Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JCA/NSamg7l37QpmC2oZR7SzGfxaf90.roa
File: NSamg7l37QpmC2oZR7SzGfxaf90.roa (raw, json)
Hash identifier: dHy8vmR3/FEabzby0yE/QGvjaCrOB4kaXmhMqlrV1c0=
Subject key identifier: 35:26:A6:83:B9:77:ED:0A:66:0B:6A:19:47:B4:B3:19:FC:5A:7F:DD
Certificate issuer: /CN=83ACFC46609C1649AB4616D20D64C9D15D834C64
Certificate serial: 011B
Authority key identifier: 83:AC:FC:46:60:9C:16:49:AB:46:16:D2:0D:64:C9:D1:5D:83:4C:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JCA/NSamg7l37QpmC2oZR7SzGfxaf90.roa
Signing time: Sun 22 Sep 2024 17:58:53 +0000
ROA not before: Sun 22 Sep 2024 17:58:53 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131642
IP address blocks: 103.254.212.0/23 maxlen: 32
Validation: Failed, certificate revoked on Mon 10 Feb 2025 11:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 283 (0x11b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ACFC46609C1649AB4616D20D64C9D15D834C64
Validity
Not Before: Sep 22 17:58:53 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=3526A683B977ED0A660B6A1947B4B319FC5A7FDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7f:0a:b3:db:8b:fe:8b:88:81:27:6b:1e:da:
14:5d:30:08:ea:ca:f6:a9:66:23:18:dc:8d:d0:5b:
85:f2:15:ea:f5:26:1e:01:2f:f9:26:ca:13:d3:32:
50:67:e0:40:d3:8b:35:e3:be:39:22:e7:9f:6e:b4:
5e:5c:78:cd:3e:23:a2:6c:09:a8:c6:e3:fc:d2:ea:
7d:0a:59:b5:c8:26:fd:47:69:8b:3b:5f:74:e8:06:
a5:94:72:d3:2e:ef:d6:a0:e9:ab:e8:c0:93:68:53:
32:a8:42:84:72:56:73:10:f8:e1:c3:52:ac:fb:02:
a4:74:67:a5:8d:ee:56:af:c4:a2:76:f2:65:0f:b9:
b7:76:8c:be:2b:e4:ce:2b:02:13:53:5a:ad:f4:85:
a9:42:78:b4:53:12:08:e6:74:71:8c:65:62:9f:7c:
f1:06:57:6b:e4:d3:5b:f5:9a:90:af:0f:45:b5:43:
81:2d:d7:4e:c9:7f:7a:43:a6:4b:bb:88:07:bb:de:
85:77:47:83:5a:85:d9:1c:52:a1:4b:24:28:89:b6:
aa:8c:3a:84:77:62:f1:f7:8e:e8:1c:51:2b:c9:ae:
73:e6:18:68:98:f6:cd:a2:b8:68:dd:4f:d9:4c:42:
1b:49:b9:d8:8b:76:23:54:c9:31:70:a1:80:7f:3c:
e8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:26:A6:83:B9:77:ED:0A:66:0B:6A:19:47:B4:B3:19:FC:5A:7F:DD
X509v3 Authority Key Identifier:
keyid:83:AC:FC:46:60:9C:16:49:AB:46:16:D2:0D:64:C9:D1:5D:83:4C:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JCA/g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JCA/NSamg7l37QpmC2oZR7SzGfxaf90.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.254.212.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:4e:d6:9d:a7:30:6d:07:88:e3:6a:d6:d3:34:84:a3:fc:58:
