Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/SpEiR5xSuqRYIO0hiQ-clebM8mo.roa
File: SpEiR5xSuqRYIO0hiQ-clebM8mo.roa (raw, json)
Hash identifier: IBADF5pDP86XDQ685N2mq2HKF/LGmReHXYHZYc9s/lg=
Subject key identifier: 4A:91:22:47:9C:52:BA:A4:58:20:ED:21:89:0F:9C:95:E6:CC:F2:6A
Certificate issuer: /CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Certificate serial: 0CA1
Authority key identifier: DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/SpEiR5xSuqRYIO0hiQ-clebM8mo.roa
Signing time: Mon 26 Aug 2024 05:26:54 +0000
ROA not before: Mon 26 Aug 2024 05:26:54 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131607
IP address blocks: 101.3.188.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:23:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3233 (0xca1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Validity
Not Before: Aug 26 05:26:54 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=4A9122479C52BAA45820ED21890F9C95E6CCF26A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1e:1f:b9:e7:80:d7:21:be:2b:3f:2d:4a:e5:
0e:6c:fe:83:55:10:b4:be:5a:53:9d:7c:69:6d:d2:
41:f2:7b:8c:17:70:2f:4e:b2:51:69:e8:74:2d:1f:
86:1e:04:1b:e1:13:55:48:a5:ef:4a:3e:12:df:e1:
6e:38:ba:a4:33:bc:d2:5e:ca:69:e7:84:77:04:c7:
f4:4a:68:67:c1:5b:0a:e4:75:6e:7b:b6:ab:bf:2a:
ed:e1:18:db:d4:98:81:36:48:60:ed:79:26:33:d4:
d0:3e:42:d2:c5:b7:bc:b7:7b:06:26:c1:e0:df:87:
86:c2:57:12:b3:fa:a3:93:ac:99:f5:5d:fb:32:0c:
ac:09:ed:58:bd:95:57:5b:ab:09:35:6e:45:a0:c1:
b2:35:b3:19:3d:e4:58:6f:9f:d5:a8:c0:7d:b6:a4:
05:01:37:aa:67:bb:69:fb:3f:f3:c6:7a:97:ae:0d:
ec:70:07:e1:79:55:fd:73:3d:df:67:ad:8e:10:6f:
e2:3e:33:f9:69:2a:3a:3b:e1:97:05:ca:7d:55:49:
1b:c7:ed:95:52:01:af:0d:b4:de:98:9e:cc:20:4c:
4f:14:0f:2e:e8:b1:fd:8b:00:b5:4a:e2:33:c3:bc:
b0:05:86:3d:fb:5b:1a:28:55:4e:f4:87:90:57:21:
df:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:91:22:47:9C:52:BA:A4:58:20:ED:21:89:0F:9C:95:E6:CC:F2:6A
X509v3 Authority Key Identifier:
keyid:DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/SpEiR5xSuqRYIO0hiQ-clebM8mo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.3.188.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:a3:9b:42:38:90:2a:ee:e9:a8:26:8b:89:9e:49:ee:2a:8b:
b0:50:3d:f2:18:5c:09:78:8a:cf:8d:4e:86:d4:fb:02:51:c9:
cb:93:bc:46:67:f0:28:96:04:6f:ae:8c:f7:66:ea:0b:42:c0:
e8:30:86:54:5f:e3:0e:d4:3d:ca:d9:59:4b:4a:14:4a:3f:6d:
00:bf:0e:b7:3d:29:7c:0d:96:1a:b8:a2:0d:33:96:df:db:d7:
91:5f:a5:92:ff:33:d6:f8:c7:5a:b7:83:c2:34:98:60:99:89:
76:d7:27:c9:a7:37:39:14:e7:9d:93:3d:07:e5:e4:74:be:bc:
a0:3f:ba:28:ef:4a:3f:53:1c:c7:38:9c:a6:ef:00:3c:27:a2:
c3:bf:a9:bf:f1:45:31:ea:d2:ac:37:b7:69:19:b0:7e:c8:f4:
2b:c2:ab:e0:68:31:12:33:74:df:aa:9a:2b:d2:db:e3:48:8f:
7f:1f:2b:16:ee:26:42:f9:14:87:e2:59:d9:f5:15:ca:65:9d:
ca:56:b5:1f:27:e3:82:9d:6a:78:83:b7:ca:1e:15:94:c0:42:
22:91:f1:6f:11:54:08:eb:9c:da:07:29:2c:c3:cb:1b:71:a5:
b2:6f:15:39:6b:e5:2a:2f:ed:aa:50:38:a6:3f:41:63:f7:a5:
70:bb:ff:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:54:16 2025 by rpki-client