Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NARL/Va2qlQyYmJOZnks1J6GRs6gr1XU.roa
File: Va2qlQyYmJOZnks1J6GRs6gr1XU.roa (raw, json)
Hash identifier: pI8UpwBHsl/RsLsYz1d9JV+HHnFpPPzY4J+nUFOh7cc=
Subject key identifier: 55:AD:AA:95:0C:98:98:93:99:9E:4B:35:27:A1:91:B3:A8:2B:D5:75
Certificate issuer: /CN=451EF9359A984F6A4CF91FE9004EAEB089A984C0
Certificate serial: 0C3A
Authority key identifier: 45:1E:F9:35:9A:98:4F:6A:4C:F9:1F:E9:00:4E:AE:B0:89:A9:84:C0
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RR75NZqYT2pM-R_pAE6usImphMA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/Va2qlQyYmJOZnks1J6GRs6gr1XU.roa
Signing time: Mon 26 Aug 2024 05:21:22 +0000
ROA not before: Mon 26 Aug 2024 05:21:22 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 7539
IP address blocks: 103.124.72.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 11:53:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3130 (0xc3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=451EF9359A984F6A4CF91FE9004EAEB089A984C0
Validity
Not Before: Aug 26 05:21:22 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=55ADAA950C989893999E4B3527A191B3A82BD575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7c:5d:54:3a:1b:fc:f2:22:e6:40:61:c4:d0:
fc:04:08:54:70:a2:02:5d:5f:0f:7e:3c:77:5a:66:
b2:f8:5a:97:d1:3a:9e:c4:57:a4:79:b6:df:21:28:
25:72:db:e8:82:a2:bd:e1:79:82:08:5f:ea:f7:29:
29:ac:0a:b4:c3:e4:a8:6b:ab:af:de:d7:1c:39:65:
6e:a1:54:9a:ba:59:be:6c:85:e1:99:0a:d6:66:4a:
e7:ca:4c:55:0a:d5:c9:f1:fd:c5:05:d9:f1:09:27:
5e:93:9d:16:62:25:88:68:89:a5:34:00:a7:7f:fc:
0f:02:34:b2:1a:74:a9:df:b6:8e:40:c7:8c:00:2a:
5b:93:7a:10:1b:b6:2f:f9:53:0d:c6:57:ae:70:bf:
8f:5e:2c:46:52:b2:c0:79:9c:8e:80:c8:db:e1:49:
ac:f4:cf:d6:c1:0e:44:a0:7d:9d:8d:e8:b6:1f:ed:
bb:b9:3d:e7:9a:ee:c0:9b:4e:00:99:05:65:93:a3:
69:bb:67:5a:8a:0a:19:5e:45:d5:21:79:93:2b:f1:
c3:a8:93:36:5b:6c:41:b8:77:1a:9a:bd:12:01:89:
d4:b2:37:6a:f8:30:83:0d:07:6a:ea:a9:ac:f6:87:
2f:f5:c4:77:f3:f5:5f:86:e4:98:56:fe:3c:76:ff:
f5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AD:AA:95:0C:98:98:93:99:9E:4B:35:27:A1:91:B3:A8:2B:D5:75
X509v3 Authority Key Identifier:
keyid:45:1E:F9:35:9A:98:4F:6A:4C:F9:1F:E9:00:4E:AE:B0:89:A9:84:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/RR75NZqYT2pM-R_pAE6usImphMA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RR75NZqYT2pM-R_pAE6usImphMA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/Va2qlQyYmJOZnks1J6GRs6gr1XU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.124.72.0/22
Signature Algorithm: sha256WithRSAEncryption
23:02:78:0f:25:fe:7c:13:c7:82:10:e6:fd:cb:8c:1a:fb:f8:
61:0a:88:33:ca:2e:39:05:58:7c:36:99:74:e8:af:2d:31:75:
b0:85:86:24:3f:80:30:5b:7d:13:87:cb:2a:0c:57:88:7d:32:
cd:91:b7:27:6f:98:d1:2f:f1:2e:ea:f2:31:98:37:8f:df:9e:
24:de:e6:48:d4:00:a2:bb:b7:e9:ff:ac:f3:38:96:cf:99:8d:
11:7a:30:08:51:66:d7:e2:53:fc:7e:b7:53:04:d5:a9:5b:d9:
26:d8:ec:49:b1:c1:b1:de:5d:79:3b:03:c0:95:66:3c:3d:9b:
1a:09:f9:e3:e7:d1:d4:65:af:c3:95:8d:1b:a3:ba:e2:07:a2:
b8:f8:41:84:98:1f:b7:a4:b1:56:8b:fb:be:7f:4b:67:96:ec:
2d:3d:29:f2:a4:21:90:91:8d:91:5f:19:5e:63:1c:ef:23:c6:
4c:ec:59:e3:88:b1:a0:3f:63:df:ba:47:71:82:25:24:5c:2f:
ab:50:68:87:2a:ba:3d:63:ea:ba:97:a5:97:cf:cc:49:bb:5f:
5f:ae:c5:86:37:5c:ad:7b:ff:65:21:4e:ee:4d:41:e1:62:e3:
6f:00:b7:0d:f5:69:54:c7:e1:da:ee:50:0f:cb:f2:7d:f8:4d:
e3:02:12:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:31 2025 by rpki-client