Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/KleKOOggvXvjWdQtNfa2dsjgcHA.roa
File: KleKOOggvXvjWdQtNfa2dsjgcHA.roa (raw, json)
Hash identifier: WUcQ210UmSnAHx7j7jrpmDc0rUDSMisua35mFePcGSE=
Subject key identifier: 2A:57:8A:38:E8:20:BD:7B:E3:59:D4:2D:35:F6:B6:76:C8:E0:70:70
Certificate issuer: /CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A
Certificate serial: 0120
Authority key identifier: EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/KleKOOggvXvjWdQtNfa2dsjgcHA.roa
Signing time: Wed 09 Oct 2024 00:08:28 +0000
ROA not before: Wed 09 Oct 2024 00:08:28 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 2914
IP address blocks: 202.160.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 20:33:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 288 (0x120)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A
Validity
Not Before: Oct 9 00:08:28 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=2A578A38E820BD7BE359D42D35F6B676C8E07070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:be:bc:63:23:5e:8b:ae:d7:2b:24:0a:e0:02:
18:cb:f2:96:db:e7:a7:e8:19:b1:a2:ce:39:a3:0f:
ae:bb:f1:cb:14:91:6a:be:19:8b:a8:85:43:04:42:
d5:f9:61:b3:02:d3:65:06:94:4e:1c:4d:3b:a8:dd:
c3:48:e3:32:97:91:fe:46:1a:db:9a:72:99:11:86:
a5:92:02:a3:52:78:a3:4d:91:bc:88:f4:d1:3d:37:
52:56:6c:2b:c5:62:89:10:cc:0e:9d:a3:ca:84:b7:
59:8a:95:e0:e7:47:45:2e:dd:0e:a4:0a:33:5a:df:
45:2c:d4:e1:6c:1b:40:68:48:26:66:4d:74:10:c2:
1a:86:89:80:3a:74:ac:96:8b:f0:5c:20:7f:9d:88:
07:1b:d6:b7:0a:88:d1:5a:75:2c:15:f1:3f:42:f2:
74:57:6a:12:cc:09:e7:50:63:d6:85:ef:ba:c8:58:
b6:bc:af:73:81:7a:fb:d6:98:f0:bc:46:c6:a5:74:
dc:7c:75:17:c2:26:de:eb:4f:8e:8f:75:14:46:cf:
01:bf:b6:58:9f:54:1e:38:12:06:f0:c5:4c:a9:b6:
29:aa:64:0d:42:7e:d5:6e:3a:3b:60:1e:4e:fb:4c:
df:cd:80:8c:2a:6d:89:7e:e0:fe:d0:20:9b:cd:ab:
ff:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:57:8A:38:E8:20:BD:7B:E3:59:D4:2D:35:F6:B6:76:C8:E0:70:70
X509v3 Authority Key Identifier:
keyid:EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/KleKOOggvXvjWdQtNfa2dsjgcHA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.160.72.0/21
Signature Algorithm: sha256WithRSAEncryption
12:93:2d:79:16:79:ea:60:68:b9:35:19:d9:7c:c6:ce:71:e7:
a9:02:c3:bd:8f:9e:ed:2d:65:3c:62:0a:0d:42:96:7d:d1:8e:
8d:0d:a5:b2:9c:ba:d8:b4:f1:da:72:13:44:78:bd:ea:fc:d6:
a8:a5:de:02:28:52:91:a0:9e:87:bb:58:32:db:17:b8:54:90:
d5:9c:4c:2a:b6:fb:ed:87:44:4a:14:b1:5f:d3:a7:fe:12:48:
8b:63:d6:11:3c:84:d2:d1:ad:31:93:95:dd:73:1b:89:52:48:
d4:05:36:e6:40:a6:15:b4:36:42:0e:52:27:fb:4e:31:a7:5b:
e4:3e:6b:1a:f3:67:11:53:5d:38:8e:8b:44:95:d7:96:da:a5:
b1:b6:ff:37:4f:65:7c:cf:6c:6b:7e:3e:19:51:20:8a:66:b3:
26:5a:ba:36:fa:11:7d:70:b6:de:72:48:73:a3:db:a9:f8:28:
d7:b4:40:43:bc:c0:85:de:4a:2b:79:42:db:0c:87:59:97:86:
89:0a:39:6d:87:a6:e1:a8:2e:bb:c1:32:b5:7e:c7:91:f2:da:
e6:d6:2e:80:f3:aa:16:5b:0d:b1:6f:a4:3d:39:3f:00:31:20:
59:fe:c0:74:5f:63:21:85:ef:fb:14:fb:dd:9e:04:cc:68:89:
86:cb:fa:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:19:54 2025 by rpki-client