Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WANIN/hRz6dnwZww2VMorKssEh6JvMLWo.roa
File: hRz6dnwZww2VMorKssEh6JvMLWo.roa (raw, json)
Hash identifier: +WSOF+mgwN5eFtDlecU3FGdmSCJV7vMDzKf5MBRkqnU=
Subject key identifier: 85:1C:FA:76:7C:19:C3:0D:95:32:8A:CA:B2:C1:21:E8:9B:CC:2D:6A
Certificate issuer: /CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D
Certificate serial: 12A0
Authority key identifier: C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/hRz6dnwZww2VMorKssEh6JvMLWo.roa
Signing time: Mon 26 Aug 2024 05:34:52 +0000
ROA not before: Mon 26 Aug 2024 05:34:52 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131636
IP address blocks: 103.130.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:26:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4768 (0x12a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D
Validity
Not Before: Aug 26 05:34:52 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=851CFA767C19C30D95328ACAB2C121E89BCC2D6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:01:0b:5a:e6:0c:d3:f6:b3:85:ef:67:c8:06:
9a:2f:b5:24:3b:35:53:e6:b1:b3:60:39:0a:d7:90:
6d:f4:ca:e8:06:8b:81:9e:b6:51:ef:51:96:50:5f:
f5:12:23:68:9c:48:64:8f:ff:bd:84:d5:ff:e5:68:
bf:7a:83:93:61:52:5e:e9:73:b8:84:4a:97:3e:e0:
4f:bb:21:cb:15:a9:7f:c3:a9:67:43:16:22:03:f2:
94:10:84:f0:4c:8a:03:63:f2:f4:1b:dd:c4:b0:f8:
93:7c:88:a9:43:73:e4:13:9b:d5:fc:62:23:70:a3:
15:47:0c:17:6d:d6:b7:80:a6:a2:29:28:5f:cc:42:
9a:6d:33:fa:b8:0e:ef:c9:61:58:4a:2b:1a:99:1f:
ae:f1:0c:66:d1:dd:32:75:c1:b0:9c:cf:1d:38:d3:
a7:d8:92:77:13:a4:f3:11:81:46:39:20:3c:a4:f1:
18:62:98:25:7e:98:db:75:99:b9:60:41:be:bc:4b:
46:d8:91:29:3e:03:c8:f4:a7:07:17:cc:61:cc:5f:
98:62:79:e5:a9:b2:92:67:79:e2:41:fc:aa:e4:a9:
44:0b:9f:11:56:43:6b:ae:ee:14:e6:ff:e0:04:42:
be:ec:19:79:68:5f:92:84:35:5f:e8:89:80:8d:1b:
cc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1C:FA:76:7C:19:C3:0D:95:32:8A:CA:B2:C1:21:E8:9B:CC:2D:6A
X509v3 Authority Key Identifier:
keyid:C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/hRz6dnwZww2VMorKssEh6JvMLWo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.126.0/24
Signature Algorithm: sha256WithRSAEncryption
96:ed:48:54:e4:70:b5:ca:93:3c:5a:dc:48:14:0a:ad:d9:e2:
07:87:9d:3a:a0:93:91:23:02:51:b9:29:1d:b5:78:28:47:de:
d6:90:81:2e:1a:3a:9a:64:58:19:17:5f:9a:02:3d:b7:59:78:
9b:c9:1f:bd:eb:4e:27:7b:43:50:06:2f:a0:84:73:b9:c0:ab:
7f:56:5a:96:c2:a1:71:26:9c:39:56:d0:d9:dd:1b:4a:b5:fb:
86:93:d3:a1:9e:3c:bb:b9:9c:1a:de:a6:e9:70:a3:16:85:19:
ba:0b:18:b3:78:d8:36:8a:02:38:cc:a7:12:ab:f7:51:2b:02:
c9:e8:20:09:5b:83:7a:09:87:6d:54:b7:7f:2c:46:e7:98:ba:
6b:8a:c4:49:b9:bd:38:2a:d1:a4:d3:46:9d:9b:ab:b7:0f:88:
1a:12:3a:5e:ef:e2:28:32:a8:c8:96:e2:53:ee:23:e6:4e:73:
71:f9:21:f3:33:d2:0d:53:36:97:41:bc:9f:a4:e5:7d:18:1b:
30:90:9c:0e:b2:b2:dc:df:dd:1e:c8:61:70:0e:17:b7:ad:41:
8a:53:66:4a:82:6a:45:a3:e0:1d:60:5f:04:94:47:6b:ad:7f:
e7:bd:cf:33:16:e5:b2:9c:b6:7e:75:eb:4d:02:4b:73:4f:3c:
43:b4:d9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:59:19 2025 by rpki-client