Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HYA/8nsk_UR7stRFroHcOfmFm3wLCZ8.roa
File: 8nsk_UR7stRFroHcOfmFm3wLCZ8.roa (raw, json)
Hash identifier: cB/WwG+GdwfZe1lUdOW03VKT33/zQ+9aPs5zHY1QhYY=
Subject key identifier: F2:7B:24:FD:44:7B:B2:D4:45:AE:81:DC:39:F9:85:9B:7C:0B:09:9F
Certificate issuer: /CN=0EAE2D331F2C4280C16AA8BAFE16FDDCCE3715B4
Certificate serial: 0C5E
Authority key identifier: 0E:AE:2D:33:1F:2C:42:80:C1:6A:A8:BA:FE:16:FD:DC:CE:37:15:B4
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/8nsk_UR7stRFroHcOfmFm3wLCZ8.roa
Signing time: Wed 13 Nov 2024 05:44:19 +0000
ROA not before: Wed 13 Nov 2024 05:44:19 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131602
IP address blocks: 103.252.128.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:06:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3166 (0xc5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0EAE2D331F2C4280C16AA8BAFE16FDDCCE3715B4
Validity
Not Before: Nov 13 05:44:19 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F27B24FD447BB2D445AE81DC39F9859B7C0B099F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d1:52:3a:eb:bc:c6:c4:1d:3b:a2:62:2c:6b:
a3:41:f2:d2:20:39:2f:75:91:49:12:31:9e:73:d3:
3d:0a:aa:93:7f:0a:00:2b:67:0c:46:a3:4e:04:b7:
8d:0c:51:86:ef:d7:71:01:7a:c2:2b:2f:e4:60:2e:
68:8c:46:37:ca:07:d5:ac:90:cc:f1:fe:c3:86:58:
44:49:4f:9a:c4:73:74:7a:87:33:0f:14:88:94:e6:
0f:10:75:32:6f:f5:83:d6:78:20:e1:12:d0:fb:46:
c3:7a:eb:77:e8:e3:e4:4b:2c:06:ef:45:0b:00:ce:
bc:16:7d:bd:e7:15:91:df:a8:ed:95:e3:cd:d8:f1:
1c:38:8e:c6:99:b5:25:01:08:37:0f:93:df:3d:d4:
d8:6e:f9:4a:c6:bd:5d:d8:62:79:db:9e:7f:01:45:
c3:89:6d:a7:c1:ef:29:c6:70:05:28:c4:d5:c0:22:
d6:14:d7:da:7d:f7:4e:18:e2:6f:70:24:f7:69:03:
5d:e6:b9:b3:16:58:a5:50:32:b0:ae:7d:68:33:3b:
f5:d4:ee:be:bd:0f:39:14:e7:6d:44:65:10:61:ec:
20:6a:e2:a6:b7:a7:93:43:7a:04:14:2a:b7:ed:0e:
6b:14:a3:97:81:ee:25:f0:32:96:68:ed:15:c6:19:
db:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7B:24:FD:44:7B:B2:D4:45:AE:81:DC:39:F9:85:9B:7C:0B:09:9F
X509v3 Authority Key Identifier:
keyid:0E:AE:2D:33:1F:2C:42:80:C1:6A:A8:BA:FE:16:FD:DC:CE:37:15:B4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/8nsk_UR7stRFroHcOfmFm3wLCZ8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.252.128.0/22
Signature Algorithm: sha256WithRSAEncryption
51:32:ea:21:2f:e9:67:db:3c:56:01:24:71:59:79:68:d0:97:
