Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/8aL-lh66emEXw_61J2LnI_6j8fI.roa
File: 8aL-lh66emEXw_61J2LnI_6j8fI.roa (raw, json)
Hash identifier: 1GfHMjTP4gtJN2vCK+nxSnM7dyN1lDT62zVSsFTiWSw=
Subject key identifier: F1:A2:FE:96:1E:BA:7A:61:17:C3:FE:B5:27:62:E7:23:FE:A3:F1:F2
Certificate issuer: /CN=040D968303B364F772A753578220D3537E16166E
Certificate serial: 02AA
Authority key identifier: 04:0D:96:83:03:B3:64:F7:72:A7:53:57:82:20:D3:53:7E:16:16:6E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BA2WgwOzZPdyp1NXgiDTU34WFm4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/8aL-lh66emEXw_61J2LnI_6j8fI.roa
Signing time: Mon 26 Aug 2024 05:26:09 +0000
ROA not before: Mon 26 Aug 2024 05:26:09 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 63897
IP address blocks: 103.175.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:57:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 682 (0x2aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=040D968303B364F772A753578220D3537E16166E
Validity
Not Before: Aug 26 05:26:09 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F1A2FE961EBA7A6117C3FEB52762E723FEA3F1F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:31:ce:e2:46:4a:8a:53:97:55:31:12:d1:00:
c1:13:1b:56:c9:ff:ea:86:46:64:4c:3a:51:4f:af:
da:75:74:18:cf:23:af:39:8c:b0:5d:0b:1e:67:e3:
e2:b0:6a:cf:cc:c9:82:19:37:48:48:a2:ec:da:ae:
81:09:2a:fb:db:4f:67:36:ef:b0:c2:3c:c5:b1:8d:
ae:3b:97:bf:54:e4:a0:bc:7b:ff:05:8d:47:3f:ba:
45:ca:7c:88:88:e8:cc:9f:da:f8:0a:22:e1:9f:2a:
49:ba:92:ac:01:4c:ee:fa:39:90:28:88:ef:4b:aa:
8b:c0:47:f0:fe:78:fe:0f:23:18:29:6e:2c:c0:d7:
c6:89:83:3e:0d:9b:d0:c3:f2:93:7e:9b:98:58:7c:
a3:06:3a:c7:15:43:80:31:dd:34:e4:4d:b8:6b:3b:
a0:c5:aa:ff:b4:3a:45:c7:d7:33:67:d6:4c:14:b1:
69:9a:49:d4:ef:8a:59:56:03:dc:d0:e9:cd:46:7b:
c5:cf:cd:a8:3e:a4:33:44:64:91:13:ce:5f:35:c7:
92:f9:0d:11:84:a0:29:db:34:3d:d2:f5:df:f1:9b:
53:e3:a3:cf:00:f5:14:e5:41:6d:1b:8b:07:5d:61:
e4:46:20:a5:70:bd:26:40:93:0b:ab:a1:ff:93:ea:
71:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A2:FE:96:1E:BA:7A:61:17:C3:FE:B5:27:62:E7:23:FE:A3:F1:F2
X509v3 Authority Key Identifier:
keyid:04:0D:96:83:03:B3:64:F7:72:A7:53:57:82:20:D3:53:7E:16:16:6E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/BA2WgwOzZPdyp1NXgiDTU34WFm4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BA2WgwOzZPdyp1NXgiDTU34WFm4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/8aL-lh66emEXw_61J2LnI_6j8fI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.175.254.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:de:f4:0a:18:67:64:08:49:1a:19:16:1d:21:38:d4:5e:5a:
