Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASUS/O6dv-S0WwFrI4AFVncaOMZuV8CM.roa
File: O6dv-S0WwFrI4AFVncaOMZuV8CM.roa (raw, json)
Hash identifier: KlUGl3JZoaJgQ31voeIKAu1LgyfOS/J+vadIiETAu18=
Subject key identifier: 3B:A7:6F:F9:2D:16:C0:5A:C8:E0:01:55:9D:C6:8E:31:9B:95:F0:23
Certificate issuer: /CN=786648F79BB79E1F0B0FF9039692F74E4F3CE1F8
Certificate serial: 0BDF
Authority key identifier: 78:66:48:F7:9B:B7:9E:1F:0B:0F:F9:03:96:92:F7:4E:4F:3C:E1:F8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/eGZI95u3nh8LD_kDlpL3Tk884fg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASUS/O6dv-S0WwFrI4AFVncaOMZuV8CM.roa
Signing time: Mon 26 Aug 2024 05:09:48 +0000
ROA not before: Mon 26 Aug 2024 05:09:48 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131144
IP address blocks: 103.10.4.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 20:35:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3039 (0xbdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=786648F79BB79E1F0B0FF9039692F74E4F3CE1F8
Validity
Not Before: Aug 26 05:09:48 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=3BA76FF92D16C05AC8E001559DC68E319B95F023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0d:a8:94:9e:32:2e:5b:1d:fd:11:32:e3:9d:
04:e0:c7:f3:b6:ac:e6:5a:90:35:8f:04:b1:2c:22:
b7:5e:f9:71:a6:08:4c:24:7a:8a:d2:81:51:7a:2c:
b6:53:03:db:13:54:a1:a1:ed:f3:82:98:c3:5d:75:
d1:1e:6c:67:32:50:db:23:60:53:6f:62:c9:86:11:
82:9d:ef:ea:b6:1a:ac:6d:dc:53:93:21:23:51:76:
18:fe:14:29:b6:34:4f:bb:f4:5f:e0:76:e3:6b:30:
f6:60:eb:93:77:85:bc:7b:04:06:fe:d4:f5:5f:a2:
fd:48:5e:af:45:c0:a6:08:df:c3:8c:1e:35:84:aa:
5c:1b:e6:e5:17:0e:4b:94:3d:ed:f9:2e:f2:10:7b:
0b:54:1f:6c:9e:b5:67:c5:d8:20:c0:29:f8:dd:21:
f1:7a:61:20:88:57:56:92:04:ce:51:53:8f:fd:ac:
08:4d:20:0b:2b:5a:c1:78:dc:65:7a:c4:23:49:0a:
97:62:c8:e1:e6:f3:e1:87:fa:f0:0e:50:28:8c:ed:
02:c2:5a:ef:5e:c4:3e:9d:3c:ea:9d:1c:65:1f:b6:
ea:08:98:d9:91:41:52:69:61:34:ad:ab:6b:b1:96:
85:c5:70:ed:59:47:e2:89:4f:b0:c6:c2:3b:6f:ac:
8b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A7:6F:F9:2D:16:C0:5A:C8:E0:01:55:9D:C6:8E:31:9B:95:F0:23
X509v3 Authority Key Identifier:
keyid:78:66:48:F7:9B:B7:9E:1F:0B:0F:F9:03:96:92:F7:4E:4F:3C:E1:F8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASUS/eGZI95u3nh8LD_kDlpL3Tk884fg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eGZI95u3nh8LD_kDlpL3Tk884fg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASUS/O6dv-S0WwFrI4AFVncaOMZuV8CM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.10.4.0/22
Signature Algorithm: sha256WithRSAEncryption
04:fd:de:1a:c9:de:cc:01:0c:3b:93:98:9f:4d:1d:ea:c6:37:
61:52:a7:00:83:b0:74:15:17:41:ce:da:9b:24:d3:2f:b7:bc:
af:5c:54:1b:02:27:58:b6:6f:18:c2:38:6c:dd:b0:74:b8:b9:
aa:8a:a0:2c:25:d1:e0:78:da:32:4d:f1:02:d4:55:90:07:e0:
a9:e1:f0:b7:ba:2c:00:12:86:a0:02:58:e3:5c:7b:1b:28:a9:
22:b4:0d:2b:0c:b8:1d:8d:8a:56:14:7e:9b:8e:d9:20:d6:4e:
77:eb:a6:c5:61:1d:3f:8f:09:0d:33:cc:5b:4b:d6:21:2b:47:
c2:05:4d:61:49:4f:f5:d0:c0:58:2d:90:86:77:15:55:bb:fb:
24:89:e9:48:77:24:c5:e6:71:17:5e:6f:c0:9a:e3:61:19:90:
b6:b2:17:94:bb:92:2d:6e:3e:38:98:f3:43:c8:54:9e:c3:33:
5f:1f:d6:13:a0:d7:47:ef:6a:1b:82:12:6a:e3:e2:f1:7a:e3:
5b:74:ee:fe:a8:1a:db:a8:c2:aa:db:73:93:1d:2c:15:4f:a9:
3a:00:fd:04:ef:d4:cb:92:8e:c2:c6:44:64:82:04:cd:dc:97:
04:49:9b:cb:14:d1:20:2a:33:87:14:74:95:32:62:ca:68:c9:
99:65:7c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:17:23 2025 by rpki-client