Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HYA/_MwB8YFg4zScqPwqvm9FdmwIwaY.roa
File: _MwB8YFg4zScqPwqvm9FdmwIwaY.roa (raw, json)
Hash identifier: aP8xHXwtcaCgM/HqXAyjuSZCv3slcTaHQfM3lL8tpXk=
Subject key identifier: FC:CC:01:F1:81:60:E3:34:9C:A8:FC:2A:BE:6F:45:76:6C:08:C1:A6
Certificate issuer: /CN=0EAE2D331F2C4280C16AA8BAFE16FDDCCE3715B4
Certificate serial: 0C1C
Authority key identifier: 0E:AE:2D:33:1F:2C:42:80:C1:6A:A8:BA:FE:16:FD:DC:CE:37:15:B4
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/_MwB8YFg4zScqPwqvm9FdmwIwaY.roa
Signing time: Mon 26 Aug 2024 05:18:52 +0000
ROA not before: Mon 26 Aug 2024 05:18:52 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 10085
IP address blocks: 103.252.128.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:06:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3100 (0xc1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0EAE2D331F2C4280C16AA8BAFE16FDDCCE3715B4
Validity
Not Before: Aug 26 05:18:52 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=FCCC01F18160E3349CA8FC2ABE6F45766C08C1A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:da:17:a2:b8:7f:0b:cb:f3:07:d0:34:93:ca:
e2:dd:a6:1c:9a:18:7a:9b:6e:99:71:ce:ae:fc:ea:
a8:62:32:73:7e:ac:ad:33:bc:6a:1b:ed:cf:a1:c7:
35:c3:8f:da:68:89:50:95:ef:fa:d7:3f:1e:86:c2:
0b:34:b6:7e:71:3d:3d:86:ee:be:7d:d1:03:bf:27:
eb:50:d9:1e:77:39:ae:e2:ca:eb:b6:71:72:2a:e7:
a6:70:e9:17:e3:40:75:e4:7a:b0:07:72:13:be:b6:
06:3f:1d:8c:41:82:ae:fd:fd:e5:6c:38:a3:9c:e9:
13:88:8d:a5:8e:0c:23:f8:c8:08:78:ba:b7:ce:32:
fe:c7:74:49:c6:2c:81:12:98:cf:13:f5:6e:d5:be:
35:c1:de:9b:07:59:a9:02:25:72:fe:70:a0:84:40:
fb:a8:05:6b:1c:fe:b8:0f:af:66:41:78:9e:af:a5:
52:6b:d9:6f:52:7f:24:f2:5b:2a:d2:ed:d6:b1:43:
1c:96:18:fa:ce:e8:5e:8f:93:cf:59:3c:32:24:b6:
c2:c6:c6:4a:73:d1:4b:58:02:f0:b6:8f:08:04:9d:
d4:16:2f:22:e2:1f:ae:95:25:b9:68:f9:b7:50:30:
f2:ef:ac:fe:2d:d9:51:20:f4:09:d3:66:a0:36:b1:
b7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CC:01:F1:81:60:E3:34:9C:A8:FC:2A:BE:6F:45:76:6C:08:C1:A6
X509v3 Authority Key Identifier:
keyid:0E:AE:2D:33:1F:2C:42:80:C1:6A:A8:BA:FE:16:FD:DC:CE:37:15:B4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/_MwB8YFg4zScqPwqvm9FdmwIwaY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.252.128.0/22
Signature Algorithm: sha256WithRSAEncryption
61:5f:ff:98:d4:89:b6:0c:fa:4e:d1:72:27:bc:5e:3f:56:d4:
96:be:a5:bc:5b:e0:f6:f4:9c:88:17:89:5d:82:27:e9:99:d1:
ec:2a:e4:1e:4c:33:3e:5c:cc:09:d9:d0:e3:c2:45:3c:58:e5:
28:a5:44:d8:7d:5a:ea:a9:26:7f:e6:02:15:9e:d1:36:1d:7a:
e9:5c:9d:4b:b5:8c:bc:fe:51:43:6c:45:24:78:53:e9:12:06:
95:46:7b:18:c3:96:52:6d:f8:fb:d2:7a:e6:01:f6:3a:93:6b:
84:c1:06:1a:d6:8b:99:ee:53:10:8f:b8:c3:dc:db:30:a4:47:
2a:04:56:bb:7e:14:1d:60:07:04:a9:4c:23:f2:df:f3:dc:8e:
76:a7:80:ec:b7:5a:0d:67:7e:70:a8:98:70:2f:25:49:0e:e2:
b0:b8:22:db:a9:6b:88:48:17:f3:3a:25:50:28:de:98:cb:64:
ec:d2:f0:53:18:6b:55:9f:ec:68:93:9d:e4:cb:7e:51:a1:b9:
82:2e:5e:a6:3a:4c:ec:65:d0:5b:fd:23:31:c0:55:70:c6:82:
4e:15:42:18:1c:57:fe:ad:46:fe:78:68:e1:be:31:71:c1:1b:
a8:9b:cc:7f:1c:1b:24:74:9e:61:fa:52:6d:d4:59:c8:15:5a:
aa:c4:2a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:45:42 2025 by rpki-client