Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IAMT/JDEBjYWQoyoOu6x6vRURBRGG384.roa
File: JDEBjYWQoyoOu6x6vRURBRGG384.roa (raw, json)
Hash identifier: LK2GOJ+IgFL7jdi+QEfEXrMOO0/0Lyaltu1J0ijYYzs=
Subject key identifier: 24:31:01:8D:85:90:A3:2A:0E:BB:AC:7A:BD:15:11:05:11:86:DF:CE
Certificate issuer: /CN=F33A72AAF798105BB277F094458E464B4659F803
Certificate serial: 11
Authority key identifier: F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/JDEBjYWQoyoOu6x6vRURBRGG384.roa
Signing time: Mon 25 Mar 2024 15:32:37 +0000
ROA not before: Mon 25 Mar 2024 15:32:37 +0000
ROA not after: Fri 21 Mar 2025 15:30:27 +0000
asID: 60841
IP address blocks: 157.20.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 31 Mar 2024 14:22:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F33A72AAF798105BB277F094458E464B4659F803
Validity
Not Before: Mar 25 15:32:37 2024 GMT
Not After : Mar 21 15:30:27 2025 GMT
Subject: CN=2431018D8590A32A0EBBAC7ABD1511051186DFCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7b:b2:5c:ac:44:08:24:f8:0e:67:95:5a:4a:
e3:ef:23:9a:c0:f3:48:18:24:70:41:1d:15:a5:8d:
ee:19:69:7d:dd:98:d4:c0:70:a0:b5:69:02:af:12:
fd:38:76:93:81:6f:de:a1:fc:75:5f:b0:40:c0:d0:
c2:c5:51:08:77:ab:de:c5:1e:fc:b0:9d:36:62:2e:
ce:a0:9d:d4:67:43:28:6c:88:14:32:9e:3f:4b:87:
94:67:d2:59:da:27:25:55:4c:7d:84:2b:f4:a0:2d:
aa:db:0b:2c:5d:af:2f:af:1b:ac:ec:b8:39:ff:28:
03:f7:28:3e:b2:4d:24:cc:d2:d2:66:40:a2:35:1a:
92:9e:1d:9e:6b:0b:2d:07:99:92:1b:31:40:e5:8f:
e1:b3:80:e3:50:47:6a:85:55:7d:ef:b6:90:b0:fe:
8e:64:3e:56:85:83:86:ed:ff:39:17:00:0c:8a:6c:
21:a3:df:98:29:d9:cc:9b:ee:16:03:43:fd:a6:91:
76:81:fd:c4:18:3e:67:34:13:0f:6a:ea:f2:c7:2f:
5a:1f:9e:c3:a0:0a:1c:b9:3e:27:c3:de:6e:46:4f:
a9:3e:12:bc:f5:6b:8e:76:c7:78:92:bb:2d:6b:ca:
37:70:b6:39:27:af:93:e1:f9:67:7a:a5:8f:f3:06:
80:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:31:01:8D:85:90:A3:2A:0E:BB:AC:7A:BD:15:11:05:11:86:DF:CE
X509v3 Authority Key Identifier:
keyid:F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/JDEBjYWQoyoOu6x6vRURBRGG384.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
157.20.248.0/24
Signature Algorithm: sha256WithRSAEncryption
02:54:50:7e:bf:8d:b9:fb:41:e8:aa:9a:2d:c4:b3:75:3e:6e:
61:f6:8a:b5:15:ae:de:c3:24:a7:de:b9:20:f3:6d:80:1c:0d:
21:67:65:4c:31:22:1b:84:50:83:4d:b9:63:06:b7:b8:2b:5e:
02:a5:0c:c8:dc:09:ec:11:ab:15:39:06:84:57:83:a2:f6:e1:
97:35:2a:e4:59:f7:61:81:e3:a3:38:bc:4a:3f:ac:b1:be:dd:
b9:3e:46:2b:74:90:dc:11:af:ec:b5:88:13:15:42:65:f3:c8:
f6:6c:e9:0c:8b:2a:d3:20:b6:7a:51:c3:95:b5:1f:79:ca:00:
72:46:8a:9d:45:47:e2:29:3f:26:51:8f:4b:d8:02:22:6a:87:
59:8a:a8:b7:c8:4b:ef:fa:f4:e9:d5:37:a3:28:b5:72:3a:45:
32:8d:3d:16:2d:a4:1d:da:de:e4:51:4a:e3:99:09:57:f1:9f:
d8:2c:23:54:c8:f5:59:f1:9f:81:92:e5:14:2b:42:a6:f5:2f:
aa:4f:81:4f:7c:03:94:8c:ad:17:03:77:b4:c9:74:64:8c:6f:
ad:76:9f:38:44:34:e8:66:c7:e2:6c:72:41:2e:24:89:7f:63:
bc:89:ab:40:14:54:ce:a6:98:36:92:f4:9f:42:16:d1:24:75:
6e:3f:85:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:01:50 2025 by rpki-client