Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCREE/5EoEMmRS7_iJc7ox8Vi6Z3amrj0.roa
File: 5EoEMmRS7_iJc7ox8Vi6Z3amrj0.roa (raw, json)
Hash identifier: WWmJPhgBq4sp+sOOpX7jrHpsj7Np2c8l1JHXDVAks1w=
Subject key identifier: E4:4A:04:32:64:52:EF:F8:89:73:BA:31:F1:58:BA:67:76:A6:AE:3D
Certificate issuer: /CN=3B49B87A3FF389634C7D090D76DAEAA96FEEFD90
Certificate serial: 0C56
Authority key identifier: 3B:49:B8:7A:3F:F3:89:63:4C:7D:09:0D:76:DA:EA:A9:6F:EE:FD:90
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/5EoEMmRS7_iJc7ox8Vi6Z3amrj0.roa
Signing time: Fri 15 Nov 2024 05:51:34 +0000
ROA not before: Fri 15 Nov 2024 05:51:34 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18183
IP address blocks: 103.189.132.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3158 (0xc56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B49B87A3FF389634C7D090D76DAEAA96FEEFD90
Validity
Not Before: Nov 15 05:51:34 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E44A04326452EFF88973BA31F158BA6776A6AE3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b1:e1:88:e9:2d:2a:db:0d:ae:70:29:9a:d2:
86:26:15:10:80:15:6f:cb:82:75:9a:d9:24:6f:95:
af:90:ec:13:c5:26:bf:96:d8:23:3f:e9:64:b8:ee:
dc:4a:59:7a:b6:be:87:7a:07:e1:14:ce:8d:fd:32:
11:f9:fd:ad:75:ac:db:5d:f1:dd:6a:71:d6:91:41:
0d:f6:39:47:94:d4:55:bb:98:54:19:b5:26:8e:fc:
da:8b:24:40:55:02:86:8e:ab:8a:ad:79:4c:df:b5:
ac:2e:72:07:e9:b2:73:64:f6:f5:3c:58:78:b5:8b:
d6:f3:e5:6e:d7:2c:93:e7:72:4a:27:65:0c:85:b9:
52:86:80:17:d1:c9:21:ba:4f:c9:f6:6a:07:eb:ee:
88:c2:0d:4c:4d:4a:54:f2:42:04:6b:ae:03:dd:7f:
75:d3:28:e6:62:9f:bc:94:8d:3e:cf:45:61:4d:8b:
69:ac:27:3c:90:f5:22:9b:f3:b1:4b:ef:26:03:ed:
10:1e:33:4f:84:ca:c2:ef:e4:81:1b:d2:dd:e2:d7:
e4:a8:02:d7:70:10:55:8c:f7:b7:fe:6d:74:5e:9b:
c9:d0:ac:a4:16:09:af:07:a1:ba:1a:49:35:1c:48:
ca:9f:c9:3a:71:87:a7:50:29:24:0d:ff:ae:97:79:
0d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:4A:04:32:64:52:EF:F8:89:73:BA:31:F1:58:BA:67:76:A6:AE:3D
X509v3 Authority Key Identifier:
keyid:3B:49:B8:7A:3F:F3:89:63:4C:7D:09:0D:76:DA:EA:A9:6F:EE:FD:90
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/5EoEMmRS7_iJc7ox8Vi6Z3amrj0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.189.132.0/23
Signature Algorithm: sha256WithRSAEncryption
54:e6:2a:a3:56:d1:da:bd:73:5f:1f:a3:17:f7:71:26:28:6b:
02:29:79:3d:db:a1:22:e0:70:e5:df:71:c5:15:06:2f:47:a9:
be:e3:e6:33:3b:c4:40:d9:d6:4f:d2:73:2d:04:a8:a9:1d:27:
19:da:a0:54:97:fe:98:85:98:df:79:94:9d:d8:7d:c0:87:5b:
fe:28:75:41:30:56:7c:ef:f3:69:8f:9b:2c:40:a3:b7:42:d2:
e6:e3:89:4a:0b:ce:8e:0c:ce:6a:7a:1d:1b:82:a9:da:a8:c0:
4b:c6:11:ed:8d:2c:10:ee:aa:1d:35:b0:e2:9b:ba:62:51:fa:
5e:f0:aa:f7:b6:ad:b9:1e:ff:4d:ab:40:25:83:e3:69:f8:74:
0a:55:ac:d1:b7:05:c1:7f:49:e6:43:bf:f9:c5:c2:0d:a6:ae:
3d:08:fe:c5:e2:d5:b9:49:55:45:a4:90:63:91:cb:6d:b4:d2:
4d:75:51:a0:7d:45:d7:c3:27:23:35:8a:68:00:fe:c2:19:7f:
db:87:82:91:a2:bc:63:68:41:fb:93:1b:0a:76:c4:96:db:0d:
66:a4:0e:0f:46:4d:91:8f:61:31:7e:f1:82:e3:33:6d:a1:89:
70:93:12:1c:64:b5:89:dc:28:67:9d:95:98:14:d3:6a:52:87:
6f:dd:80:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:21:38 2025 by rpki-client