Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TOPCHINA/XrBR7oFUkIyDGoKX22h0DL20UH4.roa
File: XrBR7oFUkIyDGoKX22h0DL20UH4.roa (raw, json)
Hash identifier: TGnq/WoNr1WyvNv14lMhYYogojGiFys7H2hXY8G794o=
Subject key identifier: 5E:B0:51:EE:81:54:90:8C:83:1A:82:97:DB:68:74:0C:BD:B4:50:7E
Certificate issuer: /CN=0D677394A7AE27B8B455EFAE93A9A65CFE142D6B
Certificate serial: 1215
Authority key identifier: 0D:67:73:94:A7:AE:27:B8:B4:55:EF:AE:93:A9:A6:5C:FE:14:2D:6B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWdzlKeuJ7i0Ve-uk6mmXP4ULWs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TOPCHINA/XrBR7oFUkIyDGoKX22h0DL20UH4.roa
Signing time: Mon 26 Aug 2024 05:28:10 +0000
ROA not before: Mon 26 Aug 2024 05:28:10 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131659
IP address blocks: 103.124.252.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:57:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4629 (0x1215)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D677394A7AE27B8B455EFAE93A9A65CFE142D6B
Validity
Not Before: Aug 26 05:28:10 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5EB051EE8154908C831A8297DB68740CBDB4507E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1e:a1:f7:3e:c5:e5:e2:2d:35:1e:e7:7b:76:
bd:5b:60:0d:81:b0:ec:0b:08:12:ab:06:46:6c:7d:
24:42:f0:58:b9:40:3f:20:33:ba:4a:f1:a6:76:29:
4b:47:a2:44:df:b3:e4:8e:0f:93:57:c1:3f:11:1a:
ce:e9:02:4a:f6:46:55:d2:0e:ff:9c:05:4e:83:dc:
4c:5d:20:e9:b8:f4:b6:da:c2:a0:bb:c2:3e:71:c7:
cf:ac:f2:f5:31:06:8b:2c:36:9b:ba:86:40:e5:05:
ee:9e:79:76:a4:33:a5:f4:55:bb:ca:c4:5d:20:e6:
e5:86:04:f6:05:8f:69:49:c1:15:18:f3:0e:22:e6:
a5:3a:70:1e:54:f0:88:2b:4b:e0:03:94:e7:29:34:
9a:32:e0:63:63:95:61:ce:13:be:4d:ce:ed:a8:54:
85:de:09:f2:36:88:93:98:a6:2f:38:e2:9c:4e:f0:
7e:97:91:c9:ed:61:fa:45:ab:72:cf:3c:9f:d1:99:
81:81:3e:41:1e:2c:b6:11:20:5c:fe:d7:c8:a9:98:
7a:fa:65:29:cf:3c:c3:b5:69:ab:df:d3:23:21:95:
33:a9:56:b2:85:a0:8a:26:00:88:9a:0e:ee:10:f5:
a1:94:00:b9:50:c2:b9:2d:09:bf:82:64:8c:1f:9f:
ed:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B0:51:EE:81:54:90:8C:83:1A:82:97:DB:68:74:0C:BD:B4:50:7E
X509v3 Authority Key Identifier:
keyid:0D:67:73:94:A7:AE:27:B8:B4:55:EF:AE:93:A9:A6:5C:FE:14:2D:6B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TOPCHINA/DWdzlKeuJ7i0Ve-uk6mmXP4ULWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWdzlKeuJ7i0Ve-uk6mmXP4ULWs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TOPCHINA/XrBR7oFUkIyDGoKX22h0DL20UH4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.124.252.0/22
Signature Algorithm: sha256WithRSAEncryption
47:ab:3b:04:83:66:7c:c7:3d:9e:0a:c3:57:83:ae:cf:28:b4:
96:b9:33:83:09:e5:14:4f:87:62:81:f6:87:05:48:39:58:66:
87:ca:9d:19:93:27:71:38:42:60:dc:aa:f9:75:05:13:4f:17:
c5:a5:e6:8e:62:db:e4:0c:d7:33:96:1d:9f:af:31:5a:41:93:
52:6b:c1:c9:0d:97:81:24:3b:e7:bb:e8:30:e5:20:66:74:79:
99:a0:0b:59:d5:e9:f4:31:75:13:47:96:91:92:ab:d7:ce:9e:
39:13:3d:8f:5e:6c:42:50:89:65:d8:65:cd:5b:fb:79:b3:84:
61:a9:c0:14:63:98:07:19:8f:b9:d8:b2:f3:72:97:b8:c0:bc:
6e:34:c4:d5:67:53:fd:a0:a4:bf:a4:35:a3:6e:a4:35:52:fe:
97:31:ab:9a:b7:8c:f2:5a:9d:94:62:d1:ce:30:63:83:20:5f:
8b:1b:8a:2d:20:cc:d9:09:de:40:13:18:8f:8c:e3:c5:dc:d7:
e3:b6:4a:05:97:99:a9:3d:84:df:93:63:68:b0:1f:1e:a5:6f:
44:52:85:5e:78:a7:02:3e:b6:b5:7e:27:cf:89:cd:41:68:1d:
22:c5:af:e1:6a:90:c9:1c:b0:3b:50:ba:03:6d:29:60:19:cd:
8d:6c:3a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:39:04 2025 by rpki-client