Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCREE/CgNFs3GQLbzgTLJvEpAmSq8PVJk.roa
File: CgNFs3GQLbzgTLJvEpAmSq8PVJk.roa (raw, json)
Hash identifier: pQUV8DhbFBDxdDqJAs0FLUxfpZTi1wViDFOHBAr4aSw=
Subject key identifier: 0A:03:45:B3:71:90:2D:BC:E0:4C:B2:6F:12:90:26:4A:AF:0F:54:99
Certificate issuer: /CN=3B49B87A3FF389634C7D090D76DAEAA96FEEFD90
Certificate serial: 0C1D
Authority key identifier: 3B:49:B8:7A:3F:F3:89:63:4C:7D:09:0D:76:DA:EA:A9:6F:EE:FD:90
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/CgNFs3GQLbzgTLJvEpAmSq8PVJk.roa
Signing time: Mon 26 Aug 2024 05:22:55 +0000
ROA not before: Mon 26 Aug 2024 05:22:55 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18183
IP address blocks: 202.5.12.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3101 (0xc1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B49B87A3FF389634C7D090D76DAEAA96FEEFD90
Validity
Not Before: Aug 26 05:22:55 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=0A0345B371902DBCE04CB26F1290264AAF0F5499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f7:49:ed:06:aa:cc:dc:c1:c2:53:43:6b:96:
53:4e:17:26:31:e2:2c:d8:8e:c3:f4:a4:99:c3:09:
7c:05:a6:bf:db:f4:26:4b:21:1b:dd:1a:4d:99:23:
2f:f4:ab:25:80:55:9f:17:0b:88:ea:5d:f9:a2:da:
51:37:18:ae:e8:ba:e8:38:3a:20:eb:4a:74:38:ac:
ef:cf:19:d5:90:0e:92:4c:d2:d6:72:1b:a3:11:11:
cc:4b:d9:48:d9:ef:0c:6c:32:3c:91:3a:6d:48:07:
fa:dd:c7:dd:0f:7f:91:98:f2:aa:33:c6:e7:52:fe:
d6:30:50:44:62:53:95:72:31:79:ea:2d:56:e4:d2:
22:68:26:02:04:5c:2c:d6:b9:fe:78:a0:c0:cb:da:
e1:aa:6f:b6:c9:1e:1e:51:54:ad:c3:81:e4:18:7b:
92:a7:f6:54:9e:f6:2a:2c:40:dd:29:d0:5f:19:cc:
f1:db:71:94:43:b7:4e:f8:83:ca:28:fb:ed:da:75:
5d:54:a9:3d:ca:c4:d6:26:17:58:93:be:6b:21:d8:
e5:28:13:c3:91:a2:ca:f8:76:73:af:c1:4e:1b:38:
02:02:ce:b6:76:30:c8:42:6d:5c:e1:e1:97:ac:4d:
ae:e0:67:90:0b:d6:2f:77:2b:90:67:e8:77:9b:01:
6e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:03:45:B3:71:90:2D:BC:E0:4C:B2:6F:12:90:26:4A:AF:0F:54:99
X509v3 Authority Key Identifier:
keyid:3B:49:B8:7A:3F:F3:89:63:4C:7D:09:0D:76:DA:EA:A9:6F:EE:FD:90
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/CgNFs3GQLbzgTLJvEpAmSq8PVJk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.5.12.0/22
Signature Algorithm: sha256WithRSAEncryption
15:a6:70:e6:b3:74:80:8e:10:67:d1:db:48:84:3c:73:49:74:
6e:36:6b:0e:9c:15:a4:69:58:04:9e:5b:f6:43:5c:1e:90:cd:
3f:a2:66:c0:f0:6f:8c:b0:98:76:47:80:be:d6:18:c5:b3:86:
8a:b0:69:36:6d:1e:82:05:85:c5:3e:bc:4d:15:c1:28:eb:30:
f9:74:2c:29:1f:ad:f5:b5:95:37:b1:fb:02:92:fb:10:22:67:
cc:88:df:59:aa:98:6e:ee:0c:ce:e6:72:b0:22:6f:fc:f3:dc:
7e:98:e0:42:0a:72:5a:5e:23:3f:3b:c0:0c:ff:6f:4d:13:22:
c7:c6:6a:1b:01:0d:1e:9f:f9:df:ac:a5:cc:2e:f3:59:19:a8:
bc:7e:3d:a8:a0:14:9a:b2:99:0e:6d:36:81:a8:e3:71:ec:ac:
d2:18:1b:71:06:ae:ff:28:76:4f:b1:11:b4:d6:52:50:11:43:
16:f0:37:5e:ac:ad:14:03:26:8e:11:ea:ce:d9:c5:80:b9:ff:
61:b4:93:96:c5:40:a8:b9:28:9a:3b:7d:51:eb:f6:98:3c:e0:
5a:36:13:cc:05:04:dd:69:18:2c:9d:ff:b7:48:a9:c1:20:2b:
36:bb:f0:f4:51:42:12:94:fc:57:d7:40:2e:d0:bd:2c:55:42:
13:0c:08:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:29:40 2025 by rpki-client