Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/bjbQS5ShwWHirS7Rcnh-MChyjf0.roa
File: bjbQS5ShwWHirS7Rcnh-MChyjf0.roa (raw, json)
Hash identifier: o946USyoPBDg+MahWms9hLNcrkM/UjPbzyfSBogs5R0=
Subject key identifier: 6E:36:D0:4B:94:A1:C1:61:E2:AD:2E:D1:72:78:7E:30:28:72:8D:FD
Certificate issuer: /CN=1C7073A6066C765842FDF07169E43518A0BB0235
Certificate serial: F1
Authority key identifier: 1C:70:73:A6:06:6C:76:58:42:FD:F0:71:69:E4:35:18:A0:BB:02:35
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/bjbQS5ShwWHirS7Rcnh-MChyjf0.roa
Signing time: Sat 26 Oct 2024 15:48:56 +0000
ROA not before: Sat 26 Oct 2024 15:48:56 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 150755
IP address blocks: 203.175.104.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 20:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 241 (0xf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C7073A6066C765842FDF07169E43518A0BB0235
Validity
Not Before: Oct 26 15:48:56 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=6E36D04B94A1C161E2AD2ED172787E3028728DFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:11:01:57:9d:e9:e3:13:c0:60:87:00:6e:cb:
87:c0:6a:2e:0e:9b:1b:e1:d5:73:af:90:ad:80:83:
e1:85:33:4a:f6:95:68:bb:46:95:96:14:ad:e0:f9:
f0:99:f9:14:2b:ef:76:17:2d:3d:7a:72:d3:37:f1:
07:92:cb:11:3d:52:e1:c9:ba:b2:6b:c5:30:22:fb:
6d:cd:77:51:a4:c3:a5:87:46:28:8c:ec:6f:41:0a:
08:d3:6f:bc:b7:c4:a0:18:b4:84:81:9c:24:54:03:
d5:9a:e5:0f:ab:da:df:e0:18:4b:c2:60:61:6c:54:
94:b4:1f:21:f2:28:15:ef:f8:41:5b:33:e4:4c:b6:
07:96:35:19:36:4f:a6:f0:7e:e7:95:68:c6:75:4d:
c7:22:8f:d4:da:fe:d6:1b:3b:74:b5:f7:95:a0:42:
67:d4:af:66:5c:cb:17:77:44:8b:29:12:4a:75:8e:
51:cf:c7:30:80:bb:09:51:f0:b8:a7:ab:ed:79:4b:
0c:44:d0:0e:18:f4:78:31:4d:80:d1:32:08:a7:58:
f7:c2:85:fc:45:2d:5e:79:5a:aa:b3:88:b7:e6:f0:
14:19:a2:98:fa:2a:4d:c1:60:d9:3a:75:84:23:8b:
83:e7:29:c3:12:4b:7f:66:18:e2:12:96:44:e0:d8:
b8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:36:D0:4B:94:A1:C1:61:E2:AD:2E:D1:72:78:7E:30:28:72:8D:FD
X509v3 Authority Key Identifier:
keyid:1C:70:73:A6:06:6C:76:58:42:FD:F0:71:69:E4:35:18:A0:BB:02:35
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/bjbQS5ShwWHirS7Rcnh-MChyjf0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.175.104.0/23
Signature Algorithm: sha256WithRSAEncryption
91:b4:f2:58:73:07:38:60:bb:4c:9a:5b:d3:f5:55:7d:dd:36:
a7:e4:50:90:86:58:f1:17:2b:ef:66:48:e4:d1:b7:a9:99:47:
a9:b7:88:8b:56:86:12:38:de:57:7a:aa:06:90:f3:e7:f1:79:
3c:54:e6:62:30:75:17:66:28:27:a4:c8:1a:03:51:37:3a:2f:
aa:b8:32:9d:d7:c1:95:5e:8a:a4:e0:25:06:80:37:c4:1d:13:
36:35:47:06:a0:80:a0:40:7d:60:67:a7:9b:ea:d5:81:25:89:
eb:52:a7:a8:03:67:15:07:42:f9:a9:98:a7:fe:cb:b0:86:f5:
1d:ad:4a:b2:90:f7:09:86:b5:82:78:2c:96:47:09:6e:cf:f3:
f1:2d:bf:dd:40:f2:31:9c:45:c9:49:01:39:15:34:20:85:84:
7f:89:ab:02:4e:91:ae:6a:6c:69:13:ee:01:4d:32:d2:7f:40:
4a:f4:ee:3b:21:af:bb:26:e1:3a:0c:19:24:c7:ed:c5:10:d7:
94:a3:8d:f0:29:c0:04:06:1d:47:5a:47:6d:be:c2:d0:85:ad:
bb:fc:5e:66:fd:70:a7:b7:44:51:8b:e3:bc:cb:68:56:ad:b4:
bc:20:bb:16:d9:5b:43:ce:c0:03:13:4c:cc:82:c2:d3:cb:6b:
50:ed:df:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 00:04:31 2025 by rpki-client