Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/PTrec0N0NffleElw6hovmXlb3sg.roa
File: PTrec0N0NffleElw6hovmXlb3sg.roa (raw, json)
Hash identifier: nQ3WkZ6RTORaRN2icppFrN+yktN2MpI9pIA4F6jnnsw=
Subject key identifier: 3D:3A:DE:73:43:74:35:F7:E5:78:49:70:EA:1A:2F:99:79:5B:DE:C8
Certificate issuer: /CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A
Certificate serial: FE
Authority key identifier: EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/PTrec0N0NffleElw6hovmXlb3sg.roa
Signing time: Wed 11 Sep 2024 17:34:10 +0000
ROA not before: Wed 11 Sep 2024 17:34:10 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 2914
IP address blocks: 202.160.88.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Oct 2024 00:08:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254 (0xfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A
Validity
Not Before: Sep 11 17:34:10 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=3D3ADE73437435F7E5784970EA1A2F99795BDEC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e2:5a:c8:31:a2:fc:73:ff:98:59:61:73:f1:
68:fd:f1:d8:52:8d:d1:54:9b:75:1b:59:8f:d8:2d:
a1:16:fb:7a:1f:fe:bf:64:b8:89:c8:d9:be:86:ca:
0a:68:fb:5c:45:fd:af:da:8c:08:31:d1:01:ae:a1:
a2:bc:3c:03:0e:b2:f1:4e:47:88:a2:b4:62:55:3c:
40:98:35:5b:6c:68:fd:77:21:98:78:b2:17:32:06:
44:98:21:df:b6:be:25:52:1f:c0:83:54:cd:a2:36:
7d:f3:b6:70:99:44:b1:28:23:c2:c4:8a:45:b0:2a:
82:24:b1:2e:90:06:58:46:2d:22:dc:85:3d:e5:1c:
7c:55:f8:d4:a8:07:80:ca:34:bc:c1:73:3e:15:53:
ee:05:ad:50:ef:26:44:86:49:f8:bd:dd:15:29:77:
1f:44:50:d3:92:61:79:76:97:25:01:9e:85:bc:02:
3e:3b:96:c9:40:7c:8a:0b:c5:29:b7:31:ca:77:9f:
42:98:30:fe:bf:c5:6e:fd:8e:e1:97:14:d8:2a:d2:
67:25:a0:c0:b7:27:67:47:14:fa:32:f0:10:08:36:
df:98:1c:b1:05:c3:1b:e4:9a:bc:de:3d:db:3f:8f:
95:3d:b8:8c:53:12:c3:ce:80:4b:5c:c9:3e:ed:ae:
e7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3A:DE:73:43:74:35:F7:E5:78:49:70:EA:1A:2F:99:79:5B:DE:C8
X509v3 Authority Key Identifier:
keyid:EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/PTrec0N0NffleElw6hovmXlb3sg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.160.88.0/21
Signature Algorithm: sha256WithRSAEncryption
4f:b4:e3:f6:2a:5a:79:d1:fc:a1:ec:7a:70:f5:de:6c:97:e5:
c2:3e:c9:e5:2a:6c:3d:81:73:ba:12:0c:d0:dd:18:1d:99:e4:
91:40:1f:bb:c1:89:25:ac:30:13:47:b5:4a:d6:3f:1b:31:28:
aa:8f:55:a1:01:73:ae:2a:79:5f:b5:ee:d0:45:b2:05:ab:40:
64:bd:b2:4b:f6:01:fb:62:6c:9f:49:38:6d:14:af:c8:bc:74:
cc:6d:41:b4:ad:d1:7b:af:ae:d3:d5:73:c6:9e:17:df:70:c8:
48:52:8f:86:fe:d0:24:3c:cd:34:9b:f5:6b:b3:7c:50:2a:41:
fc:f0:d4:36:2e:dd:c2:c5:1e:a0:84:4a:2e:a4:bf:c5:3f:82:
25:a9:31:72:a6:c5:b2:db:72:c8:7e:d2:33:67:17:1e:05:07:
b7:8e:f8:84:3c:96:b0:5a:87:25:a2:54:6a:8f:40:01:0d:20:
c5:95:0b:96:c8:06:78:1d:be:5d:98:c5:f5:8e:d3:5a:95:24:
d3:67:b5:5e:59:2f:4d:fa:ef:a5:64:1e:3d:59:61:73:78:11:
e9:81:a6:c3:54:40:41:7d:f7:f1:b8:56:6d:4f:6a:0e:45:f1:
7b:ab:34:52:02:80:b0:26:1c:9d:41:8e:fa:8d:bc:f1:4f:2e:
b6:c6:75:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:24:24 2025 by rpki-client