Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/TN_dm3kjlfbQXOrrh9blMLEbBPw.roa
File: TN_dm3kjlfbQXOrrh9blMLEbBPw.roa (raw, json)
Hash identifier: cShbaj9Izqj/fnsXSmKa49YaCRdmpB1ennBC/Ka6LNs=
Subject key identifier: 4C:DF:DD:9B:79:23:95:F6:D0:5C:EA:EB:87:D6:E5:30:B1:1B:04:FC
Certificate issuer: /CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Certificate serial: 0C9D
Authority key identifier: 0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/TN_dm3kjlfbQXOrrh9blMLEbBPw.roa
Signing time: Mon 26 Aug 2024 05:12:28 +0000
ROA not before: Mon 26 Aug 2024 05:12:28 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38851
IP address blocks: 103.234.76.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:04:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3229 (0xc9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Validity
Not Before: Aug 26 05:12:28 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=4CDFDD9B792395F6D05CEAEB87D6E530B11B04FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f6:b2:4d:fc:30:b9:a5:c8:0f:35:9a:d3:89:
e4:f3:87:82:65:a2:e7:c7:88:f4:34:d6:32:33:70:
4c:ec:e8:66:9b:c7:5c:ca:52:c0:0b:9e:6b:1f:f7:
97:d9:9b:dd:54:bc:27:a3:30:c2:69:d1:c9:f1:36:
af:92:5c:3b:71:6a:7d:38:5f:a1:d3:85:1f:a5:6f:
6d:0c:b1:ae:12:67:a3:40:20:c3:ed:d2:77:c8:2e:
78:2f:e8:77:6a:ee:89:e1:7d:01:07:49:a8:71:ec:
7c:0c:bf:b6:a0:44:89:e2:d8:f6:5a:7d:97:c6:f4:
4e:91:71:51:fe:72:77:97:27:d7:c0:19:b7:54:1e:
36:4f:d7:02:b9:c8:51:67:d7:e9:c5:0a:75:39:17:
cc:1f:2c:28:1a:1b:b1:cb:dc:68:99:04:29:fe:60:
57:d5:06:43:c7:05:bf:e8:44:08:d7:fd:66:82:53:
b2:3d:80:88:2c:27:2f:c6:b8:19:03:5c:8f:62:a8:
f1:c8:0e:b7:11:58:b3:33:28:c3:f5:96:48:b9:d0:
00:26:05:7b:d6:da:b2:26:62:d1:9c:4d:68:ec:80:
0f:78:8f:90:15:40:6f:a1:a3:e8:66:2f:98:da:76:
61:00:11:44:bc:9c:43:ff:ac:31:1e:cc:9a:14:87:
74:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DF:DD:9B:79:23:95:F6:D0:5C:EA:EB:87:D6:E5:30:B1:1B:04:FC
X509v3 Authority Key Identifier:
keyid:0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/TN_dm3kjlfbQXOrrh9blMLEbBPw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.234.76.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:70:dd:6f:a4:3f:af:c3:94:23:8b:e3:0d:77:6f:56:8f:6d:
32:80:63:53:56:70:8b:ec:fc:c6:33:2c:16:dc:4f:9e:d2:04:
7f:4f:35:ef:42:95:80:cb:5c:0c:c5:84:ef:99:4f:09:bf:29:
dc:f3:5b:16:49:03:87:45:95:c4:5a:3b:4e:59:32:dd:60:a7:
e1:aa:fb:b1:c0:71:77:6c:1e:94:06:da:2a:28:03:de:2e:a0:
07:be:20:90:26:06:b2:c5:2a:ad:76:bb:a8:69:af:ce:0d:84:
38:ee:96:52:26:f1:ef:ef:f9:4e:85:16:d6:11:ca:ec:e8:0b:
23:85:74:85:75:ba:6f:64:8b:18:9c:a4:57:14:b2:dc:af:28:
18:b7:d0:30:31:1c:10:30:b3:d7:58:93:76:f7:cf:58:43:e0:
fa:e6:f0:30:5a:c5:0b:56:f9:15:4f:51:e4:b4:c2:4c:b4:bd:
38:25:62:44:6a:e5:63:76:67:61:89:47:65:f1:02:5e:46:33:
46:bf:4c:54:16:bf:40:36:2f:45:30:ed:3e:a8:59:aa:a3:c8:
42:0d:9b:bb:b7:44:29:7e:26:7c:38:8a:75:c0:14:e9:6b:6e:
b6:cc:b5:33:3e:3c:70:8d:50:91:37:8b:d6:12:e7:03:de:e4:
12:63:62:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:17:38 2025 by rpki-client