Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CKMATES/CXN3SEQDdgg4f7s6yo9LfHljuvo.roa
File: CXN3SEQDdgg4f7s6yo9LfHljuvo.roa (raw, json)
Hash identifier: In8X1E0QMWF1xcg6HVm0DHdcwBb653bxUWkck1ydCmM=
Subject key identifier: 09:73:77:48:44:03:76:08:38:7F:BB:3A:CA:8F:4B:7C:79:63:BA:FA
Certificate issuer: /CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807
Certificate serial: 0BF8
Authority key identifier: 5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/CXN3SEQDdgg4f7s6yo9LfHljuvo.roa
Signing time: Mon 26 Aug 2024 05:11:27 +0000
ROA not before: Mon 26 Aug 2024 05:11:27 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 16509
IP address blocks: 103.119.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:13:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3064 (0xbf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807
Validity
Not Before: Aug 26 05:11:27 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=0973774844037608387FBB3ACA8F4B7C7963BAFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ff:f0:a2:f5:44:c0:e8:0b:a2:6c:27:de:20:
92:86:18:fb:be:0d:b5:8f:4a:af:45:56:9e:6b:20:
41:2f:fa:ae:98:3a:6e:6f:be:19:49:10:2e:a8:c4:
32:ba:21:b6:e6:cf:a3:7b:aa:65:6e:61:70:4e:85:
69:c4:ca:01:34:c0:c5:84:4a:4b:2a:39:04:9a:47:
5f:7a:d0:27:b7:7b:c9:d7:10:db:60:e0:b3:f9:1b:
05:59:66:3d:cf:01:81:f9:1e:a8:ba:7e:48:84:20:
ce:6c:15:25:64:76:92:63:88:30:4f:fb:12:da:f9:
72:d4:92:19:ee:f6:27:b2:13:73:f2:14:2e:52:f9:
52:d5:8b:dc:1c:4c:a5:c3:b1:da:43:a0:4f:99:49:
4c:de:8b:72:f6:97:f9:2f:7a:3d:88:3a:29:03:85:
3a:84:8c:fb:6e:e7:37:00:be:4f:ec:21:c0:95:21:
ec:f4:62:ee:dc:27:b6:80:4e:76:41:e1:ce:88:5c:
ba:ad:2b:7e:82:e5:34:9a:8d:02:a0:1f:e0:e3:45:
35:3f:df:04:63:4c:c9:2b:41:cf:f5:7c:59:38:8c:
26:8d:0f:0c:da:b3:51:6d:83:aa:bb:98:cd:77:26:
3b:37:2d:21:6e:db:ba:4f:f1:db:c6:e5:dd:80:60:
91:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:73:77:48:44:03:76:08:38:7F:BB:3A:CA:8F:4B:7C:79:63:BA:FA
X509v3 Authority Key Identifier:
keyid:5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/CXN3SEQDdgg4f7s6yo9LfHljuvo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.119.213.0/24
Signature Algorithm: sha256WithRSAEncryption
37:74:cd:d2:e4:e4:f3:20:8c:32:fa:57:30:99:a6:ab:82:31:
1c:4a:0d:72:30:31:09:f8:7d:54:59:61:34:3e:39:12:bb:3e:
91:6a:ed:2f:c6:3d:79:3e:b9:1f:b2:42:8d:c5:73:ae:51:40:
9a:a7:5f:11:06:d2:77:c6:6b:4a:65:38:ea:8f:28:b9:c4:77:
51:5b:a9:c2:39:6f:c7:f1:ba:2a:9f:a8:7d:18:15:a0:e3:e4:
97:12:eb:4d:c3:e3:15:70:c9:d0:16:16:90:7e:a1:e5:e9:f5:
fe:ff:b4:61:82:fa:b8:3e:f4:34:77:c7:2b:41:fd:5b:e7:c7:
bb:12:82:b3:53:78:da:19:f5:e6:9b:43:fe:9f:82:bc:d6:90:
9a:57:21:4d:92:59:1d:e4:88:58:df:a1:a6:6c:4c:2d:aa:b1:
4a:2f:49:89:52:8b:4a:c9:2d:eb:27:30:8c:cf:33:bf:4b:e5:
30:09:ba:db:75:c0:81:16:f4:a2:08:6d:49:04:fa:44:e1:19:
f4:68:a4:65:32:d5:2c:f5:92:76:39:2c:9e:af:26:19:e0:bb:
58:ed:eb:e2:42:17:7e:34:45:fd:f9:98:e6:0c:0a:5d:4b:cc:
d0:9e:8a:06:27:71:2b:4d:65:67:6d:c0:c3:01:ab:d5:90:c8:
6b:02:d5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:33:28 2025 by rpki-client