Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DQWL/FTofLJ5r2lokvTXTAoRL9W0U-8w.roa
File: FTofLJ5r2lokvTXTAoRL9W0U-8w.roa (raw, json)
Hash identifier: JkHxeJ9f40/Km8ktdzaj4Tjjzxv/VvRdR0YdQBIGRMA=
Subject key identifier: 15:3A:1F:2C:9E:6B:DA:5A:24:BD:35:D3:02:84:4B:F5:6D:14:FB:CC
Certificate issuer: /CN=7CBA374F4F7A0D1E6CB59F8A7B564066C67DD19D
Certificate serial: 0814
Authority key identifier: 7C:BA:37:4F:4F:7A:0D:1E:6C:B5:9F:8A:7B:56:40:66:C6:7D:D1:9D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/fLo3T096DR5stZ-Ke1ZAZsZ90Z0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DQWL/FTofLJ5r2lokvTXTAoRL9W0U-8w.roa
Signing time: Mon 26 Aug 2024 05:12:36 +0000
ROA not before: Mon 26 Aug 2024 05:12:35 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131678
IP address blocks: 103.149.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2068 (0x814)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CBA374F4F7A0D1E6CB59F8A7B564066C67DD19D
Validity
Not Before: Aug 26 05:12:35 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=153A1F2C9E6BDA5A24BD35D302844BF56D14FBCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2d:9b:7d:89:22:17:2d:5f:6f:41:a1:86:e0:
e4:bd:8e:5a:2b:fb:cc:1c:6b:f9:61:a5:4a:c0:ea:
d4:3b:53:e5:34:d0:26:97:c6:d9:d7:41:83:9e:48:
c9:0a:27:8a:ca:0f:27:0b:34:5a:9c:c9:68:83:40:
37:ab:6b:b9:9b:20:40:68:65:18:19:4b:29:e1:b1:
fd:00:73:0f:f8:ac:64:a1:cb:d4:b4:6d:b4:93:e2:
4e:b3:11:c4:4c:74:c4:3c:2b:8e:09:da:4c:be:a8:
78:8d:f1:ae:0e:f0:26:7c:4a:04:92:97:7a:45:fd:
09:bb:b4:3c:8c:0d:37:ef:26:d8:a8:13:54:25:2f:
75:22:77:ea:1f:e1:3d:3e:4a:74:10:cc:43:54:36:
6f:75:5c:06:61:ba:f3:e8:62:92:2d:90:26:cb:dd:
c9:29:15:89:a3:25:35:97:f5:58:43:a6:0e:96:34:
35:be:00:ad:b2:b7:c8:9f:bf:fb:06:7b:da:2f:35:
24:c1:de:7b:c7:65:86:bd:e6:9e:85:85:40:de:19:
40:d3:14:83:f7:86:f7:eb:0c:92:a9:9f:e6:49:f5:
b8:80:02:c2:22:14:ed:59:5f:fb:dd:a1:9e:0b:e2:
2c:9a:fc:06:c8:87:e5:55:9c:43:90:5f:3b:bd:b3:
c4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:3A:1F:2C:9E:6B:DA:5A:24:BD:35:D3:02:84:4B:F5:6D:14:FB:CC
X509v3 Authority Key Identifier:
keyid:7C:BA:37:4F:4F:7A:0D:1E:6C:B5:9F:8A:7B:56:40:66:C6:7D:D1:9D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DQWL/fLo3T096DR5stZ-Ke1ZAZsZ90Z0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fLo3T096DR5stZ-Ke1ZAZsZ90Z0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DQWL/FTofLJ5r2lokvTXTAoRL9W0U-8w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.149.66.0/24
Signature Algorithm: sha256WithRSAEncryption
78:a8:43:d7:eb:75:37:41:d0:07:25:d1:4c:de:bc:59:9d:b6:
65:3e:63:b9:c7:84:c1:a6:e5:03:1d:f0:6a:55:61:08:39:3d:
05:7a:4c:9c:25:5f:4c:db:e5:f5:62:f7:42:35:00:9d:5f:6a:
c6:14:5e:eb:35:70:1d:6c:eb:e6:b8:bc:0b:7b:a3:20:3a:87:
eb:9b:a8:4c:b1:c9:50:8b:22:86:25:52:30:2a:c2:40:76:3a:
2e:de:0d:b0:e8:d4:38:20:0a:56:3a:c9:ab:90:a8:18:81:da:
9c:18:f4:1a:1b:0d:3f:51:a3:b3:4b:ec:c1:ae:40:23:b3:80:
33:34:2b:0b:53:c6:db:23:5d:37:2b:c5:62:a4:2c:b6:71:30:
b5:e0:74:4a:2e:09:16:53:ca:12:e2:e3:a4:c3:f0:0e:36:88:
42:48:70:7e:e6:93:86:16:48:0c:19:6c:47:71:6d:ba:29:87:
4a:a2:73:53:53:6b:a8:e1:2e:e2:4d:0f:fa:00:c9:7e:3a:60:
8f:b5:7b:3b:a8:48:33:c3:76:eb:2a:76:80:99:38:be:8f:b1:
de:4c:fc:1c:0f:45:84:79:14:57:b3:9b:61:1f:56:c9:69:a0:
e2:31:3d:64:e8:a7:a1:a9:8b:c8:73:d1:ae:23:21:8a:46:d9:
9a:66:1c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 11 03:42:42 2025 by rpki-client on console.sobornost.net