Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/kBFBVX54RG8eqwo2psMVVz8CKac.roa
File: kBFBVX54RG8eqwo2psMVVz8CKac.roa (raw, json)
Hash identifier: RLHu3LWbEjLU1eb6+FouhQJLw45G2/D5rP6rIu/VFz8=
Subject key identifier: 90:11:41:55:7E:78:44:6F:1E:AB:0A:36:A6:C3:15:57:3F:02:29:A7
Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial: 0E85
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/kBFBVX54RG8eqwo2psMVVz8CKac.roa
Signing time: Mon 10 Feb 2025 14:16:27 +0000
ROA not before: Mon 10 Feb 2025 14:16:27 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18420
IP address blocks: 140.115.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Mon 17 Feb 2025 09:12:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3717 (0xe85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Validity
Not Before: Feb 10 14:16:27 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=901141557E78446F1EAB0A36A6C315573F0229A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7e:d9:70:e1:7c:55:f9:bd:2f:f8:d9:fc:df:
4e:97:01:a0:88:20:cb:42:88:8e:f9:89:46:f0:4f:
1b:06:18:40:d9:56:df:18:2e:c6:cd:21:e4:f3:27:
dd:7a:e7:3e:ca:15:e3:49:ef:c8:0e:28:cd:dd:63:
23:85:e1:44:63:66:84:7c:2d:98:47:f0:a4:4a:02:
01:ed:e2:ba:ac:c1:55:26:6b:c4:a7:0b:0d:5a:f7:
19:26:f9:13:30:2a:be:b7:3b:7c:29:d8:6e:39:83:
b3:fc:10:f7:69:ae:a3:b2:3f:5d:96:eb:00:25:78:
2d:43:1f:11:6c:ea:d9:1d:a6:01:f1:63:b1:85:7d:
2a:be:96:d4:02:7a:c5:3b:97:09:c2:f6:5f:9a:f1:
84:2b:55:cc:56:5c:d1:b8:40:03:a3:c1:77:7e:25:
9e:4f:db:0b:eb:2e:7a:fe:3b:c8:a0:8f:d2:18:3a:
ad:75:9e:b9:87:dc:aa:2d:2e:93:39:b8:41:d4:67:
fa:ca:18:84:65:46:cb:f5:de:8e:68:8b:36:9b:07:
8e:0a:05:d6:50:0f:bb:1c:3a:38:c0:75:1f:fe:72:
c1:8e:c5:c8:df:22:75:9d:99:d2:93:36:46:74:b9:
7f:8a:23:01:db:3a:2d:20:90:cd:3c:35:cc:58:f3:
d0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:11:41:55:7E:78:44:6F:1E:AB:0A:36:A6:C3:15:57:3F:02:29:A7
X509v3 Authority Key Identifier:
keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/kBFBVX54RG8eqwo2psMVVz8CKac.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
140.115.0.0/16
Signature Algorithm: sha256WithRSAEncryption
09:1e:87:a5:46:4f:91:52:74:04:08:31:9d:9b:67:81:12:e5:
d4:07:73:67:05:c5:fe:44:74:e0:9e:aa:d3:c3:e1:c3:d8:b7:
56:52:45:8b:c9:71:27:a6:ed:ee:bf:a8:81:da:89:1f:c4:fc:
96:fc:fe:d9:ee:0f:08:8d:4b:77:20:da:1a:23:51:da:30:26:
59:c2:2c:bc:86:a7:3d:4a:73:78:87:49:7b:86:a8:11:a4:d4:
7d:4a:3d:a2:03:71:08:6c:05:40:9a:b1:ba:dc:74:dc:b5:dd:
36:c3:ea:13:74:0d:48:e8:14:c1:5c:6c:24:d6:bb:4a:6f:9c:
45:21:f2:8c:c6:43:2f:f2:4f:7e:e7:ef:e8:77:5e:d2:a5:1c:
e4:be:f6:5d:80:b4:ce:ee:ac:16:65:a2:24:cf:45:af:34:5e:
54:fd:97:64:0c:f2:15:b1:e6:7e:ab:81:70:6f:55:d1:18:83:
02:83:04:99:a1:07:62:b0:e1:ea:af:ec:3e:2a:21:61:f1:ea:
88:a1:d6:ed:32:f9:7c:92:52:f9:e3:3d:d2:31:79:58:ce:c7:
94:06:f0:39:47:b0:ed:ca:9b:b0:e5:ee:19:b8:f9:85:1b:4c:
66:00:47:3e:05:54:77:c1:48:f4:3e:ab:ea:25:39:04:7e:12:
32:e3:a3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:48:57 2025 by rpki-client