Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/QU2dPofH_-BIsdehCmaITT57tNc.roa
File: QU2dPofH_-BIsdehCmaITT57tNc.roa (raw, json)
Hash identifier: OEFElonVOEraX+7dokvSqNT8S8acpgbZEHrErSuUIRs=
Subject key identifier: 41:4D:9D:3E:87:C7:FF:E0:48:B1:D7:A1:0A:66:88:4D:3E:7B:B4:D7
Certificate issuer: /CN=8A3FD89CE70A14F13ED0A86459224D007DD0A148
Certificate serial: 082A
Authority key identifier: 8A:3F:D8:9C:E7:0A:14:F1:3E:D0:A8:64:59:22:4D:00:7D:D0:A1:48
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ij_YnOcKFPE-0KhkWSJNAH3QoUg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/QU2dPofH_-BIsdehCmaITT57tNc.roa
Signing time: Mon 26 Aug 2024 05:10:35 +0000
ROA not before: Mon 26 Aug 2024 05:10:35 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 40065
IP address blocks: 103.148.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:11:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2090 (0x82a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A3FD89CE70A14F13ED0A86459224D007DD0A148
Validity
Not Before: Aug 26 05:10:35 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=414D9D3E87C7FFE048B1D7A10A66884D3E7BB4D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bd:4f:1b:b0:1b:df:e1:e3:7a:28:4e:d3:26:
23:b3:f1:15:63:b8:2e:54:6b:e7:b4:61:59:75:1f:
40:79:60:78:93:4e:1f:15:72:c7:df:6c:04:b5:d4:
e5:74:7c:43:5c:ed:f8:9e:08:98:28:8c:ce:85:65:
d5:46:19:ef:22:5a:22:f0:e2:6c:61:ab:14:48:6c:
22:f7:4e:4b:31:1c:13:f5:ef:75:b4:6e:02:c0:eb:
70:79:cf:4a:b0:21:43:80:06:5f:ca:01:0b:63:8b:
57:82:14:9d:e9:06:00:10:76:78:fa:9e:c3:42:a1:
97:37:cb:cf:2a:35:72:b4:68:3f:e6:b4:a0:34:15:
50:9f:ab:c3:91:80:6c:62:26:ab:98:3e:44:77:6b:
d7:45:f1:b8:ed:e9:ae:17:6e:ff:df:bd:7f:a0:32:
1d:cd:14:ae:50:91:fc:2e:1a:e0:e7:51:9e:2f:c0:
9b:6e:08:90:66:a1:62:e9:0b:e5:83:71:2b:12:c0:
2d:f6:0d:00:12:f2:52:0e:c6:9e:13:f3:b2:86:6a:
9d:24:bf:ff:3d:7a:d0:c5:1d:49:b3:bb:75:8f:97:
fb:83:0f:4a:74:22:67:fd:4d:4c:63:4f:19:ad:91:
25:ae:79:0f:af:8f:c0:23:98:3e:fa:2a:0b:06:86:
50:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:4D:9D:3E:87:C7:FF:E0:48:B1:D7:A1:0A:66:88:4D:3E:7B:B4:D7
X509v3 Authority Key Identifier:
keyid:8A:3F:D8:9C:E7:0A:14:F1:3E:D0:A8:64:59:22:4D:00:7D:D0:A1:48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ij_YnOcKFPE-0KhkWSJNAH3QoUg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/QU2dPofH_-BIsdehCmaITT57tNc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.148.146.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:92:40:73:68:33:44:0b:92:d3:ef:3c:31:8e:10:ff:04:d8:
4b:04:51:cd:a2:01:12:de:88:de:87:b4:04:73:32:68:c9:cc:
87:6a:c7:21:e6:e7:20:ac:56:cd:2c:67:4f:31:34:f8:13:0e:
47:3b:e8:75:b5:dd:cb:14:5b:df:c5:ff:6b:1c:6f:76:ad:6a:
75:8c:59:9d:7e:e4:c4:ce:6b:d2:12:ab:c8:8a:7c:3f:3a:fa:
d8:f1:cd:8f:76:d5:60:27:e9:ba:29:5d:b5:97:fa:95:af:ca:
3d:09:df:ed:9f:31:28:1e:ce:89:e9:39:02:80:43:55:ce:d1:
12:08:07:2c:b5:49:b6:25:96:91:cc:7d:ce:84:19:12:cb:a4:
77:19:21:15:15:e8:4f:5d:4b:df:36:51:de:3e:6f:f6:45:ea:
c4:1f:d6:5e:92:19:f1:2e:a8:e4:f4:c9:a5:8d:7d:2e:68:b5:
8a:ec:b8:d2:ca:ee:c5:2e:38:9d:35:92:10:15:6b:31:f3:1a:
b2:3e:bf:55:2c:69:8d:41:e9:54:58:aa:fa:48:26:2b:04:7e:
e7:40:5f:02:fe:7b:26:91:ef:b4:5f:49:da:ee:da:a7:42:a3:
ef:de:92:d4:e7:43:16:4b:36:81:88:4b:59:af:1b:e8:09:a3:
cf:06:28:b4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:48:01 2025 by rpki-client