65:29:45:9b:f2:8b:fa:d0:92:79:86:21:a7:5f:fb:e0:bf:87:
f6:b5:58:d6:e1:d9:41:92:96:ff:d8:9b:8c:f6:09:af:4f:f0:
ac:14:7a:0a:0d:31:40:4e:8b:fc:b0:b7:5e:da:8b:98:49:76:
72:2a:a2:4f:b9:fd:dc:1e:97:d4:74:73:19:68:dc:4e:59:ad:
82:5e:83:22:fe:47:b1:b1:9b:0d:37:fd:c0:3f:39:5c:e5:f0:
57:4e:67:72:44:f6:09:a8:1d:90:a2:89:ca:9a:b9:3f:41:a9:
ba:52:9f:40:9a:37:1a:15:1b:10:27:ea:94:32:f5:88:f0:e9:
ca:a2:f4:e9:d8:e3:d1:d9:9c:b5:15:91:ab:21:c6:50:34:08:
c2:7f:da:e5:91:86:72:82:6e:8a:e1:73:84:47:b5:99:21:06:
86:60:87:6a:37:9c:5d:fc:b2:46:2d:43:72:63:23:c2:92:9f:
94:ee:7d:5d:0a:a0:ec:68:0b:ea:75:c1:dd:0f:4d:b4:fd:22:
32:f1:23:18:f0:6c:87:11:0f:1a:a8:a2:57:ec:5a:19:fe:4f:
93:a2:c6:6e:59:bd:f0:72:8a:d1:29:17:da:7e:7f:45:e8:d6:
ce:21:30:51
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICDF4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEVB
RTJEMzMxRjJDNDI4MEMxNkFBOEJBRkUxNkZERENDRTM3MTVCNDAeFw0yNDExMTMw
NTQ0MTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEYyN0IyNEZENDQ3QkIy
RDQ0NUFFODFEQzM5Rjk4NTlCN0MwQjA5OUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDp0VI667zGxB07omIsa6NB8tIgOS91kUkSMZ5z0z0KqpN/CgAr
ZwxGo04Et40MUYbv13EBesIrL+RgLmiMRjfKB9WskMzx/sOGWERJT5rEc3R6hzMP
FIiU5g8QdTJv9YPWeCDhEtD7RsN663fo4+RLLAbvRQsAzrwWfb3nFZHfqO2V483Y
8Rw4jsaZtSUBCDcPk9891Nhu+UrGvV3YYnnbnn8BRcOJbafB7ynGcAUoxNXAItYU
19p9904Y4m9wJPdpA13mubMWWKVQMrCufWgzO/XU7r69DzkU521EZRBh7CBq4qa3
p5NDegQUKrftDmsUo5eB7iXwMpZo7RXGGdvfAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQU8nsk/UR7stRFroHcOfmFm3wLCZ8wHwYDVR0jBBgwFoAUDq4tMx8sQoDBaqi6
/hb93M43FbQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSFlBL0Rx
NHRNeDhzUW9EQmFxaTZfaGI5M000M0ZiUS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
RHE0dE14OHNRb0RCYXFpNl9oYjkzTTQzRmJRLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvSFlBLzhuc2tfVVI3c3RSRnJvSGNPZm1GbTN3
TENaOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJn/IAwDQYJ
KoZIhvcNAQELBQADggEBAFEy6iEv6WfbPFYBJHFZeWjQl2UpRZvyi/rQknmGIadf
++C/h/a1WNbh2UGSlv/Ym4z2Ca9P8KwUegoNMUBOi/ywt17ai5hJdnIqok+5/dwe
l9R0cxlo3E5ZrYJegyL+R7Gxmw03/cA/OVzl8FdOZ3JE9gmoHZCiicqauT9BqbpS
n0CaNxoVGxAn6pQy9Yjw6cqi9OnY49HZnLUVkashxlA0CMJ/2uWRhnKCborhc4RH
tZkhBoZgh2o3nF38skYtQ3JjI8KSn5TufV0KoOxoC+p1wd0PTbT9IjLxIxjwbIcR
DxqoolfsWhn+T5Oixm5ZvfByitEpF9p+f0Xo1s4hMFE=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:20:56 2025 by rpki-client