:BB:83:AE:D6:45:88:33:A6:4D:8C:18:E7:97:F3
Certificate issuer: /CN=98A5C390143149481DE79BC17BB62DBA2271F61F
Certificate serial: 0388
Authority key identifier: 98:A5:C3:90:14:31:49:48:1D:E7:9B:C1:7B:B6:2D:BA:22:71:F6:1F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mKXDkBQxSUgd55vBe7YtuiJx9h8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MYSENSE/NGLAZ5o7u4Ou1kWIM6ZNjBjnl_M.roa
Signing time: Mon 26 Aug 2024 05:21:19 +0000
ROA not before: Mon 26 Aug 2024 05:21:19 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131618
IP address blocks: 103.159.120.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:19:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 904 (0x388)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98A5C390143149481DE79BC17BB62DBA2271F61F
Validity
Not Before: Aug 26 05:21:19 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=3462C0679A3BBB83AED6458833A64D8C18E797F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:0e:84:8b:c5:86:a4:25:77:b6:b4:bf:34:bb:
ee:48:5c:86:8f:5f:35:5c:31:68:94:92:bd:6a:2b:
f3:0e:a2:e7:9d:d3:61:49:39:79:fa:38:b6:a8:b1:
74:44:38:c8:bd:db:89:fc:6d:01:aa:58:82:df:7c:
a8:6d:05:42:98:e1:77:09:05:dc:c0:5b:22:c2:18:
06:45:4b:40:f0:d0:9c:97:27:27:f4:b9:e4:27:e3:
fb:9f:bc:54:4e:5e:a5:66:31:f9:3d:a9:c2:af:a8:
0f:29:fd:3f:26:63:5e:5d:88:a8:eb:e9:bf:4f:32:
44:c4:a2:f4:65:d6:38:88:5f:15:d9:ce:9d:5e:cb:
7e:bd:2b:8d:80:ea:77:c8:cb:66:9b:92:60:06:59:
7c:1a:c8:0a:5e:d1:51:27:eb:dc:6d:bc:b4:c5:72:
ab:9d:28:47:a0:c1:f8:54:7f:90:d9:02:4a:59:d9:
88:5f:ff:6f:78:94:60:87:2c:80:21:05:61:36:db:
9e:92:d0:63:74:97:d9:ef:67:1d:d1:32:3c:53:92:
a4:1d:26:3e:66:cc:84:0f:d7:a2:e5:85:96:54:51:
e5:40:e1:3e:02:c8:a5:93:c0:7a:29:04:06:40:d1:
fc:dc:96:3d:04:b5:f8:3f:0d:3f:62:e7:44:60:84:
39:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:62:C0:67:9A:3B:BB:83:AE:D6:45:88:33:A6:4D:8C:18:E7:97:F3
X509v3 Authority Key Identifier:
keyid:98:A5:C3:90:14:31:49:48:1D:E7:9B:C1:7B:B6:2D:BA:22:71:F6:1F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MYSENSE/mKXDkBQxSUgd55vBe7YtuiJx9h8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mKXDkBQxSUgd55vBe7YtuiJx9h8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MYSENSE/NGLAZ5o7u4Ou1kWIM6ZNjBjnl_M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.159.120.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:bf:f4:72:71:f2:ca:3f:b4:3a:58:21:ac:61:a6:da:8f:dc:
f2:2e:4e:84:c0:fd:25:81:51:14:70:e0:99:b0:f9:ba:3d:74:
ee:10:ac:3f:5a:9e:9e:70:64:65:37:96:fc:d0:8c:03:c1:a1:
aa:3a:d3:0e:ca:ff:fe:4f:af:c2:36:c6:4f:87:7d:88:96:f0:
66:e7:96:a1:c8:09:49:35:32:6e:60:25:f3:aa:1d:d7:84:39:
c6:1a:71:54:b4:84:a7:fc:09:c8:a1:b3:1e:87:2b:d4:b4:e4:
cc:49:6b:a8:fd:6d:39:2c:8d:57:4d:12:59:6f:a2:1f:41:4a:
76:3d:92:d0:20:d4:26:07:78:47:8d:d5:8a:4f:85:9b:d2:20:
80:50:de:e3:32:db:b7:eb:4a:97:7a:6b:55:8a:ab:32:51:0b:
47:06:d1:28:05:00:53:9d:2c:61:2f:da:28:b2:d7:c9:05:33:
81:fd:18:5a:3f:e3:c4:a3:1b:31:1f:8d:b9:ca:0f:03:43:26:
12:38:50:a6:39:0a:2c:ff:3d:f4:55:b0:d1:a4:a8:79:33:10:
07:2e:e1:6a:e7:12:c1:ac:6a:44:84:4c:05:9d:ee:9c:64:50:
81:15:aa:2a:04:39:51:72:a4:1e:58:3c:46:79:c2:5d:cc:31:
da:19:90:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:16:46 2025 by rpki-client