Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HYA/9FNPUr4WNt6YN9OcEm-4WFXX5tI.roa
File: 9FNPUr4WNt6YN9OcEm-4WFXX5tI.roa (raw, json)
Hash identifier: hzONo88ViTqeoMoW89VenGy5/qbZocbHfS5V+cEc4Yo=
Subject key identifier: F4:53:4F:52:BE:16:36:DE:98:37:D3:9C:12:6F:B8:58:55:D7:E6:D2
Certificate issuer: /CN=0EAE2D331F2C4280C16AA8BAFE16FDDCCE3715B4
Certificate serial: 0C62
Authority key identifier: 0E:AE:2D:33:1F:2C:42:80:C1:6A:A8:BA:FE:16:FD:DC:CE:37:15:B4
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/9FNPUr4WNt6YN9OcEm-4WFXX5tI.roa
Signing time: Wed 13 Nov 2024 05:45:41 +0000
ROA not before: Wed 13 Nov 2024 05:45:41 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4780
IP address blocks: 103.252.128.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3170 (0xc62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0EAE2D331F2C4280C16AA8BAFE16FDDCCE3715B4
Validity
Not Before: Nov 13 05:45:41 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F4534F52BE1636DE9837D39C126FB85855D7E6D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:61:98:cb:5a:35:55:78:f9:89:88:8f:93:63:
d4:b1:3d:36:e3:92:f7:98:be:aa:ce:06:e6:b7:e4:
48:f1:2f:b5:ff:d1:e9:6e:62:b2:99:0a:fc:9a:62:
0f:f6:e2:99:ab:95:c9:19:c3:d5:2e:29:2e:4b:d1:
a6:68:09:c3:f4:a4:04:a2:be:ff:e8:60:54:b7:08:
16:0f:7a:98:3b:bb:09:43:85:b0:c0:34:e9:23:0e:
89:e9:c0:1a:da:f8:35:2d:d5:e3:29:36:24:14:e7:
2f:d0:d7:ac:ba:81:22:4c:0f:77:08:be:f9:e4:32:
db:e9:b6:58:5b:c3:4a:ed:bd:ff:91:76:fa:39:0c:
87:43:c9:0a:ce:04:c2:93:51:3c:d4:52:40:6c:15:
d5:b6:13:16:e5:e9:9d:a9:1b:ee:a1:48:fa:57:16:
30:42:27:53:7d:d8:34:5e:c7:90:e7:61:16:f5:ff:
c0:31:7d:de:c4:7a:56:be:73:a8:1d:c9:bc:42:43:
ba:59:5f:b8:31:b5:da:e6:1d:20:8b:ee:0b:6e:3a:
d9:5d:1c:8b:e7:12:59:47:e5:e7:61:4e:ce:54:98:
46:87:a9:09:71:60:42:23:cc:45:de:af:02:3e:1d:
50:89:82:57:cd:fc:fa:d9:c4:e9:45:03:df:d1:05:
85:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:53:4F:52:BE:16:36:DE:98:37:D3:9C:12:6F:B8:58:55:D7:E6:D2
X509v3 Authority Key Identifier:
keyid:0E:AE:2D:33:1F:2C:42:80:C1:6A:A8:BA:FE:16:FD:DC:CE:37:15:B4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/9FNPUr4WNt6YN9OcEm-4WFXX5tI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.252.128.0/22
Signature Algorithm: sha256WithRSAEncryption
48:de:e4:e3:2a:39:72:1e:d3:5d:e5:a6:b0:55:97:11:0a:ec:
81:37:8c:6d:aa:67:37:6c:65:f0:16:13:ef:5c:4d:a6:58:d0:
91:74:e5:eb:61:6e:ad:e4:84:90:1e:da:e2:16:ac:9a:6c:fb:
89:90:5f:89:af:74:98:1c:79:8c:34:3d:4f:96:70:18:24:5a:
c5:1e:0f:2d:6e:d1:0f:68:07:f7:69:a9:c4:18:cd:5c:9c:cf:
59:56:86:cf:e7:19:cf:9c:97:92:53:6c:b1:6f:84:76:0b:10:
bc:79:3e:40:a8:ff:15:d0:c0:16:41:3e:10:47:50:4c:d3:83:
d7:58:a8:5f:43:bf:a7:c8:0f:93:91:94:5a:28:99:e7:b6:51:
fd:68:51:87:64:9b:ce:47:6a:37:c2:9c:25:27:15:0a:8c:64:
7d:19:84:b4:dd:c7:33:af:13:6b:20:de:38:d6:d1:2d:07:a8:
aa:ae:2e:32:8e:9d:bd:3e:f3:13:96:52:83:74:72:42:8c:df:
89:e0:d4:7e:52:c7:b7:4d:09:55:62:16:78:38:b4:04:a1:a3:
8e:3c:df:b8:31:e3:4e:fd:ef:08:c3:29:ed:65:ba:1a:c6:06:
48:44:11:95:ab:f9:42:c9:23:ac:c2:67:32:1a:0b:8e:a4:3c:
1b:81:df:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:48:08 2025 by rpki-client