Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIGMA/IHrDal9t6MTSF2G_fg_5T_Reoag.roa
File: IHrDal9t6MTSF2G_fg_5T_Reoag.roa (raw, json)
Hash identifier: YFM5ybvyixKGgH2oVE0FjLC7qD9tF7j6R6W0NnrUhxI=
Subject key identifier: 20:7A:C3:6A:5F:6D:E8:C4:D2:17:61:BF:7E:0F:F9:4F:F4:5E:A1:A8
Certificate issuer: /CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Certificate serial: 0CD2
Authority key identifier: 3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/IHrDal9t6MTSF2G_fg_5T_Reoag.roa
Signing time: Mon 26 Aug 2024 05:26:16 +0000
ROA not before: Mon 26 Aug 2024 05:26:16 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18419
IP address blocks: 203.121.240.0/20 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:12:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3282 (0xcd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Validity
Not Before: Aug 26 05:26:16 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=207AC36A5F6DE8C4D21761BF7E0FF94FF45EA1A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ec:aa:6b:8c:d5:48:b3:6a:4f:a9:67:4c:9f:
6c:13:ab:e9:24:eb:1b:84:4c:f2:76:f0:38:f1:99:
39:9d:e5:6f:32:27:d7:09:8f:0a:0b:c6:03:65:4d:
95:e3:69:f8:19:dd:b0:d6:5e:a7:09:07:a1:42:3f:
ce:11:d9:81:09:24:53:ab:5d:41:23:04:44:15:6b:
22:b6:3e:2e:c9:61:82:91:74:68:6e:04:6a:55:3a:
3f:b0:c0:e1:0e:52:97:07:53:85:cb:55:e9:29:13:
9a:94:06:8e:83:7c:6b:d0:13:e9:30:20:c2:a9:1f:
0f:f5:1e:3f:3b:24:c6:90:1c:f7:20:2d:73:db:bf:
5b:97:3b:5d:cc:91:b5:5b:d1:7f:94:60:32:7f:43:
16:8b:cc:a2:a4:73:c9:94:3c:bf:b4:c0:96:56:bc:
18:6c:eb:4d:e4:e4:34:49:ec:52:d7:95:39:7e:12:
86:8c:8c:99:b1:78:b1:82:4a:b9:0a:ef:a6:6a:2f:
78:a1:1f:ce:26:53:0b:f4:be:26:11:28:b6:e8:22:
df:89:c2:ea:f6:e5:01:54:7c:3a:c9:cd:60:38:6f:
68:05:7a:9c:4e:d5:d5:fb:c0:13:d4:52:76:29:28:
df:0d:5e:cf:2c:9f:63:e9:0c:6e:ff:36:8a:e2:55:
1e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7A:C3:6A:5F:6D:E8:C4:D2:17:61:BF:7E:0F:F9:4F:F4:5E:A1:A8
X509v3 Authority Key Identifier:
keyid:3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/IHrDal9t6MTSF2G_fg_5T_Reoag.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.121.240.0/20
Signature Algorithm: sha256WithRSAEncryption
19:14:d9:bb:da:4e:0b:96:cb:f1:18:10:05:75:fa:12:25:ea:
78:cc:f9:02:04:fa:49:3c:cf:40:d3:7e:43:2c:5e:08:8e:6b:
f4:41:fa:74:e4:35:ab:92:11:b0:9a:8c:53:bf:4d:63:b4:a9:
0f:5b:7c:0f:3b:68:57:2c:15:d2:6d:81:e9:99:1f:b6:23:88:
f5:d9:02:98:d9:b8:b1:c8:eb:32:bd:d6:e3:d7:4c:32:d1:65:
fd:a1:ad:ec:36:ca:9f:6f:c3:58:0b:0b:e4:7e:c8:a5:f4:b3:
01:89:da:d3:08:15:fc:2f:71:9f:ab:8e:ea:16:7f:f4:57:b7:
06:f5:73:b4:78:29:b3:78:34:3e:57:eb:70:f4:8e:f9:35:ad:
06:3e:b4:93:81:c3:8c:24:df:29:47:88:36:09:ac:60:7c:44:
a8:39:61:d4:cd:47:5c:ba:74:c5:4b:33:33:02:5a:72:5e:56:
ae:53:6a:ef:26:20:9e:d3:2d:3d:e4:e2:3f:17:db:b5:9c:56:
cd:c3:c0:da:1d:91:20:72:e7:87:e4:09:18:ea:bc:71:f8:05:
a8:ee:e6:da:28:d9:18:c3:b9:4a:c6:57:4b:44:0c:0c:18:f6:
21:70:d9:9b:b8:b3:a8:34:a3:52:48:6c:08:f3:5b:f7:03:5b:
80:6e:12:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:48:09 2025 by rpki-client