Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/TyadjcIQ9feAQAEUiuWFohoeb-Q.roa
File: TyadjcIQ9feAQAEUiuWFohoeb-Q.roa (raw, json)
Hash identifier: xWeScQENe+9diZSNXjfQ/lvsK2uL281u6a50hNJ9IV4=
Subject key identifier: 4F:26:9D:8D:C2:10:F5:F7:80:40:01:14:8A:E5:85:A2:1A:1E:6F:E4
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 1087
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/TyadjcIQ9feAQAEUiuWFohoeb-Q.roa
Signing time: Mon 26 Aug 2024 05:16:32 +0000
ROA not before: Mon 26 Aug 2024 05:16:32 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 7482
IP address blocks: 210.202.96.0/20 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:27:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4231 (0x1087)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Aug 26 05:16:32 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=4F269D8DC210F5F7804001148AE585A21A1E6FE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:92:76:21:3e:67:a6:ff:de:0e:a2:ed:89:9d:
d5:b6:61:a5:b5:5d:ae:05:af:d4:66:0f:24:dd:55:
02:8b:ed:3a:c0:af:da:70:4a:04:4a:a7:36:8f:88:
48:39:b9:d5:cb:b0:7a:d9:3e:54:0a:87:4f:9b:79:
b4:b2:96:79:0e:b2:ef:78:dd:17:e9:65:17:6f:24:
52:a6:34:c0:e6:f0:6a:fb:f6:aa:ba:7b:56:00:58:
1e:12:c1:8f:1a:60:f7:6e:da:1e:de:fd:b3:6a:e6:
5b:cf:66:08:ae:3a:2d:56:f5:01:94:39:07:40:73:
f4:6d:a6:87:73:3c:71:29:40:0e:86:cd:91:d5:91:
a7:7a:44:67:cb:d5:4d:eb:a8:69:81:3f:28:be:bf:
ff:ef:54:29:1a:44:48:85:fc:c0:46:38:bf:a7:f7:
66:12:ea:18:55:44:23:b3:0f:4a:5f:9e:da:2f:a3:
c6:c8:0a:95:86:20:76:99:79:14:68:d0:6d:88:f6:
58:ae:2d:15:3e:54:63:39:a4:47:c6:3c:3e:88:59:
28:88:19:83:bd:b2:a7:61:e2:81:09:08:42:bd:6f:
28:cc:b3:2c:cb:5f:09:3d:a0:04:3e:ad:c6:5c:d7:
28:93:0c:e0:c7:6b:90:84:6c:54:27:e2:27:16:ec:
19:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:26:9D:8D:C2:10:F5:F7:80:40:01:14:8A:E5:85:A2:1A:1E:6F:E4
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/TyadjcIQ9feAQAEUiuWFohoeb-Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.202.96.0/20
Signature Algorithm: sha256WithRSAEncryption
1b:c2:ec:db:a0:73:2d:a4:71:ce:18:3e:2c:5e:16:cc:93:48:
52:73:48:27:f9:9e:74:ad:e3:e2:e2:5d:98:43:29:46:74:2f:
01:cb:4b:73:e2:11:7b:97:bd:29:ae:ac:99:52:14:1b:48:be:
91:e9:7c:40:f4:72:55:e1:cb:b3:4b:e6:d9:1a:24:c5:74:1b:
a6:93:18:9a:bf:c0:cc:36:de:36:3c:eb:28:b0:cd:5c:f9:7f:
61:c5:3c:f0:95:f5:3c:18:53:86:bc:e4:4b:52:8d:d1:da:73:
83:85:59:bd:dc:61:cd:ca:91:a1:76:a9:b2:66:43:f4:cb:99:
9e:c7:93:5b:e1:ca:fd:2d:a1:91:26:3f:0f:54:be:1b:80:74:
c6:ae:12:57:92:7b:9b:58:5d:14:75:4f:eb:cb:a3:ff:e4:9f:
76:a8:d3:72:3d:90:3c:e9:fa:cd:d5:08:6d:11:c8:a6:56:af:
82:4d:66:35:51:5d:66:05:17:40:2b:f1:34:9a:98:f3:5a:82:
a0:94:1f:4f:1f:76:c7:e4:6e:64:a6:32:b1:e4:cb:3e:47:3d:
b5:91:da:27:2f:31:b4:d3:be:3d:71:ef:d2:1c:44:6f:dd:58:
20:8d:35:5d:55:2f:33:42:fd:bd:64:4f:3a:4e:45:dc:93:ca:
42:67:f7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:47:15 2025 by rpki-client