6e:0d:bf:9d:27:19:9f:54:95:82:b0:46:9b:0c:f4:f3:2d:f9:
7d:89:86:73:37:2d:21:40:09:5c:2a:b5:11:63:d1:7c:39:1e:
aa:44:f6:96:bb:79:a4:f1:1f:32:c7:d5:2f:71:04:2c:5e:03:
80:ee:a1:58:28:cd:82:53:93:74:3c:c8:88:87:c3:a3:14:3a:
22:15:11:a2:d3:01:1e:94:d6:af:38:74:fa:b7:2a:70:ad:bc:
31:e6:dc:18:c8:36:f7:1e:c9:af:fb:83:b7:c4:b6:7a:3e:45:
33:cf:11:a6:b6:2b:4d:6f:ca:07:7c:05:2b:31:81:35:61:cd:
c4:91:80:6c:43:08:12:55:bb:12:9f:f2:fc:3d:a7:ad:a1:a2:
8a:e8:b1:97:cd:c1:d8:bb:43:b0:5d:4b:52:f6:0f:df:41:b8:
7f:a8:1f:b7:ad:ba:1b:f4:47:97:ff:14:29:0e:e1:3b:f4:a8:
03:48:88:7f:fb:50:35:d6:f0:a5:32:a0:54:29:53:c9:94:4c:
2d:c7:d5:3f:ea:7f:0c:15:e9:32:6f:db:bd:f9:28:78:3c:a5:
4e:05:f9:e5:d9:96:b1:a7:67:e4:41:f2:7a:9c:d8:54:21:0b:
67:cb:68:68
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICARswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODNB
Q0ZDNDY2MDlDMTY0OUFCNDYxNkQyMEQ2NEM5RDE1RDgzNEM2NDAeFw0yNDA5MjIx
NzU4NTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM1MjZBNjgzQjk3N0VE
MEE2NjBCNkExOTQ3QjRCMzE5RkM1QTdGREQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNfwqz24v+i4iBJ2se2hRdMAjqyvapZiMY3I3QW4XyFer1Jh4B
L/kmyhPTMlBn4EDTizXjvjki559utF5ceM0+I6JsCajG4/zS6n0KWbXIJv1HaYs7
X3ToBqWUctMu79ag6avowJNoUzKoQoRyVnMQ+OHDUqz7AqR0Z6WN7lavxKJ28mUP
ubd2jL4r5M4rAhNTWq30halCeLRTEgjmdHGMZWKffPEGV2vk01v1mpCvD0W1Q4Et
107Jf3pDpku7iAe73oV3R4NahdkcUqFLJCiJtqqMOoR3YvH3jugcUSvJrnPmGGiY
9s2iuGjdT9lMQhtJudiLdiNUyTFwoYB/POhbAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUNSamg7l37QpmC2oZR7SzGfxaf90wHwYDVR0jBBgwFoAUg6z8RmCcFkmrRhbS
DWTJ0V2DTGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSkNBL2c2
ejhSbUNjRmttclJoYlNEV1RKMFYyRFRHUS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
ZzZ6OFJtQ2NGa21yUmhiU0RXVEowVjJEVEdRLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvSkNBL05TYW1nN2wzN1FwbUMyb1pSN1N6R2Z4
YWY5MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn/tQwDQYJ
KoZIhvcNAQELBQADggEBAKhO1p2nMG0HiONq1tM0hKP8WG4Nv50nGZ9UlYKwRpsM
9PMt+X2JhnM3LSFACVwqtRFj0Xw5HqpE9pa7eaTxHzLH1S9xBCxeA4DuoVgozYJT
k3Q8yIiHw6MUOiIVEaLTAR6U1q84dPq3KnCtvDHm3BjINvceya/7g7fEtno+RTPP
Eaa2K01vygd8BSsxgTVhzcSRgGxDCBJVuxKf8vw9p62hoorosZfNwdi7Q7BdS1L2
D99BuH+oH7etuhv0R5f/FCkO4Tv0qANIiH/7UDXW8KUyoFQpU8mUTC3H1T/qfwwV
6TJv2735KHg8pU4F+eXZlrGnZ+RB8nqc2FQhC2fLaGg=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:11:19 2025 by rpki-client