Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CKMATES/qNVx5cOfYQ7UNbP0jNNQlsO8WwY.roa
File: qNVx5cOfYQ7UNbP0jNNQlsO8WwY.roa (raw, json)
Hash identifier: bYdRDPWLH7A5NallzasmOmpiri9bTLx46d6nUCowSAo=
Subject key identifier: A8:D5:71:E5:C3:9F:61:0E:D4:35:B3:F4:8C:D3:50:96:C3:BC:5B:06
Certificate issuer: /CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807
Certificate serial: 0C53
Authority key identifier: 5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/qNVx5cOfYQ7UNbP0jNNQlsO8WwY.roa
Signing time: Mon 06 Jan 2025 10:04:09 +0000
ROA not before: Mon 06 Jan 2025 10:04:09 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 139637
IP address blocks: 103.119.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:13:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3155 (0xc53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807
Validity
Not Before: Jan 6 10:04:09 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A8D571E5C39F610ED435B3F48CD35096C3BC5B06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fc:04:5d:df:cc:ef:d1:95:e5:76:92:57:13:
95:4d:7e:e7:2d:4d:8e:cc:2a:b9:20:17:04:18:49:
4f:0a:78:39:bb:46:3f:5e:31:96:23:52:6f:00:54:
2e:85:d8:49:69:03:4e:2b:9b:6e:99:e5:5e:a4:a8:
12:e4:a0:19:ab:77:86:cd:10:f7:45:75:ed:44:a6:
0b:e1:03:65:1c:9c:92:d1:42:44:d0:cf:d9:5c:2d:
94:5d:11:f0:9b:d8:2f:aa:31:8f:12:25:bb:0f:47:
d1:84:1f:72:17:af:14:52:6d:d6:9b:87:b7:89:94:
70:41:b9:32:98:7c:03:41:ee:5f:d6:f5:80:11:8a:
6f:b8:9e:ec:42:ff:90:96:fb:72:f6:46:53:fc:e7:
4b:64:f9:5a:7d:32:97:ae:6c:9d:a7:b8:50:36:54:
8e:71:4a:be:fb:34:7c:8c:71:be:5c:88:6e:5e:ba:
5f:5d:70:23:66:53:82:83:2f:46:f4:8a:df:cc:a9:
26:66:f9:99:8d:14:04:d4:8f:18:5b:02:c1:7e:38:
14:86:6a:2d:d7:8f:f0:4e:f4:94:0c:39:0f:a9:2b:
4e:95:b2:da:af:28:ae:90:8b:cb:92:3a:7a:33:fb:
d2:50:51:bd:14:a9:b4:5e:e3:02:b2:03:b6:91:85:
89:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D5:71:E5:C3:9F:61:0E:D4:35:B3:F4:8C:D3:50:96:C3:BC:5B:06
X509v3 Authority Key Identifier:
keyid:5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/qNVx5cOfYQ7UNbP0jNNQlsO8WwY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.119.214.0/24
Signature Algorithm: sha256WithRSAEncryption
04:db:d4:5b:85:f3:83:95:58:03:19:9e:fa:5c:02:4c:09:17:
50:e0:b5:bb:92:68:b9:57:71:94:c0:6e:f1:70:49:88:74:e0:
92:53:e8:87:46:78:ee:06:46:30:83:cf:d7:55:ca:5f:2f:56:
d3:6a:0d:8d:6a:5d:88:06:71:1d:be:98:40:87:5d:f1:1a:7b:
5b:21:a1:a8:42:cf:e9:ac:8d:92:31:29:34:d3:bc:1b:84:06:
56:8d:ab:a9:e6:86:6c:53:a0:8f:62:7d:e1:14:ff:5e:a7:a5:
4c:18:65:a4:e8:b4:14:ea:9e:ad:dc:81:75:6e:35:18:39:d2:
90:36:be:45:a0:dc:d7:8e:85:83:e4:da:1d:1a:e2:4d:2f:02:
67:4d:5b:5d:5d:16:0c:cf:b0:2d:76:15:e3:da:78:78:c7:09:
31:95:db:da:30:b4:7b:9d:07:f1:95:ec:5a:11:e6:50:c8:e4:
90:04:0a:22:5f:21:da:dc:21:22:96:4e:30:3b:c9:d4:c3:20:
fa:91:01:e1:97:7b:93:7e:95:71:10:bc:a3:de:61:6f:68:fe:
6f:81:7c:cb:7c:ed:12:ba:46:ad:1b:65:92:b2:57:c9:2d:bb:
82:22:57:0b:2b:fe:80:9b:dd:71:67:03:fb:84:d5:38:f6:dc:
c7:e6:c5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:25:49 2025 by rpki-client