Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WANIN/aMRBPCzVvabO3TTBLpOctFxr5s0.roa
File: aMRBPCzVvabO3TTBLpOctFxr5s0.roa (raw, json)
Hash identifier: FFcEYx667HjKNh44hrDWBuQW0yJUexU5D24hlN5oYsM=
Subject key identifier: 68:C4:41:3C:2C:D5:BD:A6:CE:DD:34:C1:2E:93:9C:B4:5C:6B:E6:CD
Certificate issuer: /CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D
Certificate serial: 12A1
Authority key identifier: C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/aMRBPCzVvabO3TTBLpOctFxr5s0.roa
Signing time: Mon 26 Aug 2024 05:34:52 +0000
ROA not before: Mon 26 Aug 2024 05:34:52 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131636
IP address blocks: 103.130.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:26:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4769 (0x12a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D
Validity
Not Before: Aug 26 05:34:52 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=68C4413C2CD5BDA6CEDD34C12E939CB45C6BE6CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8a:12:6d:62:33:7f:4f:ad:7f:f3:eb:c6:d6:
a7:61:f1:00:5f:5a:bb:79:c2:2c:31:2a:b7:de:64:
5f:9b:3e:90:51:19:50:a8:34:a8:05:06:ce:39:5e:
ec:a3:8e:05:8c:fa:c6:e6:8e:04:a2:f6:df:33:86:
9e:c5:6f:7d:96:1a:97:c8:2f:19:f1:29:de:6d:6e:
b3:a3:56:48:81:e9:3e:8b:a2:db:96:9e:0b:30:a6:
4b:aa:55:0d:6e:8b:8d:e4:e5:1e:64:ab:85:b7:19:
0c:39:d4:a0:e1:1d:4d:27:96:2c:19:e6:b2:35:d7:
35:e9:87:08:fd:6b:41:b7:33:db:5e:0e:7d:92:f3:
06:92:96:d5:c9:86:ef:6a:70:cb:5f:cc:03:d4:99:
8a:7c:b7:1e:96:16:8d:e7:d7:9c:f2:5f:94:96:62:
99:36:b0:54:2c:94:69:f4:09:8f:97:d9:2d:5d:a2:
73:8f:0e:99:a2:28:5d:0d:8e:bb:a9:45:a7:5d:fc:
43:05:38:c2:63:e6:75:ab:0b:64:54:19:6c:f6:77:
59:20:3d:c8:e5:1f:b3:37:3b:d5:35:82:35:29:d1:
12:d7:12:3a:95:0f:8d:0e:1e:41:26:48:19:67:f8:
8f:6c:20:38:16:2e:8c:0e:40:da:29:d2:4a:0a:bd:
b2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C4:41:3C:2C:D5:BD:A6:CE:DD:34:C1:2E:93:9C:B4:5C:6B:E6:CD
X509v3 Authority Key Identifier:
keyid:C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/aMRBPCzVvabO3TTBLpOctFxr5s0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.124.0/24
Signature Algorithm: sha256WithRSAEncryption
03:75:e3:76:76:b7:8c:1f:60:b5:b0:55:b6:d6:f4:bb:c9:07:
b0:02:26:ce:0e:12:42:8b:af:6c:33:6b:bd:a4:00:da:b2:b0:
71:a6:2b:62:92:de:a9:0a:d3:40:61:ff:ba:f0:36:19:a9:9c:
92:e2:3a:f5:a1:ad:b5:0e:0f:a5:23:20:5f:97:ca:8e:0a:a3:
fa:f2:b1:da:97:d0:4c:90:87:28:c4:b9:40:96:c8:f7:4c:b4:
07:56:32:a0:8c:db:ed:97:fa:d0:c1:cf:ef:fd:31:c6:3e:92:
5c:8f:40:e1:c5:d2:95:49:77:ce:fc:d4:a0:fa:34:34:b9:fa:
a4:3f:8a:4c:94:ba:05:6a:39:a2:1d:f6:a3:db:9a:85:43:7e:
f9:69:c4:42:96:1f:90:d6:30:8c:52:ce:09:3d:07:0a:73:79:
ad:81:d9:c2:b8:fb:cb:17:a6:d8:3d:3b:8d:31:9f:ea:9f:ec:
4d:2f:89:81:a1:2a:c2:da:47:2b:23:a4:d0:09:70:ab:70:29:
52:f9:52:09:66:cc:7c:1d:0b:d4:69:89:29:2d:5f:2f:ee:7e:
41:8f:4f:62:d6:b5:5f:1c:f9:26:de:44:50:1a:b6:f3:48:35:
d6:7b:d5:da:05:4d:75:68:62:ca:26:fb:03:77:2c:4c:68:4d:
5f:4b:01:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:19:57 2025 by rpki-client