Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NSS/34tvChXxZ2p_X_HU7ibKVtATDkw.roa
File: 34tvChXxZ2p_X_HU7ibKVtATDkw.roa (raw, json)
Hash identifier: A5SFGaZdYSDXUPOxYUnfs3NaDbWI2BRPL2KZTGWeuuI=
Subject key identifier: DF:8B:6F:0A:15:F1:67:6A:7F:5F:F1:D4:EE:26:CA:56:D0:13:0E:4C
Certificate issuer: /CN=7957076E29BFC1648EFF71A398BAAC4A9E886820
Certificate serial: 0C0E
Authority key identifier: 79:57:07:6E:29:BF:C1:64:8E:FF:71:A3:98:BA:AC:4A:9E:88:68:20
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/eVcHbim_wWSO_3GjmLqsSp6IaCA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NSS/34tvChXxZ2p_X_HU7ibKVtATDkw.roa
Signing time: Mon 26 Aug 2024 05:23:16 +0000
ROA not before: Mon 26 Aug 2024 05:23:16 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131626
IP address blocks: 103.118.24.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:31:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3086 (0xc0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7957076E29BFC1648EFF71A398BAAC4A9E886820
Validity
Not Before: Aug 26 05:23:16 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=DF8B6F0A15F1676A7F5FF1D4EE26CA56D0130E4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f0:1e:68:b9:6d:b1:f9:d7:55:a2:1a:2c:4b:
ca:eb:41:4f:e6:b3:46:61:20:ae:83:15:68:41:3d:
17:3c:a9:92:25:0b:2a:e0:ea:63:cd:94:49:78:81:
72:d1:00:75:ac:3a:7f:14:4d:c9:b1:8c:2a:97:ce:
7e:f7:70:d2:f9:6b:6d:45:fb:31:d2:5e:92:cc:4f:
d9:2c:bf:44:85:f8:ad:a9:33:97:89:71:76:51:b4:
0d:37:ee:8d:c8:14:7b:c3:e4:06:43:6a:45:a4:f7:
ab:9f:69:b1:eb:6c:74:b7:2e:3e:d5:7e:43:34:c9:
b7:4e:2d:d4:14:cb:35:a8:2b:a1:6b:78:14:82:38:
bc:70:10:f9:05:ae:bc:6a:aa:fb:d9:16:c0:71:4d:
55:c8:85:10:66:50:6e:52:f9:48:0b:c7:e4:e2:d6:
c5:5d:f8:33:79:2e:4a:55:6f:99:b4:9c:57:58:7c:
b2:ac:9b:32:17:b2:d6:d3:5c:0c:bf:5c:d3:28:e4:
06:ae:bb:af:b2:75:89:aa:63:88:46:03:41:a3:fe:
ea:41:5e:7d:02:53:db:22:86:14:6b:b4:88:21:ca:
09:3f:85:c9:e8:8b:bb:55:27:46:f0:d2:86:ba:4b:
9f:7e:e7:9b:cf:36:36:1f:68:20:34:77:ef:ce:22:
7d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:8B:6F:0A:15:F1:67:6A:7F:5F:F1:D4:EE:26:CA:56:D0:13:0E:4C
X509v3 Authority Key Identifier:
keyid:79:57:07:6E:29:BF:C1:64:8E:FF:71:A3:98:BA:AC:4A:9E:88:68:20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NSS/eVcHbim_wWSO_3GjmLqsSp6IaCA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eVcHbim_wWSO_3GjmLqsSp6IaCA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NSS/34tvChXxZ2p_X_HU7ibKVtATDkw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.118.24.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:77:50:72:46:6e:02:7f:89:6b:dc:5b:6f:c4:f5:23:3e:d1:
44:2f:8b:d0:d0:5d:30:d2:b4:61:76:ae:78:55:61:d5:6e:ad:
d1:6b:58:70:94:66:2a:29:f3:70:be:6a:26:ce:9d:d2:2e:e3:
d3:55:22:1a:2f:75:15:96:ac:cc:47:fe:23:02:00:87:dd:c4:
70:b9:15:4a:ef:d6:f6:d1:96:70:68:7c:31:45:e6:f7:f4:e2:
db:dd:c9:c5:f8:bd:3e:66:4d:c6:8c:af:6f:6c:cc:31:cb:24:
2e:87:cf:85:43:31:5c:8f:d2:17:af:58:de:05:50:db:61:31:
28:64:16:4b:d8:22:75:bb:16:3e:89:35:a4:dd:f9:20:71:53:
c8:c5:11:a0:3c:aa:fc:c6:ab:47:15:b9:1a:02:c1:ac:8e:46:
42:f0:cb:da:70:f2:99:6d:2f:4e:ae:81:bc:16:27:7a:72:07:
5d:e4:48:5d:35:11:59:1a:53:48:db:5b:ec:cb:71:ea:36:1c:
f8:c7:d5:95:77:ba:ba:82:65:92:55:9d:c0:27:dd:ea:41:ea:
6c:c4:bd:42:19:80:14:dc:e3:04:5b:84:b3:39:16:04:c2:ff:
89:d0:32:76:61:0f:27:ad:ac:7a:5f:c4:9f:62:4e:b2:25:48:
f2:44:ec:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:48:59 2025 by rpki-client