Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/JHKtxhdpVeXZrYwbLDY_TqVzPpE.roa
File: JHKtxhdpVeXZrYwbLDY_TqVzPpE.roa (raw, json)
Hash identifier: E4AnTDPrE4yFkoNOrKE0ca7nUB9GwXRAGvKUoEmEKyU=
Subject key identifier: 24:72:AD:C6:17:69:55:E5:D9:AD:8C:1B:2C:36:3F:4E:A5:73:3E:91
Certificate issuer: /CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Certificate serial: 0CA9
Authority key identifier: 0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/JHKtxhdpVeXZrYwbLDY_TqVzPpE.roa
Signing time: Wed 04 Sep 2024 01:37:41 +0000
ROA not before: Wed 04 Sep 2024 01:37:41 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18046
IP address blocks: 103.234.76.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:04:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3241 (0xca9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Validity
Not Before: Sep 4 01:37:41 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=2472ADC6176955E5D9AD8C1B2C363F4EA5733E91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4f:45:0a:05:1a:ba:45:fa:69:42:fe:be:d9:
35:a6:e5:4c:6f:23:2b:f9:5a:b3:ec:c6:a3:5d:1f:
58:d4:7f:c4:49:f1:82:27:a4:f5:c3:ea:54:f6:6e:
2c:e4:67:ad:6c:86:59:f2:2c:b8:e0:95:45:b6:34:
5d:bf:ec:59:ea:ef:8c:22:79:1c:83:9b:36:3f:20:
4c:80:72:33:d5:f4:5c:7f:1e:50:76:61:b8:83:7b:
c5:70:82:63:40:f8:66:77:5b:79:14:db:25:c9:f2:
18:44:c6:27:2d:bb:a6:74:36:61:b5:0a:ed:25:a9:
71:8c:89:63:4d:24:ae:16:29:ac:3d:75:82:8a:a1:
97:ad:2b:ea:b7:dd:0c:c1:6e:6d:1e:88:d5:09:40:
22:83:8d:fc:19:4e:6d:c0:45:ad:47:cd:8b:a2:28:
13:9a:bb:72:28:b4:2d:cd:e0:e7:d9:1c:80:f5:4d:
8d:b8:f7:fe:2b:c9:6e:17:7c:91:9e:70:8b:90:f4:
22:bd:2d:e0:3c:b5:05:eb:a6:82:de:3e:1d:64:64:
f5:08:2a:5f:08:6d:bd:4b:9f:94:69:aa:a7:22:e0:
a9:eb:e3:bf:d2:b1:4c:84:bc:ba:f3:8f:03:92:a1:
c7:c9:6b:ad:4b:cc:b7:19:b3:50:e2:80:08:59:e3:
9a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:72:AD:C6:17:69:55:E5:D9:AD:8C:1B:2C:36:3F:4E:A5:73:3E:91
X509v3 Authority Key Identifier:
keyid:0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/JHKtxhdpVeXZrYwbLDY_TqVzPpE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.234.76.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:91:fb:1c:a5:83:5d:16:9f:63:24:67:d0:1f:33:00:e4:36:
40:e9:41:67:b9:d3:f7:9a:3b:61:b9:73:92:67:9d:18:1c:f0:
2f:94:3c:2f:66:3f:ba:ae:84:e5:ca:e8:08:91:d2:42:12:8b:
c3:16:f4:7c:1c:3a:60:f8:2f:cc:64:fa:b0:3c:80:a3:62:1e:
2b:94:a5:4a:ee:f5:18:d1:64:89:f2:50:41:68:21:44:7f:49:
17:3f:d8:6c:c7:84:a9:8a:b2:58:a9:af:fb:d6:e6:9b:87:60:
03:c6:79:db:8a:db:c7:0c:1e:19:21:62:40:93:c6:2c:1a:e9:
5a:92:c2:b9:cb:c4:d0:0b:88:63:ca:c5:c7:4c:2a:b5:59:d1:
77:b4:b5:61:fa:89:a6:18:f1:2d:7d:f5:9f:5e:28:87:73:37:
73:7d:75:25:53:cb:0f:3c:e8:75:90:07:b3:10:2e:6b:0e:b6:
97:ae:b9:3a:31:27:52:4e:cb:bd:dc:b5:3d:68:4c:29:90:19:
4c:75:02:7e:05:c8:9f:81:5b:a0:e0:e4:79:25:4e:f4:6e:5f:
17:f5:cd:43:91:0a:2a:e4:3b:7a:ca:82:0f:ea:c3:99:7c:bf:
53:2d:38:53:db:27:7a:9b:3c:de:58:7a:6d:e7:d9:17:12:39:
6c:eb:08:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:24:36 2025 by rpki-client