Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/i6PXM2_2Vdor-iV3c2cjbciMvsM.roa
File: i6PXM2_2Vdor-iV3c2cjbciMvsM.roa (raw, json)
Hash identifier: TL30kNHhxY8aZ6bywxXrFYx4dbem972FFnau8x2SZYo=
Subject key identifier: 8B:A3:D7:33:6F:F6:55:DA:2B:FA:25:77:73:67:23:6D:C8:8C:BE:C3
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 107A
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/i6PXM2_2Vdor-iV3c2cjbciMvsM.roa
Signing time: Mon 26 Aug 2024 05:16:27 +0000
ROA not before: Mon 26 Aug 2024 05:16:27 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17709
IP address blocks: 218.35.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4218 (0x107a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Aug 26 05:16:27 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=8BA3D7336FF655DA2BFA25777367236DC88CBEC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:68:4b:50:83:c9:a0:aa:ed:5d:8e:f0:b1:02:
3d:7a:fb:93:5d:c4:29:4a:a4:02:b9:3b:c5:6e:d8:
52:1d:1f:e3:5b:5c:54:21:12:7a:1b:5f:33:37:d2:
75:86:03:3b:5f:c7:62:83:74:1a:e6:ec:f4:f0:b9:
55:47:92:35:f0:97:90:e2:81:69:19:d4:87:d9:de:
c4:fe:a0:d3:a6:99:4b:8b:37:a2:70:94:c0:cb:26:
4d:c7:a0:95:34:c6:e8:52:52:1b:38:a5:38:52:57:
30:c9:c6:3c:c2:51:02:be:c6:12:e7:94:df:f5:d3:
73:02:c1:15:57:87:b6:6b:46:f1:60:07:41:eb:2f:
1f:43:1c:e8:03:39:c0:49:4e:34:a2:db:9c:b7:fb:
82:12:ea:0a:42:9d:92:c1:5f:64:ed:14:cc:06:eb:
f5:d3:e7:d4:ea:90:1b:e1:99:fd:aa:47:aa:8f:21:
fc:15:ce:b8:fe:09:8f:5f:ce:6c:9b:46:64:b4:e9:
d1:d2:bc:53:10:b5:1d:9c:ef:57:d4:e2:68:e4:03:
f0:c9:7f:5e:7a:92:43:f7:6b:73:0d:ab:c7:a3:5c:
bb:e1:9c:e9:04:7c:48:88:69:92:34:3a:bd:88:21:
9b:bf:61:f1:9f:d5:32:f4:90:8b:ed:e3:aa:04:58:
18:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A3:D7:33:6F:F6:55:DA:2B:FA:25:77:73:67:23:6D:C8:8C:BE:C3
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/i6PXM2_2Vdor-iV3c2cjbciMvsM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.35.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5a:56:f5:fa:c3:4a:0a:dc:18:d1:b9:2b:41:af:ea:69:2f:21:
a1:a9:f7:44:ea:69:24:df:bf:00:b9:71:13:40:88:f4:c3:ca:
37:ef:67:63:c7:74:df:24:2b:16:10:19:38:05:fd:b9:57:82:
b2:8c:2c:4f:a3:37:aa:c0:f6:3b:6f:30:c2:b3:9d:31:6f:bb:
3a:db:9e:3a:69:59:93:7d:a9:56:6e:4d:8e:d6:d5:01:ff:05:
04:dc:9c:e8:c2:78:c9:33:8d:ae:fc:87:eb:74:71:37:ca:09:
d4:af:ed:fc:18:07:a9:6c:ad:95:32:4d:f7:85:b8:16:ef:28:
47:ac:09:41:61:cd:4a:09:4c:ad:91:c6:47:7f:08:ea:e1:88:
9d:5f:95:7a:19:5e:9e:64:17:45:6e:37:b3:34:ae:35:12:76:
ad:8c:10:ba:3a:a9:5b:2d:a6:7c:81:e7:6b:23:74:c4:f3:dd:
d7:cf:f2:05:7f:ee:c8:dd:f5:6f:ae:48:e3:58:97:09:dc:ef:
3f:77:4e:a6:c5:d7:83:53:91:8e:c0:49:c7:91:a4:1a:97:c8:
61:da:0c:d9:3b:37:3a:64:2b:03:56:83:70:f3:c2:df:61:ec:
1e:fb:b8:4c:40:8a:a5:0c:b5:c3:35:f7:91:b0:b4:9d:ec:08:
22:17:e7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:56:16 2025 by rpki-client