Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/D1tAC357mHvOrKeFWMgaRjXSrtI.roa
File: D1tAC357mHvOrKeFWMgaRjXSrtI.roa (raw, json)
Hash identifier: LDRCLo5hSgXAblQA3YSBpZd3rpok3H1SJzIAqL0Bw+g=
Subject key identifier: 0F:5B:40:0B:7E:7B:98:7B:CE:AC:A7:85:58:C8:1A:46:35:D2:AE:D2
Certificate issuer: /CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Certificate serial: 0CA6
Authority key identifier: DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/D1tAC357mHvOrKeFWMgaRjXSrtI.roa
Signing time: Mon 26 Aug 2024 05:26:55 +0000
ROA not before: Mon 26 Aug 2024 05:26:55 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131584
IP address blocks: 103.31.196.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:23:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3238 (0xca6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Validity
Not Before: Aug 26 05:26:55 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=0F5B400B7E7B987BCEACA78558C81A4635D2AED2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:17:39:d5:65:4a:25:8d:29:4f:5a:a4:00:4e:
6f:74:bd:57:25:d7:7f:87:c7:97:af:3a:b0:05:25:
62:97:b7:f5:2f:81:eb:4a:f6:82:85:6b:f4:17:9e:
d0:01:59:21:97:35:47:34:73:7e:7d:bb:14:04:07:
c6:2a:19:a9:72:c9:ec:d0:c3:f0:fb:6d:0c:57:00:
83:2e:4a:32:1c:c6:17:62:30:11:d4:78:8a:a6:a6:
8d:79:98:3a:99:5c:57:53:96:96:22:80:ec:a8:9f:
90:02:4e:1f:bb:b0:07:52:81:d4:0a:81:85:a6:d9:
5c:c2:12:e5:06:33:60:f9:14:31:5e:c4:16:bf:24:
55:72:87:b1:c7:4e:dd:3c:c8:9c:82:2b:cd:28:a2:
8b:63:dc:d9:87:69:3f:89:2c:0c:61:08:ed:b6:99:
13:a6:82:c9:a7:56:59:48:75:ce:48:d5:a0:85:df:
61:bb:b3:20:b7:da:b1:6e:46:1a:fd:96:a5:4d:1d:
af:71:52:41:81:7a:50:28:2a:c1:19:94:67:54:85:
4d:7c:23:82:31:27:07:f9:10:e9:64:14:15:2e:70:
6c:2e:b7:b8:e6:94:01:11:e7:4e:4d:b0:97:ac:54:
c1:c8:e1:f3:23:72:df:32:fa:d4:7c:a2:eb:88:cc:
14:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5B:40:0B:7E:7B:98:7B:CE:AC:A7:85:58:C8:1A:46:35:D2:AE:D2
X509v3 Authority Key Identifier:
keyid:DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/D1tAC357mHvOrKeFWMgaRjXSrtI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.31.196.0/22
Signature Algorithm: sha256WithRSAEncryption
42:b9:7b:2e:ad:f8:00:d3:6e:e5:a2:90:2c:62:51:0e:5d:2f:
76:f1:16:ef:8b:b7:11:78:9e:9e:42:70:4c:b9:30:a2:91:e8:
56:d6:4a:ff:28:a1:bb:de:d6:67:c2:9d:80:e7:a2:42:34:2a:
94:ab:45:ab:66:16:27:60:e4:78:36:46:d3:95:94:ee:82:a1:
61:ae:f8:21:25:8b:df:0c:e3:ed:dc:a5:ba:25:3a:23:00:a0:
25:66:65:e3:27:b0:47:a7:eb:b6:cc:83:e2:0c:f8:6f:30:d2:
88:73:67:2f:fe:e0:bc:a0:50:04:9c:d8:9c:0d:9f:14:44:58:
6b:c5:23:5c:50:39:94:06:0d:d6:0f:a4:df:dc:9b:c3:87:da:
18:5c:5a:78:9b:37:1a:c6:bc:69:34:e5:e7:19:c1:de:cb:67:
c5:a5:cf:dd:a5:cb:7e:c7:5b:85:8e:20:88:28:ce:42:eb:0c:
1c:44:cd:98:45:0a:5a:ef:c3:9e:96:ad:11:97:99:0b:00:11:
e4:3f:55:4b:68:02:22:99:ce:93:4c:e5:70:d9:01:85:d6:0a:
0b:61:00:3f:e8:f2:8d:0a:3d:b1:e8:89:e1:c6:ea:13:6f:89:
7e:2e:25:f5:fb:82:1d:a6:fd:cf:54:b3:30:e9:74:e8:1f:ec:
60:cd:7d:35
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICDKYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREY1
NjczQTE5NzIxMjZFN0QyQ0M1RDRENTFCNDkxMDgzNDVCRjhDOTAeFw0yNDA4MjYw
NTI2NTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBGNUI0MDBCN0U3Qjk4
N0JDRUFDQTc4NTU4QzgxQTQ2MzVEMkFFRDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCjFznVZUoljSlPWqQATm90vVcl13+Hx5evOrAFJWKXt/UvgetK
9oKFa/QXntABWSGXNUc0c359uxQEB8YqGalyyezQw/D7bQxXAIMuSjIcxhdiMBHU
eIqmpo15mDqZXFdTlpYigOyon5ACTh+7sAdSgdQKgYWm2VzCEuUGM2D5FDFexBa/
JFVyh7HHTt08yJyCK80oootj3NmHaT+JLAxhCO22mROmgsmnVllIdc5I1aCF32G7
syC32rFuRhr9lqVNHa9xUkGBelAoKsEZlGdUhU18I4IxJwf5EOlkFBUucGwut7jm
lAER505NsJesVMHI4fMjct8y+tR8ouuIzBThAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUD1tAC357mHvOrKeFWMgaRjXSrtIwHwYDVR0jBBgwFoAU31ZzoZchJufSzF1N
UbSRCDRb+MkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJRk83
NzE2LzMxWnpvWmNoSnVmU3pGMU5VYlNSQ0RSYi1Nay5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvMzFaem9aY2hKdWZTekYxTlViU1JDRFJiLU1rLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJRk83NzE2L0QxdEFDMzU3bUh2
T3JLZUZXTWdhUmpYU3J0SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJnH8QwDQYJKoZIhvcNAQELBQADggEBAEK5ey6t+ADTbuWikCxiUQ5dL3bx
Fu+LtxF4np5CcEy5MKKR6FbWSv8oobve1mfCnYDnokI0KpSrRatmFidg5Hg2RtOV
lO6CoWGu+CEli98M4+3cpbolOiMAoCVmZeMnsEen67bMg+IM+G8w0ohzZy/+4Lyg
UASc2JwNnxREWGvFI1xQOZQGDdYPpN/cm8OH2hhcWnibNxrGvGk05ecZwd7LZ8Wl
z92ly37HW4WOIIgozkLrDBxEzZhFClrvw56WrRGXmQsAEeQ/VUtoAiKZzpNM5XDZ
AYXWCgthAD/o8o0KPbHoieHG6hNviX4uJfX7gh2m/c9UszDpdOgf7GDNfTU=
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:49:24 2025 by rpki-client