Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NARL/U0Qu32aFcYyVYsUTPYXp29mL1ls.roa
File: U0Qu32aFcYyVYsUTPYXp29mL1ls.roa (raw, json)
Hash identifier: habKPE5J7k/lWuqEvLFxHy8BHzVDA0I8eehAK1WPpz0=
Subject key identifier: 53:44:2E:DF:66:85:71:8C:95:62:C5:13:3D:85:E9:DB:D9:8B:D6:5B
Certificate issuer: /CN=451EF9359A984F6A4CF91FE9004EAEB089A984C0
Certificate serial: 0C3C
Authority key identifier: 45:1E:F9:35:9A:98:4F:6A:4C:F9:1F:E9:00:4E:AE:B0:89:A9:84:C0
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RR75NZqYT2pM-R_pAE6usImphMA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/U0Qu32aFcYyVYsUTPYXp29mL1ls.roa
Signing time: Mon 26 Aug 2024 05:21:22 +0000
ROA not before: Mon 26 Aug 2024 05:21:22 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 7539
IP address blocks: 203.145.208.0/20 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 11:53:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3132 (0xc3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=451EF9359A984F6A4CF91FE9004EAEB089A984C0
Validity
Not Before: Aug 26 05:21:22 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=53442EDF6685718C9562C5133D85E9DBD98BD65B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:57:3e:82:b9:16:32:34:7b:bf:c8:84:fb:2a:
d2:e1:6c:d0:e0:3e:b2:12:92:c9:97:49:59:87:33:
c0:95:3c:d6:e3:68:cd:a9:e2:76:4c:a7:fe:36:d3:
3c:3b:66:ac:68:ff:5e:b7:c7:a7:a9:86:77:6c:3d:
f2:33:db:0f:fd:09:ab:6f:91:9e:28:2e:3c:fa:b1:
03:76:a2:df:2b:99:68:e9:03:a5:77:ac:a3:a6:e9:
3b:52:a6:14:82:e2:0d:52:4f:6b:ef:65:48:af:fc:
b7:95:b2:b4:cc:69:05:4f:ab:34:0a:98:8e:34:84:
29:3d:51:9d:5e:4c:85:3b:00:e3:54:43:e9:50:d7:
3f:09:bf:a7:bd:d4:97:83:f2:6b:c4:76:2b:49:9b:
00:02:60:f0:fd:59:0a:42:fc:a9:28:ee:a4:5f:f8:
9e:9c:04:46:e1:ae:47:c7:01:a8:de:cf:ad:59:91:
01:9f:c2:09:76:14:e6:79:fd:ad:e4:79:9f:d0:4f:
91:7d:2e:42:4a:c5:c5:0f:3d:88:5d:a8:3e:c8:49:
6e:fa:23:9d:9c:b6:70:00:1f:02:37:15:26:74:ca:
e7:db:50:20:71:ea:8d:90:0e:b3:d2:f6:69:91:b3:
e3:63:b4:69:e6:19:1e:da:e0:cd:a5:d0:98:be:14:
d5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:44:2E:DF:66:85:71:8C:95:62:C5:13:3D:85:E9:DB:D9:8B:D6:5B
X509v3 Authority Key Identifier:
keyid:45:1E:F9:35:9A:98:4F:6A:4C:F9:1F:E9:00:4E:AE:B0:89:A9:84:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/RR75NZqYT2pM-R_pAE6usImphMA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RR75NZqYT2pM-R_pAE6usImphMA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/U0Qu32aFcYyVYsUTPYXp29mL1ls.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.145.208.0/20
Signature Algorithm: sha256WithRSAEncryption
a6:2a:39:b0:22:6c:86:87:12:39:fe:21:e9:f0:40:57:69:d5:
bd:12:35:83:5a:ff:d9:99:1d:50:cb:20:e4:03:8d:ec:ff:b5:
fe:fa:98:dd:dd:89:45:91:9f:69:76:a8:b3:fd:9f:48:67:75:
ba:e8:d0:50:c9:5d:b0:da:5d:58:7e:20:79:08:a2:fa:f8:8f:
f8:da:4a:65:9c:c0:8e:54:b6:71:36:7d:4c:d6:17:07:cd:a0:
46:46:64:b9:ee:de:00:f0:5b:2b:26:53:27:d6:cd:09:48:5d:
db:93:13:d8:7d:a0:fe:4e:1d:a8:71:34:ad:c5:48:04:58:ec:
6f:b6:b4:05:3c:d4:46:6d:ec:78:db:76:74:05:35:bc:0c:08:
60:6b:f5:e2:26:01:3f:4a:c2:57:af:a9:e3:97:d7:56:c2:d8:
84:d5:a1:c8:a9:b4:5e:61:1d:31:95:3f:8a:05:a8:24:e8:07:
90:80:b4:f7:28:65:65:85:56:a9:d1:84:46:15:30:b2:cd:c6:
0b:eb:89:be:80:2c:1e:f3:78:fa:16:75:67:fc:0d:99:67:a9:
27:ef:95:09:15:da:94:90:e4:bc:ba:68:3b:be:23:f0:d8:49:
7e:31:5c:46:50:47:a5:fa:48:19:d6:d9:63:be:55:de:3f:7d:
c3:64:81:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:41:29 2025 by rpki-client