Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGJING/jx5iuzvq9XCkqwduQ3jsFJPcS18.roa
File: jx5iuzvq9XCkqwduQ3jsFJPcS18.roa (raw, json)
Hash identifier: KDRTebSldSRx5/vEDa643mQ5GlEgCjdCXtH8SL6cR4c=
Subject key identifier: 8F:1E:62:BB:3B:EA:F5:70:A4:AB:07:6E:43:78:EC:14:93:DC:4B:5F
Certificate issuer: /CN=4E721C5DD3459DFF85348F1B39DDA9DD50586234
Certificate serial: 1144
Authority key identifier: 4E:72:1C:5D:D3:45:9D:FF:85:34:8F:1B:39:DD:A9:DD:50:58:62:34
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/jx5iuzvq9XCkqwduQ3jsFJPcS18.roa
Signing time: Mon 26 Aug 2024 05:20:49 +0000
ROA not before: Mon 26 Aug 2024 05:20:49 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18464
IP address blocks: 103.127.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:26:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4420 (0x1144)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E721C5DD3459DFF85348F1B39DDA9DD50586234
Validity
Not Before: Aug 26 05:20:49 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=8F1E62BB3BEAF570A4AB076E4378EC1493DC4B5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:54:f8:d6:30:8f:43:20:d3:90:ef:94:1b:ff:
ba:ae:6a:1c:b7:5f:ac:21:28:fa:9d:11:74:a0:f9:
d5:11:ea:56:58:3f:2b:0f:87:42:eb:0a:c1:d2:f4:
0e:bf:1e:e2:1f:82:c0:a3:26:51:b5:3b:27:45:01:
6c:68:9f:0f:2f:1f:3a:a9:8a:eb:1f:ad:d5:7e:79:
db:03:8a:fa:fe:8c:f9:a7:cf:02:98:6d:86:17:db:
5d:7c:53:91:a9:d4:26:49:4c:e7:33:c8:45:5a:78:
86:53:ab:db:fb:06:27:a3:58:fa:69:9a:33:c2:44:
a1:f1:80:db:fa:10:2b:95:25:b0:71:98:89:2a:c5:
c6:9d:96:0d:7f:87:6f:5c:5b:1a:78:94:83:77:12:
04:75:7e:0b:0d:ac:0a:ca:56:25:f1:7f:c9:79:a9:
c1:76:ad:0d:53:ba:ab:fd:12:1a:b5:05:e3:2c:2f:
26:fc:16:d0:5c:3e:99:54:00:10:59:ea:67:7a:fa:
f7:7f:3c:c5:9f:62:5a:de:a4:30:85:fd:18:4c:d0:
59:73:88:5f:b4:3c:85:55:d5:76:eb:da:6d:97:ad:
f3:fe:63:46:aa:b5:fc:56:c3:7b:2a:0f:ab:52:16:
e8:93:47:26:50:dd:bd:98:fe:76:99:02:dc:65:59:
62:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1E:62:BB:3B:EA:F5:70:A4:AB:07:6E:43:78:EC:14:93:DC:4B:5F
X509v3 Authority Key Identifier:
keyid:4E:72:1C:5D:D3:45:9D:FF:85:34:8F:1B:39:DD:A9:DD:50:58:62:34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/jx5iuzvq9XCkqwduQ3jsFJPcS18.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.127.241.0/24
Signature Algorithm: sha256WithRSAEncryption
73:58:00:93:2f:25:6b:2d:ec:87:ef:b5:76:02:86:87:52:76:
46:a6:6f:10:98:51:d7:c3:ed:b5:be:e1:bd:f6:1a:a4:4a:7a:
c0:ca:db:e8:eb:89:e4:55:6a:f4:d4:3a:17:59:20:7b:30:63:
08:4f:d6:b6:7c:d6:9e:de:aa:6a:67:ed:48:a2:58:a4:96:41:
2e:af:70:7f:25:a8:b1:a9:3a:d9:62:a0:58:da:a8:03:f7:a0:
d5:7e:d7:4c:90:76:21:95:50:3e:41:d7:1a:70:7f:3e:d6:a9:
56:22:5b:b9:8d:1d:38:46:7a:72:6a:1d:4a:1a:83:72:9a:48:
6d:24:91:8d:85:4a:dc:0b:6b:cb:13:05:15:56:e6:ab:a5:ff:
7b:3c:45:63:bb:41:14:db:23:86:83:34:ee:ba:fd:f5:2f:5f:
02:76:3f:7b:d4:c7:f4:c9:51:5f:c5:b0:8d:0f:ac:27:68:3b:
30:ec:9c:b0:c8:19:93:cd:37:b6:85:f3:cc:db:20:bd:7c:f7:
5a:ad:45:25:47:b7:f3:b6:ce:b9:50:61:8a:ee:44:6d:f8:1e:
71:3b:e6:a1:4a:83:19:f7:90:85:e4:17:8e:0f:da:01:8c:1c:
c3:44:f7:a9:a1:e9:93:73:be:50:e8:eb:8d:cc:bf:b1:b5:f3:
32:5d:67:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:21:28 2025 by rpki-client