Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ULC/2tuaRxapsElzRsWgrzb6aqAmCsw.roa
File: 2tuaRxapsElzRsWgrzb6aqAmCsw.roa (raw, json)
Hash identifier: QTXsPgrUlq/5zOAh9So7pczx0Yl8zLITL7kAO3n6YoE=
Subject key identifier: DA:DB:9A:47:16:A9:B0:49:73:46:C5:A0:AF:36:FA:6A:A0:26:0A:CC
Certificate issuer: /CN=BFBB7F7B5C58323490875849B8EDDA495EF17B1B
Certificate serial: 04A7
Authority key identifier: BF:BB:7F:7B:5C:58:32:34:90:87:58:49:B8:ED:DA:49:5E:F1:7B:1B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/v7t_e1xYMjSQh1hJuO3aSV7xexs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/2tuaRxapsElzRsWgrzb6aqAmCsw.roa
Signing time: Sun 22 Sep 2024 17:55:43 +0000
ROA not before: Sun 22 Sep 2024 17:55:43 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131642
IP address blocks: 103.157.42.0/23 maxlen: 32
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:25:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1191 (0x4a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BFBB7F7B5C58323490875849B8EDDA495EF17B1B
Validity
Not Before: Sep 22 17:55:43 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=DADB9A4716A9B0497346C5A0AF36FA6AA0260ACC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0f:47:06:3f:95:94:18:5f:73:03:e9:0e:f2:
af:16:d7:a3:d0:a0:f6:84:9a:d6:90:91:52:62:2a:
56:9b:0f:83:b0:62:61:fd:29:19:0a:21:fa:b0:23:
43:0d:6b:15:51:a1:d4:89:9e:4f:6e:08:02:bc:9b:
c0:e4:80:53:6f:01:fa:c0:2e:b9:01:9c:93:41:95:
a3:f1:56:4d:22:6f:81:52:7a:08:6c:d8:00:8c:2f:
de:43:a6:f5:f6:37:7b:44:17:12:d0:0a:6a:42:14:
58:3f:f3:4d:e6:e8:fb:55:a7:0d:c6:52:dc:36:de:
ad:fe:71:01:d6:64:ed:4a:ea:ae:ca:09:5f:0e:45:
02:63:c3:67:14:e2:76:6c:9c:04:75:66:f6:32:ff:
3b:aa:63:d3:e2:f8:8a:fa:01:19:cd:60:ab:ac:a4:
35:e7:c5:4f:cf:c2:84:43:84:f0:b9:18:77:d3:16:
e5:6b:d9:ba:29:9f:bb:6c:08:7b:1d:93:85:9a:1a:
ff:df:86:84:1a:aa:0e:ad:36:07:1a:70:84:b2:ab:
33:78:dc:ae:9a:f3:56:31:09:56:eb:4d:35:02:25:
d6:49:ff:d2:8f:ed:a6:14:4a:9f:61:8e:14:2a:72:
60:1f:f4:3e:05:52:b6:69:df:0e:bb:a9:49:73:f8:
d8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:DB:9A:47:16:A9:B0:49:73:46:C5:A0:AF:36:FA:6A:A0:26:0A:CC
X509v3 Authority Key Identifier:
keyid:BF:BB:7F:7B:5C:58:32:34:90:87:58:49:B8:ED:DA:49:5E:F1:7B:1B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/v7t_e1xYMjSQh1hJuO3aSV7xexs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/v7t_e1xYMjSQh1hJuO3aSV7xexs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/2tuaRxapsElzRsWgrzb6aqAmCsw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.157.42.0/23
Signature Algorithm: sha256WithRSAEncryption
ca:10:84:1f:15:b4:f8:da:8e:cd:d0:e0:36:be:90:bb:e0:88:
9f:27:53:93:69:9f:60:08:cf:b2:90:9e:c7:47:66:b4:ac:cd:
80:ac:c8:33:2e:1c:c7:35:da:c3:32:49:df:3d:50:e9:d0:66:
0c:66:b9:32:58:c1:05:3c:7e:6f:71:52:41:92:47:d4:63:6a:
09:55:90:92:c9:ce:a8:09:b3:2c:36:f2:e5:9a:05:3b:f1:8f:
36:3a:53:9d:ed:b2:16:ff:9c:e5:76:c2:30:a6:bb:d6:a5:7a:
0e:3a:d5:06:82:9c:79:1e:38:3d:12:97:8a:33:98:aa:39:e5:
b1:ac:50:2d:73:ca:65:fc:b8:51:d0:0f:95:d1:f1:2a:b5:06:
f2:00:78:20:7a:87:d3:60:d7:87:43:a3:5a:e0:f6:7a:35:74:
33:fe:58:60:19:38:8c:cd:bc:4a:ee:c1:f0:73:cd:8d:24:fe:
d3:03:38:ec:1b:8f:b0:e5:78:d5:73:3d:18:64:8d:ba:17:d0:
d2:99:eb:81:d5:24:a9:49:0f:48:4b:56:0d:12:5b:93:5f:bc:
7f:5a:e1:50:d5:f5:97:85:25:30:f4:4f:85:01:c0:9b:ec:51:
25:67:b3:63:8c:61:14:6c:04:e8:4a:c5:8c:55:d2:ae:b1:86:
b1:80:45:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:58:35 2025 by rpki-client