Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SPETW/S6wQg4pa3wX2WWEWbC9PrJTPKkM.roa
File: S6wQg4pa3wX2WWEWbC9PrJTPKkM.roa (raw, json)
Hash identifier: uZ6qDu5lJL7vfKz5Jb/jHDLXGWwklVvLim6sg0N4lQc=
Subject key identifier: 4B:AC:10:83:8A:5A:DF:05:F6:59:61:16:6C:2F:4F:AC:94:CF:2A:43
Certificate issuer: /CN=6F8C92DFC78CBFE8C5EFD6BA5A37A1628221FFE2
Certificate serial: 0C00
Authority key identifier: 6F:8C:92:DF:C7:8C:BF:E8:C5:EF:D6:BA:5A:37:A1:62:82:21:FF:E2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/b4yS38eMv-jF79a6WjehYoIh_-I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SPETW/S6wQg4pa3wX2WWEWbC9PrJTPKkM.roa
Signing time: Mon 26 Aug 2024 05:26:39 +0000
ROA not before: Mon 26 Aug 2024 05:26:39 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131623
IP address blocks: 103.117.4.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3072 (0xc00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6F8C92DFC78CBFE8C5EFD6BA5A37A1628221FFE2
Validity
Not Before: Aug 26 05:26:39 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=4BAC10838A5ADF05F65961166C2F4FAC94CF2A43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0e:7c:dc:74:7b:f0:11:68:07:5a:24:d6:71:
5f:0e:d7:21:1d:e1:fe:0c:e1:c6:6e:9f:50:cb:c3:
77:f4:87:f6:30:c0:01:e8:6d:a4:ed:e7:bf:c3:08:
09:c9:c5:7d:22:c5:cb:e7:61:c0:99:60:59:17:86:
e7:a0:d1:f0:0a:19:0c:c7:4a:75:ed:a6:06:09:79:
37:c1:2e:a3:2b:67:cf:f6:6c:05:75:7c:f6:68:8f:
22:9c:db:47:62:bd:e7:6f:aa:6e:25:6f:91:c9:ba:
fd:a7:23:61:45:78:eb:08:d1:2d:cd:7a:f2:6d:e0:
b8:21:0d:76:79:d9:07:c9:af:d2:6f:ab:41:34:49:
ab:f8:b3:51:4f:76:80:8b:3a:05:ca:62:72:92:f9:
1e:5c:44:c0:33:08:31:5a:37:a3:04:37:9c:ec:ca:
01:26:a9:5d:16:44:b5:53:ae:ec:79:e8:1e:cf:2c:
3e:65:0c:1c:70:9e:0b:4b:11:08:1b:a4:77:cf:8a:
30:b8:11:e9:a9:ae:5f:77:45:a7:b9:54:94:d0:aa:
bb:05:14:a6:49:5b:0d:dc:7e:68:33:b1:8b:10:a9:
ef:77:a8:cb:08:61:e2:f6:af:be:87:0e:78:da:52:
97:db:ca:32:ff:b3:80:b0:c5:81:10:26:ff:c4:1e:
19:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AC:10:83:8A:5A:DF:05:F6:59:61:16:6C:2F:4F:AC:94:CF:2A:43
X509v3 Authority Key Identifier:
keyid:6F:8C:92:DF:C7:8C:BF:E8:C5:EF:D6:BA:5A:37:A1:62:82:21:FF:E2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SPETW/b4yS38eMv-jF79a6WjehYoIh_-I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b4yS38eMv-jF79a6WjehYoIh_-I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SPETW/S6wQg4pa3wX2WWEWbC9PrJTPKkM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.117.4.0/22
Signature Algorithm: sha256WithRSAEncryption
97:59:34:74:8b:b2:29:9d:0e:74:6a:d6:94:53:3b:16:f5:e2:
05:c0:9e:4d:f1:6c:0d:02:a9:f4:5c:17:7c:e1:eb:55:45:8b:
9c:9a:55:15:0d:f1:d7:5c:27:57:d1:8e:e5:ac:aa:25:fc:f4:
f5:4d:83:a8:fa:e3:8a:37:9e:79:64:99:46:67:37:87:1c:98:
a8:0f:71:e2:34:b1:0e:be:30:d0:08:1c:f1:d3:3d:ed:8c:97:
1e:c5:48:77:b8:5f:b2:4c:bf:9e:aa:80:3d:07:a6:36:d8:bd:
a7:df:47:03:a2:ca:62:e4:5c:f9:4e:97:7a:19:57:af:c8:eb:
a3:53:fa:71:02:90:46:a9:5a:7a:3a:18:bf:8a:70:86:dd:fc:
3b:73:92:43:93:21:df:c0:ee:8f:87:2e:b9:24:d4:a2:ff:b7:
e5:af:cc:32:e6:1c:99:14:73:38:a2:6e:8f:19:9c:de:23:0c:
3d:f9:1f:ae:d5:42:8d:18:fe:78:15:06:2e:b8:c1:5e:aa:b4:
7d:76:4a:be:7f:de:49:3b:6e:a6:51:9b:c8:1c:37:32:cc:14:
7c:c6:75:ae:e7:4d:2b:8e:39:5a:49:4f:47:d5:10:0d:0b:9b:
90:4a:6c:60:04:9e:2b:c1:95:e5:db:2a:b3:1c:32:6b:71:c0:
d6:e7:02:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:44:51 2025 by rpki-client