Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/Q-0By00uwyDA2lIYVxr28p1HoUQ.roa
File: Q-0By00uwyDA2lIYVxr28p1HoUQ.roa (raw, json)
Hash identifier: 0bBr7wY6sbYxZYuBNwDonQBB0DToHa7Qvl8tI6mC0VE=
Subject key identifier: 43:ED:01:CB:4D:2E:C3:20:C0:DA:52:18:57:1A:F6:F2:9D:47:A1:44
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 0D12
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/Q-0By00uwyDA2lIYVxr28p1HoUQ.roa
Signing time: Mon 26 Aug 2024 05:19:32 +0000
ROA not before: Mon 26 Aug 2024 05:19:32 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18042
IP address blocks: 119.14.128.0/17 maxlen: 17
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3346 (0xd12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Aug 26 05:19:32 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=43ED01CB4D2EC320C0DA5218571AF6F29D47A144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:01:44:29:8c:42:09:f0:e5:71:a8:8e:cf:42:
22:d3:41:0f:2a:82:e7:f5:8d:4e:dc:57:0f:c9:3a:
d1:16:a7:30:02:2c:02:03:e5:60:52:b5:62:3e:4c:
4f:06:e0:47:5a:c2:98:2f:5f:1e:dd:88:a3:2f:21:
03:8b:2f:64:41:6c:1d:bb:2a:49:44:c0:07:58:a9:
bc:02:56:a5:d4:9b:74:e3:4d:ef:c6:df:57:bf:29:
49:6c:35:da:05:04:43:e9:d8:45:d0:8b:c1:fc:23:
b4:64:84:dd:9f:09:ee:39:bb:21:6f:cf:20:bd:ce:
2c:b3:a1:a0:88:04:32:61:c7:87:6d:6c:1c:b9:88:
44:90:5e:4d:be:f9:04:cf:90:59:f6:dd:7c:08:b2:
ac:ad:5a:67:e6:46:87:35:5a:f6:eb:a0:3f:78:75:
47:0b:3b:dc:a2:e5:8b:62:ce:ab:fc:a0:ee:9c:c5:
af:93:74:ca:68:d7:64:e7:02:13:ae:9e:60:89:c2:
96:69:26:87:58:84:55:20:aa:8f:bb:f3:a8:4e:f9:
9f:fe:a6:8c:4c:b2:57:c5:42:d2:aa:c0:40:91:28:
3c:50:74:c1:be:cc:46:22:37:8f:32:6c:17:f0:42:
f6:b2:6d:4d:ac:9a:15:90:c0:ad:f7:db:08:32:c7:
43:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:ED:01:CB:4D:2E:C3:20:C0:DA:52:18:57:1A:F6:F2:9D:47:A1:44
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/Q-0By00uwyDA2lIYVxr28p1HoUQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.14.128.0/17
Signature Algorithm: sha256WithRSAEncryption
17:b9:a7:a3:f6:7c:10:ab:9f:3c:08:02:2f:46:14:fb:0a:a3:
5f:bf:97:e1:39:a7:22:f9:e2:67:bb:87:85:f3:b8:bb:e6:2d:
3b:a6:77:f5:71:8f:f0:85:cd:67:59:58:49:dd:58:1a:98:28:
b6:b1:db:04:b2:e9:91:fa:a0:72:42:d8:5c:5d:9a:7d:39:61:
f2:10:1f:ba:41:19:44:3c:88:73:0b:53:e4:1e:b3:e3:07:11:
38:b4:a7:0f:f2:24:e6:20:6e:b2:e4:f7:e4:55:d5:9e:61:6a:
47:20:52:82:f7:5c:a5:e2:d1:d3:16:ba:8b:97:17:8c:65:2e:
0a:14:f9:ae:5f:ee:13:1b:dc:80:24:b1:99:a7:7a:2f:7a:7b:
6e:78:23:2d:bf:8e:66:2f:52:af:fc:cb:d2:d8:af:f4:91:e4:
b5:0b:a0:5f:27:c1:40:20:bf:60:af:c9:56:df:9e:c5:41:8f:
72:56:6d:59:2e:c2:ac:d5:58:ff:cc:e0:35:76:aa:c9:74:d0:
bc:7e:fa:b3:f1:62:f7:37:1c:d4:95:36:b9:7f:e9:13:89:9f:
63:7c:53:22:88:cb:43:5a:07:66:00:4b:02:c8:f0:8c:73:fd:
7f:61:3b:74:3d:c9:d0:85:4e:a8:4f:df:f9:7e:7d:1f:ef:71:
4c:d9:55:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:19:49 2025 by rpki-client