Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/klnmK-BiwOO1SALx_zFOMjvwQaw.roa
File: klnmK-BiwOO1SALx_zFOMjvwQaw.roa (raw, json)
Hash identifier: 2a6L0bawDPtlnfJULnxeRzVCQQjQ4m/gKiETCRUAuJ4=
Subject key identifier: 92:59:E6:2B:E0:62:C0:E3:B5:48:02:F1:FF:31:4E:32:3B:F0:41:AC
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 1030
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/klnmK-BiwOO1SALx_zFOMjvwQaw.roa
Signing time: Mon 26 Aug 2024 05:16:09 +0000
ROA not before: Mon 26 Aug 2024 05:16:09 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9311
IP address blocks: 210.201.74.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:28:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4144 (0x1030)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Aug 26 05:16:09 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=9259E62BE062C0E3B54802F1FF314E323BF041AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e6:08:8e:c6:73:68:0b:f9:20:74:2a:af:2c:
6c:02:f9:ed:a1:e6:94:fe:08:f2:35:43:d2:ef:d2:
39:15:70:9b:e5:07:8f:be:ed:46:09:c7:87:9f:d2:
82:3c:a3:e2:ed:5d:96:05:ff:0b:b5:fc:e6:18:65:
bc:4b:66:5b:17:f7:43:2b:b6:b9:b4:40:24:98:de:
65:d0:c0:38:83:c4:14:cd:8e:f7:e7:ef:17:3e:a9:
b0:d6:b0:80:c8:9e:a5:ee:83:a1:5b:2a:50:f8:bd:
ff:f2:48:92:85:76:dd:b0:a6:94:fc:40:c8:e2:9b:
92:34:b7:fa:f6:c4:40:a9:90:e5:70:5b:6f:93:26:
d5:34:9b:bc:b6:fe:ad:6d:e9:e9:d8:93:54:a1:54:
fa:c5:d7:2a:31:2f:89:35:b4:b7:a4:f6:4b:ce:d3:
b7:d8:3e:c0:af:2e:a8:33:6f:e0:aa:20:2b:02:1f:
c7:23:77:53:a9:47:35:a9:af:08:f3:03:a7:b7:a2:
bd:ee:92:51:4e:0d:59:f8:2c:db:83:0a:f9:fe:c3:
6b:0c:5f:f1:1b:86:59:96:b6:b1:2f:ca:ca:4c:a2:
aa:03:be:dd:26:3e:c8:11:73:3c:b7:a6:d7:a4:e6:
92:36:e5:d7:15:08:10:58:de:fb:52:6f:0e:71:a9:
7b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:59:E6:2B:E0:62:C0:E3:B5:48:02:F1:FF:31:4E:32:3B:F0:41:AC
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/klnmK-BiwOO1SALx_zFOMjvwQaw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.201.74.0/23
Signature Algorithm: sha256WithRSAEncryption
78:0c:29:90:27:71:fa:a4:8c:f1:9b:63:1b:5a:8e:67:19:f0:
e3:a6:f6:34:ca:db:5d:df:dd:6b:1f:ca:13:d0:0e:54:ff:be:
76:b3:b5:db:5a:73:05:79:4d:46:20:e6:30:da:f0:42:c7:5b:
e0:bc:b0:d1:4f:ad:ef:c8:c5:12:ac:68:ba:03:48:44:cd:b5:
37:03:5f:58:30:32:df:77:25:bd:e8:fc:6c:e8:27:a5:26:5f:
e7:fd:df:a1:55:2e:73:ec:fa:ea:b1:47:31:e7:49:fe:4b:8f:
67:9a:08:7c:ae:f6:ea:4f:12:ec:d0:55:79:b6:59:a4:9f:32:
5d:b9:fc:4c:03:ac:19:54:26:c4:9c:cd:a3:fa:16:c1:5d:e3:
a1:6e:97:1a:4f:58:c5:2e:72:15:18:5d:ab:93:1d:5d:59:2f:
83:08:f0:5a:08:db:ff:3e:16:60:23:b6:69:54:14:c9:da:f9:
c9:f5:0f:b2:ed:2c:9f:c1:9a:7b:0e:69:a4:e6:6a:2f:6b:15:
1f:7d:32:d0:a0:68:ad:c6:85:9a:6e:ad:e3:80:74:bd:eb:7f:
4e:f8:40:27:4e:86:70:95:59:1e:d6:2b:b0:ab:6e:56:7a:1f:
81:80:0e:1c:74:9c:9b:31:d0:93:76:1c:2a:10:06:b8:c4:9a:
15:81:f5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:43:18 2025 by rpki-client