Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TCB/w8jCFripVH_JHdFEJpW9PetDfPg.roa
File: w8jCFripVH_JHdFEJpW9PetDfPg.roa (raw, json)
Hash identifier: yNJkTmCe2Ee+XYYQyf7hEf/qMCCZZo67FWeLy0O53pE=
Subject key identifier: C3:C8:C2:16:B8:A9:54:7F:C9:1D:D1:44:26:95:BD:3D:EB:43:7C:F8
Certificate issuer: /CN=BF82A3AC11455030743C0A743711F8A0D8EBAE28
Certificate serial: 0C5D
Authority key identifier: BF:82:A3:AC:11:45:50:30:74:3C:0A:74:37:11:F8:A0:D8:EB:AE:28
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/v4KjrBFFUDB0PAp0NxH4oNjrrig.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TCB/w8jCFripVH_JHdFEJpW9PetDfPg.roa
Signing time: Mon 26 Aug 2024 05:27:41 +0000
ROA not before: Mon 26 Aug 2024 05:27:41 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131590
IP address blocks: 103.227.224.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 08 Jan 2025 01:20:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3165 (0xc5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF82A3AC11455030743C0A743711F8A0D8EBAE28
Validity
Not Before: Aug 26 05:27:41 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C3C8C216B8A9547FC91DD1442695BD3DEB437CF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4a:43:85:f8:7d:a5:4d:d1:34:9f:36:00:fd:
cc:0c:69:dd:26:ef:f5:a6:c5:eb:39:47:d5:21:f9:
b8:67:28:33:08:a6:50:38:9d:34:14:f9:ae:3b:1f:
ec:07:b7:2f:70:bd:f7:a2:12:78:49:19:a4:0a:c8:
35:ca:37:c6:d8:ed:13:7a:ec:21:2b:39:58:fa:bc:
ac:ac:17:6e:0c:b4:3b:7f:3e:2b:84:0c:ab:48:8b:
6f:60:ed:94:b9:9b:9b:d6:36:77:2a:59:c0:6c:12:
6c:bc:0d:3d:c1:50:99:40:16:c9:ed:60:1b:07:2b:
1a:22:4c:0e:aa:01:15:49:3d:87:45:5b:e1:b8:ff:
6a:b3:dd:32:a9:2f:d2:40:54:e5:c1:88:97:c6:ee:
bd:44:af:5b:f8:83:55:cc:a0:a7:1a:93:7d:f5:c9:
fc:8b:a4:be:f9:d9:fe:e5:2e:74:47:5d:9a:dd:fa:
bb:11:ba:db:32:ab:7b:06:b4:2b:eb:90:56:cf:33:
31:4a:20:64:dd:5e:fd:b8:f2:c3:8f:7c:29:e6:06:
06:e3:d3:3a:60:c7:c5:3e:9f:af:39:56:3f:9c:5e:
95:ab:09:cc:44:cb:82:9c:c6:96:59:1b:c0:20:0b:
5e:e0:d2:c6:f0:19:80:00:d9:a9:d1:9f:e2:9e:5d:
28:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C8:C2:16:B8:A9:54:7F:C9:1D:D1:44:26:95:BD:3D:EB:43:7C:F8
X509v3 Authority Key Identifier:
keyid:BF:82:A3:AC:11:45:50:30:74:3C:0A:74:37:11:F8:A0:D8:EB:AE:28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TCB/v4KjrBFFUDB0PAp0NxH4oNjrrig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/v4KjrBFFUDB0PAp0NxH4oNjrrig.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TCB/w8jCFripVH_JHdFEJpW9PetDfPg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.227.224.0/22
Signature Algorithm: sha256WithRSAEncryption
dc:fb:98:8b:8e:6c:d3:ae:b4:1e:3b:04:08:79:01:56:0b:d8:
25:33:d2:f1:95:54:06:2e:10:02:24:bc:fb:64:5a:29:d8:ba:
bc:85:ee:61:f8:a1:88:5f:75:29:3d:1d:93:0a:d0:00:ab:14:
56:da:12:47:da:28:55:3c:21:41:95:14:03:b5:c4:f1:21:89:
f5:24:6a:f6:21:5b:fe:4b:c1:be:21:c7:cb:ca:b3:29:fa:39:
a4:c2:2e:32:52:f7:43:dd:b4:4a:47:0d:4b:11:50:a5:59:c3:
fb:6a:17:6b:08:ce:78:4c:21:e0:d0:5e:3d:72:81:a6:79:0d:
b0:36:f5:11:ae:8f:ce:20:8a:77:cd:51:21:1f:3f:27:86:c0:
3a:8d:9f:3d:1e:2c:6b:0b:c4:c1:33:00:a6:95:a6:69:82:a8:
dc:04:81:d9:ae:a8:4f:e4:5d:08:98:7b:ad:2f:eb:c8:6f:c4:
16:d1:96:05:b9:78:d1:e2:c4:cb:0a:26:39:ec:ae:a4:6a:33:
31:6c:32:7e:bb:e1:ca:de:84:f7:31:60:38:55:25:46:75:a6:
b7:5e:a2:2a:de:ec:11:2f:5d:b1:c4:05:3d:cc:d6:7e:e9:42:
ac:4a:df:86:7f:91:a7:2a:ca:71:f5:b4:3b:43:32:78:2e:1e:
35:17:2d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:37:23 2025 by rpki-client