Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NETGUARD/XDzzC9NfKw1NfcMJNB5NP9Ue9Jw.roa
File: XDzzC9NfKw1NfcMJNB5NP9Ue9Jw.roa (raw, json)
Hash identifier: nT8OUboadoaD1W3A92n2Kl3qvE5vUwYxiP783JZJ7Nw=
Subject key identifier: 5C:3C:F3:0B:D3:5F:2B:0D:4D:7D:C3:09:34:1E:4D:3F:D5:1E:F4:9C
Certificate issuer: /CN=B2C11A2BBD411878ED1B44D79F137D9689C86840
Certificate serial: 0149
Authority key identifier: B2:C1:1A:2B:BD:41:18:78:ED:1B:44:D7:9F:13:7D:96:89:C8:68:40
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ssEaK71BGHjtG0TXnxN9lonIaEA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NETGUARD/XDzzC9NfKw1NfcMJNB5NP9Ue9Jw.roa
Signing time: Mon 26 Aug 2024 05:23:03 +0000
ROA not before: Mon 26 Aug 2024 05:23:03 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131652
IP address blocks: 103.160.224.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:20:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 329 (0x149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2C11A2BBD411878ED1B44D79F137D9689C86840
Validity
Not Before: Aug 26 05:23:03 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5C3CF30BD35F2B0D4D7DC309341E4D3FD51EF49C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f5:d0:a5:b6:22:45:62:fb:8f:0c:62:ef:46:
f0:0e:22:cd:10:8a:a6:de:39:dd:f5:2f:97:a5:24:
c9:d6:9f:01:89:33:b2:1e:f8:6a:cf:61:95:5b:3a:
67:0c:3f:32:86:52:7d:c4:30:c0:29:8f:40:62:aa:
32:c7:64:6d:ce:df:ad:bd:65:60:6d:19:4e:df:9f:
f0:dd:8a:4f:2f:95:a6:d7:09:3c:04:6b:a0:b9:47:
dd:19:71:22:c6:2d:0d:a7:ab:1c:15:0e:c3:24:4d:
47:b4:85:64:18:e9:af:d5:20:f4:d5:73:7b:e6:d4:
12:e3:9a:73:59:65:bc:c5:a9:ff:f8:2c:a2:75:22:
70:dd:43:8d:9f:be:12:2f:c1:d2:7c:0a:1b:07:ba:
73:bb:bb:08:3a:93:c3:ca:6c:4a:9c:c0:a9:22:9b:
84:01:ab:06:e0:18:25:86:cb:34:84:c6:8f:53:b3:
b3:6c:ca:f1:7a:c0:4a:0e:2d:5b:dc:9d:26:c3:02:
49:25:fd:b4:3d:9e:85:c5:34:c1:a7:74:09:b9:88:
12:98:5f:19:c3:3f:d0:ce:bd:91:db:b0:df:86:24:
61:d3:a9:88:ea:6b:96:be:45:c6:9d:0c:90:87:0f:
f4:a4:54:88:04:53:f0:f4:e6:d5:82:1d:df:79:15:
ee:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:3C:F3:0B:D3:5F:2B:0D:4D:7D:C3:09:34:1E:4D:3F:D5:1E:F4:9C
X509v3 Authority Key Identifier:
keyid:B2:C1:1A:2B:BD:41:18:78:ED:1B:44:D7:9F:13:7D:96:89:C8:68:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NETGUARD/ssEaK71BGHjtG0TXnxN9lonIaEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ssEaK71BGHjtG0TXnxN9lonIaEA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NETGUARD/XDzzC9NfKw1NfcMJNB5NP9Ue9Jw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.160.224.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:42:7a:72:1f:3d:b8:d7:01:54:a6:c7:88:5a:95:52:d8:19:
60:93:e0:c5:fd:5e:f8:93:d4:87:0e:38:96:05:a5:a3:0c:eb:
cd:13:c6:45:55:7c:33:a2:98:3d:4e:2f:dd:b9:79:58:55:8c:
63:e6:07:93:df:d9:b7:09:2d:85:f5:46:3a:a6:7e:80:d7:1e:
6f:1f:fc:34:ea:fa:06:2b:0a:ab:3d:41:08:f7:26:5d:fa:76:
f4:47:a3:81:86:3c:29:80:af:f3:2e:d2:83:bb:7c:c2:6d:3c:
d8:9f:ab:b3:3a:06:79:55:55:ff:a9:89:5f:7d:7d:d6:36:80:
18:37:f0:48:8c:9f:b1:aa:e4:e2:58:e9:f1:8d:ee:c9:c1:db:
da:fb:a1:38:92:f2:24:80:7f:e5:3f:2e:bd:da:25:10:38:89:
31:e2:04:34:4a:86:0f:f6:11:16:02:72:c3:18:13:f9:0e:13:
c5:55:2e:c8:22:4a:5a:ab:f5:e8:da:c9:96:5e:87:25:b5:1a:
83:fa:8f:97:40:47:d2:fb:2c:f9:03:e6:5e:9b:4f:e2:db:5f:
4e:05:7f:76:24:83:aa:01:ac:a3:e4:b8:66:6b:35:b9:55:0f:
33:a0:18:79:54:6b:1f:97:66:25:53:31:fd:57:40:4b:45:48:
ed:d2:c2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:29:41 2025 by rpki-client