Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NKBNET/tCn5GVdb8smMgK6t_m9afMsuO3U.roa
File: tCn5GVdb8smMgK6t_m9afMsuO3U.roa (raw, json)
Hash identifier: 1MeUY4RbmfLyZPsM4JhV3oWbnXgxfkAWPXGI/vamNmQ=
Subject key identifier: B4:29:F9:19:57:5B:F2:C9:8C:80:AE:AD:FE:6F:5A:7C:CB:2E:3B:75
Certificate issuer: /CN=8051F2ECEFC242E9AF9F1E454A4FB796591B8DAB
Certificate serial: 12FA
Authority key identifier: 80:51:F2:EC:EF:C2:42:E9:AF:9F:1E:45:4A:4F:B7:96:59:1B:8D:AB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/tCn5GVdb8smMgK6t_m9afMsuO3U.roa
Signing time: Mon 26 Aug 2024 05:23:11 +0000
ROA not before: Mon 26 Aug 2024 05:23:11 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 7482
IP address blocks: 103.130.48.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4858 (0x12fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8051F2ECEFC242E9AF9F1E454A4FB796591B8DAB
Validity
Not Before: Aug 26 05:23:11 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=B429F919575BF2C98C80AEADFE6F5A7CCB2E3B75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5b:87:c3:36:09:ed:4d:27:04:c1:4b:f9:e8:
70:01:62:db:e3:66:4d:e9:0f:44:9b:1c:f4:05:69:
76:f0:bc:a5:52:6c:5e:a8:77:44:a1:f1:2c:e9:78:
73:2a:6f:60:1f:b3:7e:6f:93:08:79:91:0a:d0:58:
f3:e9:4f:89:6a:ec:d6:ca:fc:06:ff:87:be:fb:cb:
ab:23:c8:8e:e0:74:14:f9:24:fa:3a:d8:78:94:c5:
71:67:4d:72:bc:0e:65:d6:3b:1e:03:bb:9c:3f:a9:
9f:cd:8b:1b:8a:40:b2:5a:24:5a:08:bf:b4:fe:f2:
8c:fe:5f:dd:8b:bc:45:6d:59:a7:ca:5a:f5:01:64:
b8:a3:05:72:5b:4d:ce:47:ee:1f:4e:b5:a5:73:91:
b8:7b:22:65:10:4f:9a:22:e7:91:d6:89:f6:5c:a1:
72:29:98:d7:da:5e:32:ee:65:22:34:fa:8d:49:f4:
2a:91:06:b7:77:ee:7e:1b:eb:39:72:b6:9a:18:44:
f9:81:0e:83:54:09:1c:8f:74:7b:7a:dd:11:55:a0:
09:ef:41:1f:e5:4a:de:dc:50:ff:2d:56:0e:a9:40:
e2:a7:c1:0f:00:89:ce:3f:e2:de:ed:5c:8a:30:c6:
67:3b:7b:ac:2a:10:6c:8a:9a:9e:90:71:54:34:7c:
a9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:29:F9:19:57:5B:F2:C9:8C:80:AE:AD:FE:6F:5A:7C:CB:2E:3B:75
X509v3 Authority Key Identifier:
keyid:80:51:F2:EC:EF:C2:42:E9:AF:9F:1E:45:4A:4F:B7:96:59:1B:8D:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/gFHy7O_CQumvnx5FSk-3llkbjas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/tCn5GVdb8smMgK6t_m9afMsuO3U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.48.0/22
Signature Algorithm: sha256WithRSAEncryption
63:ac:cc:a4:07:77:9a:8c:cb:39:97:d1:eb:8e:fe:72:7a:a0:
c3:8f:77:2d:dd:74:3b:e2:b2:1b:8e:09:8f:51:ac:b1:44:5e:
85:a5:91:7a:96:1e:ee:ea:f1:01:42:f8:49:01:27:3b:16:cf:
c3:84:88:0a:eb:e3:c5:b1:90:10:c1:68:8f:b3:26:69:4c:db:
9f:0c:d8:38:7d:9f:3f:46:af:d8:76:43:39:88:10:d9:29:5f:
9f:4a:4f:49:2b:b1:82:0c:cb:0d:98:41:eb:bd:3a:82:83:33:
52:90:0f:7f:76:d6:a7:52:6b:1d:04:4c:e3:1d:cb:30:83:94:
55:0a:2e:38:51:ad:16:ad:e3:bb:25:8b:73:d8:a8:98:ed:e0:
5e:cd:19:2b:ee:55:f4:da:8d:19:30:3a:3c:f5:3f:62:a2:d3:
ac:c3:bf:d4:71:23:9b:4f:4c:e4:2f:09:95:50:81:6f:d6:a6:
51:be:db:62:ba:28:a0:d0:55:bd:18:46:3f:f4:9f:55:64:61:
09:37:c3:70:40:b1:ac:f8:db:25:08:fd:9a:4a:e6:94:d4:ad:
8f:ea:46:e2:9d:40:b7:5e:b1:52:44:28:3b:bf:43:fa:8d:5d:
4c:0d:dc:14:25:e1:64:54:a2:21:e2:fe:b2:c1:ef:82:62:98:
95:33:1e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:21:33 2025 by rpki-client