Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/hqxNaYCPLTuuoAA0ZZYUvwL7eOs.roa
File: hqxNaYCPLTuuoAA0ZZYUvwL7eOs.roa (raw, json)
Hash identifier: PX80KYWV195E7QKu1uRMYcqEs1msksaoptP1oaHJf/w=
Subject key identifier: 86:AC:4D:69:80:8F:2D:3B:AE:A0:00:34:65:96:14:BF:02:FB:78:EB
Certificate issuer: /CN=A6ED14DB12101A125D3112DC4CC5602D30D8B477
Certificate serial: 0C55
Authority key identifier: A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/hqxNaYCPLTuuoAA0ZZYUvwL7eOs.roa
Signing time: Mon 26 Aug 2024 05:12:19 +0000
ROA not before: Mon 26 Aug 2024 05:12:19 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131662
IP address blocks: 103.123.128.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:49:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3157 (0xc55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A6ED14DB12101A125D3112DC4CC5602D30D8B477
Validity
Not Before: Aug 26 05:12:19 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=86AC4D69808F2D3BAEA00034659614BF02FB78EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:dd:1a:d2:30:ae:3f:1a:ee:c7:fa:48:ce:ea:
3e:97:00:cb:e1:77:25:e6:eb:13:90:37:b1:7e:c2:
39:15:91:0f:2d:93:b4:6c:f1:3c:bf:8c:21:e6:73:
b3:eb:4e:3f:97:c2:04:2e:4b:44:01:34:72:05:30:
9c:a1:a2:cc:b6:a1:f1:94:02:21:3b:e6:a3:ee:f4:
a1:6f:2b:c5:ec:09:60:30:83:c7:ec:76:0a:26:fe:
35:95:5d:59:c1:fe:9f:5a:96:5e:12:01:08:eb:1b:
15:60:fa:7a:7a:e0:10:7a:4f:b2:fa:51:dd:cd:ff:
2a:2d:47:76:b6:3f:ed:3f:50:ee:d5:3d:01:7c:77:
35:04:0d:87:6d:38:07:7c:ab:02:be:7e:da:9a:b4:
88:ab:32:f3:b2:bb:f1:90:dd:eb:67:e8:32:68:bc:
d0:f0:b7:df:e0:16:e9:f0:a4:d2:47:ec:bd:df:38:
d3:32:1d:c8:2f:3d:8b:ba:44:e2:0d:f2:eb:24:71:
bd:15:2e:b9:63:27:b9:ef:64:1d:1d:b3:b1:48:bc:
af:83:c1:b3:c7:de:e9:e3:eb:20:45:fe:a9:00:7b:
7e:08:68:f8:b4:9b:4c:94:5f:09:c1:89:08:3a:c3:
75:bd:6c:8e:b5:15:e5:9f:38:d2:1f:64:b6:38:13:
ae:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AC:4D:69:80:8F:2D:3B:AE:A0:00:34:65:96:14:BF:02:FB:78:EB
X509v3 Authority Key Identifier:
keyid:A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/pu0U2xIQGhJdMRLcTMVgLTDYtHc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/hqxNaYCPLTuuoAA0ZZYUvwL7eOs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.128.0/22
Signature Algorithm: sha256WithRSAEncryption
23:a4:28:6f:8f:46:40:df:a3:a7:2c:8c:38:11:37:84:08:63:
91:73:0e:fc:ee:9c:3d:e5:79:da:4c:d5:cd:b3:e6:32:97:f5:
5d:48:a8:01:d8:9e:70:96:72:c4:66:bc:c3:f9:a2:37:9e:7f:
b0:dd:dc:e1:51:4e:35:86:84:3f:df:1f:c3:2a:2c:4a:63:01:
a5:cc:1f:0b:92:34:00:8f:13:3a:d3:aa:9c:9f:e6:55:98:17:
3b:99:2e:45:ee:17:ab:b7:57:fa:92:d6:be:2f:3d:08:cc:64:
58:8c:c7:1f:0f:0c:d1:58:61:7c:ca:ff:61:75:c0:c9:c9:54:
cd:3f:e4:a6:17:4a:ce:a0:15:86:8b:d2:73:48:a0:87:82:c1:
71:78:61:7c:92:2a:ca:55:1a:c6:a1:30:0b:e0:19:fa:60:c3:
cf:57:f5:ff:4e:b3:f3:6d:63:41:bc:ab:c3:35:dd:15:fd:0b:
14:e1:5f:d1:a3:0c:9d:f5:c7:ca:83:4f:82:8b:29:59:39:b1:
7f:78:af:5c:6f:dd:74:b4:99:03:fc:93:2c:5b:29:c8:8f:78:
7b:73:fe:3f:3a:7b:eb:6e:32:4d:76:b3:79:aa:79:aa:5e:f5:
91:75:6f:68:42:34:9b:7c:31:36:c9:09:97:79:b7:89:91:ea:
65:e6:5f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:05 2025 by rpki-client