0e:92:55:36:3e:cb:58:05:43:07:58:e7:59:11:fd:26:97:99:
e1:84:c9:05:c4:9a:f0:a7:d3:0d:16:b2:3b:e7:db:aa:0f:15:
a6:63:4c:48:43:3d:fd:2c:37:f0:3b:7b:37:ea:c5:97:46:fd:
d5:93:d6:4f:7c:9f:f7:d6:57:0f:ea:11:d2:95:e7:0a:1c:28:
d1:8a:69:24:09:fa:1c:03:13:ca:a9:49:87:d0:96:36:73:03:
a2:6e:35:d0:34:3e:9a:f4:d3:d3:9b:fc:36:4a:26:6d:8f:43:
f9:9a:01:2d:c5:5b:e5:1b:7b:d3:3a:d3:3a:66:99:f3:f8:ac:
9b:af:90:aa:55:84:56:02:ac:99:27:a6:b4:bb:ef:3e:26:ff:
ee:39:a5:cd:79:1d:34:55:bb:ea:97:ae:1e:e0:58:f0:f5:8f:
18:87:23:bc:21:dc:3a:b3:fc:62:6a:b9:c9:18:b5:c5:a4:64:
ed:7b:dc:55:fe:95:c5:da:c3:6b:ea:80:ff:06:4c:48:1e:55:
bb:9d:52:ea:4f:06:a1:b2:04:85:d3:a2:9c:a6:a6:d3:19:7a:
7b:d2:b1:a8:8b:d3:6c:bb:10:5f:38:28:b0:c7:23:9a:86:db:
7d:c8:b7:e7
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICAqowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDQw
RDk2ODMwM0IzNjRGNzcyQTc1MzU3ODIyMEQzNTM3RTE2MTY2RTAeFw0yNDA4MjYw
NTI2MDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEYxQTJGRTk2MUVCQTdB
NjExN0MzRkVCNTI3NjJFNzIzRkVBM0YxRjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/Mc7iRkqKU5dVMRLRAMETG1bJ/+qGRmRMOlFPr9p1dBjPI685
jLBdCx5n4+Kwas/MyYIZN0hIouzaroEJKvvbT2c277DCPMWxja47l79U5KC8e/8F
jUc/ukXKfIiI6Myf2vgKIuGfKkm6kqwBTO76OZAoiO9LqovAR/D+eP4PIxgpbizA
18aJgz4Nm9DD8pN+m5hYfKMGOscVQ4Ax3TTkTbhrO6DFqv+0OkXH1zNn1kwUsWma
SdTvillWA9zQ6c1Ge8XPzag+pDNEZJETzl81x5L5DRGEoCnbND3S9d/xm1Pjo88A
9RTlQW0biwddYeRGIKVwvSZAkwurof+T6nGTAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU8aL+lh66emEXw/61J2LnI/6j8fIwHwYDVR0jBBgwFoAUBA2WgwOzZPdyp1NX
giDTU34WFm4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lBTkdZ
VS9CQTJXZ3dPelpQZHlwMU5YZ2lEVFUzNFdGbTQuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0JBMldnd096WlBkeXAxTlhnaURUVTM0V0ZtNC5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NJQU5HWVUvOGFMLWxoNjZlbUVYd182
MUoyTG5JXzZqOGZJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AGev/jANBgkqhkiG9w0BAQsFAAOCAQEALd70ChhnZAhJGhkWHSE41F5aDpJVNj7L
WAVDB1jnWRH9JpeZ4YTJBcSa8KfTDRayO+fbqg8VpmNMSEM9/Sw38Dt7N+rFl0b9
1ZPWT3yf99ZXD+oR0pXnChwo0YppJAn6HAMTyqlJh9CWNnMDom410DQ+mvTT05v8
NkombY9D+ZoBLcVb5Rt70zrTOmaZ8/ism6+QqlWEVgKsmSemtLvvPib/7jmlzXkd
NFW76peuHuBY8PWPGIcjvCHcOrP8Ymq5yRi1xaRk7XvcVf6VxdrDa+qA/wZMSB5V
u51S6k8GobIEhdOinKam0xl6e9KxqIvTbLsQXzgosMcjmobbfci35w==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:35:05 2025 by rpki-client