Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGJING/iKB6FcneCu56KcBOvKyd2_It6dU.roa
File: iKB6FcneCu56KcBOvKyd2_It6dU.roa (raw, json)
Hash identifier: V2Teo5YAqQVItHeZMEGg98X1swMluqCFL7C/2a7MY4Y=
Subject key identifier: 88:A0:7A:15:C9:DE:0A:EE:7A:29:C0:4E:BC:AC:9D:DB:F2:2D:E9:D5
Certificate issuer: /CN=4E721C5DD3459DFF85348F1B39DDA9DD50586234
Certificate serial: 11C2
Authority key identifier: 4E:72:1C:5D:D3:45:9D:FF:85:34:8F:1B:39:DD:A9:DD:50:58:62:34
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/iKB6FcneCu56KcBOvKyd2_It6dU.roa
Signing time: Mon 10 Feb 2025 14:26:58 +0000
ROA not before: Mon 10 Feb 2025 14:26:58 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18464
IP address blocks: 103.127.240.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Apr 2025 05:27:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4546 (0x11c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E721C5DD3459DFF85348F1B39DDA9DD50586234
Validity
Not Before: Feb 10 14:26:58 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=88A07A15C9DE0AEE7A29C04EBCAC9DDBF22DE9D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:79:a7:a8:4c:ad:72:72:ec:5f:17:29:5e:d2:
e6:42:a1:fa:90:f3:c3:e3:c3:38:d4:35:55:fc:86:
fd:a9:90:56:62:67:9b:0a:74:43:7a:89:c2:b2:28:
9f:fc:40:13:59:ea:23:4d:62:40:58:c1:50:61:ab:
1d:e1:34:bf:29:5d:7d:8f:de:08:a5:5b:d9:6f:9a:
b3:93:25:f4:1a:10:ef:51:09:a9:37:21:6f:62:4c:
0a:66:ea:7c:ac:65:a2:3e:3e:21:56:32:e1:c4:1c:
7a:3f:89:da:45:05:0f:9c:6e:9c:23:90:89:35:96:
01:62:9d:ee:52:d8:32:0d:c7:b4:56:04:4f:73:58:
ff:43:82:51:4e:10:a2:29:c4:35:57:72:cd:e2:5d:
ce:0c:a9:c8:de:b7:28:a5:dc:67:24:0b:49:5f:79:
6a:65:27:d8:a1:04:7c:f4:cd:5c:a9:58:11:75:b3:
f9:b3:dc:1d:34:07:0d:ff:99:26:0f:cd:a2:6c:7d:
41:0b:78:45:2f:d0:9b:59:c9:cb:55:bf:ce:e6:dd:
8f:35:8e:02:b1:d1:22:b7:75:3a:31:0e:a2:07:30:
8a:5d:d7:06:35:6c:a8:58:9f:71:07:76:e3:7b:23:
69:f9:90:cd:02:dd:82:54:5a:88:8d:8b:0e:4a:d9:
7b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A0:7A:15:C9:DE:0A:EE:7A:29:C0:4E:BC:AC:9D:DB:F2:2D:E9:D5
X509v3 Authority Key Identifier:
keyid:4E:72:1C:5D:D3:45:9D:FF:85:34:8F:1B:39:DD:A9:DD:50:58:62:34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/iKB6FcneCu56KcBOvKyd2_It6dU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.127.240.0/22
Signature Algorithm: sha256WithRSAEncryption
33:cb:5b:a1:29:8b:e1:24:af:16:76:24:da:e8:f3:8d:16:ac:
d4:09:2f:a9:7c:87:44:10:e7:3b:06:9f:8b:9b:12:a2:df:a9:
6d:e0:a0:b2:0e:90:d6:7c:bb:53:62:ab:71:75:00:8d:a1:c5:
9d:48:55:15:8c:24:bf:51:09:53:64:39:fc:18:2a:d5:c4:9e:
e2:8e:b4:15:fa:a1:3e:03:61:52:fd:4d:ca:9e:62:42:51:db:
63:0c:ea:b2:81:3d:ad:b4:0b:cc:c1:f5:ba:72:82:60:39:99:
33:27:41:dd:e1:a0:9c:9a:a2:b2:0d:df:e8:5b:f2:31:ae:6e:
1a:b5:9d:25:5e:56:0d:a4:35:00:86:bf:7a:91:85:9f:b6:99:
a3:73:06:c5:2f:c7:20:26:4e:80:12:ce:d0:a8:cf:3c:2f:ff:
8a:ee:f8:5d:f8:c0:e5:f7:e1:91:86:d0:9f:af:7f:73:66:9a:
f3:b3:7e:a6:18:3f:17:c8:cf:37:c0:89:7b:95:80:ca:a7:ff:
8f:b4:34:86:b2:4e:87:a0:45:11:7f:33:e9:45:d5:73:a3:81:
e0:a4:6d:8b:8d:37:84:36:47:cb:5f:0d:33:05:13:0f:16:80:
7b:e0:94:9e:88:15:bd:70:1b:5f:5b:cb:1b:a6:70:a1:d4:75:
3a:ad:aa:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 11:08:36 2025 by rpki-client