Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/Lawn8UtyJ__kTP1DlPc09N5e3jY.roa
File: Lawn8UtyJ__kTP1DlPc09N5e3jY.roa (raw, json)
Hash identifier: ID4iUArdQhw0jhrbjvnz/zgixlxPFNPMQez+TMNMBNg=
Subject key identifier: 2D:AC:27:F1:4B:72:27:FF:E4:4C:FD:43:94:F7:34:F4:DE:5E:DE:36
Certificate issuer: /CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Certificate serial: 0CA3
Authority key identifier: DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/Lawn8UtyJ__kTP1DlPc09N5e3jY.roa
Signing time: Mon 26 Aug 2024 05:26:55 +0000
ROA not before: Mon 26 Aug 2024 05:26:55 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131584
IP address blocks: 111.125.128.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:23:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3235 (0xca3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Validity
Not Before: Aug 26 05:26:55 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=2DAC27F14B7227FFE44CFD4394F734F4DE5EDE36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9a:a1:81:72:d9:54:a2:05:33:c4:70:1c:ef:
60:cf:90:80:28:a5:1e:40:7c:b8:f7:98:01:0c:c4:
53:d3:46:ec:61:a8:d1:ae:6d:97:11:17:03:28:5a:
df:b5:3e:37:e9:4c:e2:d7:f3:a0:74:29:e3:64:5c:
b2:0e:ac:af:c7:26:8f:7c:2d:25:3a:e1:5a:9b:4f:
8e:28:ad:44:cf:8a:21:10:ad:a1:d1:6a:81:fb:43:
80:11:eb:33:e0:6e:1a:06:8d:21:4d:a5:85:bf:1b:
98:e8:74:44:8b:a5:77:72:4c:08:3b:25:ae:34:4d:
af:3e:1f:1a:2b:41:fd:44:6a:78:d4:a0:12:86:6b:
f2:8a:03:24:70:07:4d:a1:47:71:ca:f7:0d:f3:da:
98:3b:23:b3:da:97:af:45:30:ff:0b:35:cb:8d:ae:
94:a5:a6:b3:aa:bb:02:75:a3:85:9c:94:02:d1:ab:
2b:3b:4d:47:db:d6:83:bc:8a:b2:3d:b4:49:ff:a0:
ea:8f:e2:cc:7c:e8:c2:d5:e7:0f:c5:84:48:7e:34:
7e:8a:4c:94:54:e9:27:31:51:30:e0:93:ef:9a:87:
f1:8b:3d:bf:81:6a:f8:8a:f2:9d:68:55:d4:38:fb:
35:c5:0f:cb:3a:67:77:45:7b:1a:06:1c:58:01:f2:
0d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AC:27:F1:4B:72:27:FF:E4:4C:FD:43:94:F7:34:F4:DE:5E:DE:36
X509v3 Authority Key Identifier:
keyid:DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/Lawn8UtyJ__kTP1DlPc09N5e3jY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
111.125.128.0/21
Signature Algorithm: sha256WithRSAEncryption
1d:47:3c:26:0a:08:5a:05:f4:ad:a2:09:f6:87:37:d0:7f:a0:
37:9e:be:01:cc:3f:8b:ba:31:e1:af:90:34:46:f7:f9:36:b5:
d0:ce:9b:1f:0f:86:fa:6d:fe:45:0f:7f:e0:12:98:09:36:89:
f7:32:8c:c1:3f:15:70:7d:48:5e:b4:23:9a:b8:b5:23:a6:9a:
f8:af:ea:82:f5:a9:8a:25:9d:93:f3:44:2c:5c:fc:f6:80:57:
c0:b0:3f:37:78:1b:17:e4:9c:a5:30:ad:75:5b:44:20:b2:5c:
b7:47:7b:f7:5d:57:04:fe:48:c1:52:02:a6:ae:0e:9b:65:3a:
05:73:31:31:db:12:cc:a3:71:61:9b:d7:56:83:ba:8a:5c:7c:
d1:48:43:36:15:87:8b:68:5f:f0:f2:13:18:2c:3f:ce:2e:94:
3e:43:47:90:1e:50:a0:97:58:c4:3f:9b:9c:6f:7f:60:81:cf:
22:90:96:3f:d3:34:d2:50:5a:44:df:bf:25:66:b0:60:70:a3:
13:1d:77:41:3d:16:68:99:a8:52:51:c2:fb:e1:44:84:b8:d5:
8c:e3:99:81:c5:8a:49:20:d4:e3:9f:be:31:ee:b3:56:11:eb:
6a:3c:73:56:64:f8:e7:c3:cd:78:b6:21:e0:32:8b:d7:4b:df:
7f:eb:96:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:51:49 2025 by rpki-client