Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKPC/CNEjnpn_LU1cIcU4PEN2-6aEkrM.roa
File: CNEjnpn_LU1cIcU4PEN2-6aEkrM.roa (raw, json)
Hash identifier: rTv1kJoYCUn0YQqXaIk80V3jwZ8Jstvn5WSyPuGfHmw=
Subject key identifier: 08:D1:23:9E:99:FF:2D:4D:5C:21:C5:38:3C:43:76:FB:A6:84:92:B3
Certificate issuer: /CN=CE37D7C99185A3D9AC611718DA78559B6E99A31B
Certificate serial: 0E20
Authority key identifier: CE:37:D7:C9:91:85:A3:D9:AC:61:17:18:DA:78:55:9B:6E:99:A3:1B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zjfXyZGFo9msYRcY2nhVm26Zoxs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKPC/CNEjnpn_LU1cIcU4PEN2-6aEkrM.roa
Signing time: Mon 10 Feb 2025 14:29:58 +0000
ROA not before: Mon 10 Feb 2025 14:29:58 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131645
IP address blocks: 103.141.80.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Mar 2025 01:37:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3616 (0xe20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE37D7C99185A3D9AC611718DA78559B6E99A31B
Validity
Not Before: Feb 10 14:29:58 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=08D1239E99FF2D4D5C21C5383C4376FBA68492B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:30:62:fe:ec:5e:00:68:79:f9:9e:ea:ba:e0:
3b:c0:db:68:83:eb:35:7c:31:09:62:fb:24:b5:0b:
e4:e8:65:d0:7b:dd:79:fb:f7:fa:ae:1d:6d:7c:fd:
90:09:68:32:f3:fa:ef:73:33:50:d9:92:2e:41:66:
3c:b6:b3:a5:e6:60:5f:98:6d:c1:a7:bc:52:f7:fd:
73:11:82:8d:f7:55:45:e9:a6:0d:1c:5c:fe:19:ca:
fc:41:3d:1d:a3:0b:ec:c3:9a:ae:6c:df:08:7f:d5:
95:ed:fb:bb:93:08:ac:97:27:4c:40:54:41:29:f5:
6f:c3:f2:7f:b4:dd:84:9c:c6:6e:5b:a0:d9:41:2e:
0c:fd:a6:14:87:27:e2:61:0b:5a:a2:6c:10:94:81:
ca:25:fb:a3:85:7b:23:9e:4e:46:38:92:ac:73:b4:
92:04:de:d4:d0:77:58:0d:5d:3e:52:56:9c:7f:d6:
58:73:3b:02:3c:9e:d4:71:12:de:db:e7:1c:d7:12:
70:24:2d:e5:92:b8:3e:fa:52:84:b8:64:f7:a2:09:
98:40:58:9e:ae:14:6d:cd:75:9c:14:c5:49:90:e7:
c7:a8:a7:1f:80:ff:09:26:ab:e0:07:32:95:e4:83:
db:27:d8:00:60:2b:08:3e:9b:ce:cd:82:df:e2:5a:
cd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D1:23:9E:99:FF:2D:4D:5C:21:C5:38:3C:43:76:FB:A6:84:92:B3
X509v3 Authority Key Identifier:
keyid:CE:37:D7:C9:91:85:A3:D9:AC:61:17:18:DA:78:55:9B:6E:99:A3:1B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKPC/zjfXyZGFo9msYRcY2nhVm26Zoxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zjfXyZGFo9msYRcY2nhVm26Zoxs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKPC/CNEjnpn_LU1cIcU4PEN2-6aEkrM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.141.80.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:d0:bc:69:48:2e:79:92:a5:27:81:85:2e:2a:6b:e6:c3:88:
de:6f:15:7e:46:64:e5:66:54:fd:fb:0a:21:29:3c:64:8e:2e:
d1:29:b5:a7:b8:9c:e8:11:af:6c:6c:bf:ed:82:15:68:f3:dc:
67:d9:92:5c:b1:b7:f8:2e:79:08:02:4d:8d:a3:e3:10:7c:4c:
6c:03:e3:a2:15:7b:5f:3e:d0:a7:a3:2c:c3:5c:d1:68:f7:64:
24:c2:19:99:69:82:f0:41:b9:2a:d3:fc:bd:f5:1c:94:c3:93:
0f:9d:d8:ca:4b:fd:6f:91:de:2e:d6:f5:ed:8d:de:c5:df:5b:
30:50:b8:8a:ac:07:e8:ae:6b:1d:d7:8f:06:7f:cf:46:4b:4e:
d8:45:02:ed:77:1c:d3:47:de:f2:90:40:d6:e0:50:c7:95:bf:
62:5b:52:cc:bd:38:eb:dc:db:44:58:f5:c0:e7:68:ee:de:e2:
7a:d7:57:9b:3e:9a:85:4a:cb:ee:b0:a9:c6:0f:49:43:90:bc:
37:32:bd:4f:c1:d7:70:fc:e7:e0:75:f8:ac:4d:25:e5:17:0e:
0d:4c:82:1f:85:00:23:6d:47:23:33:60:df:95:f7:d7:5f:9c:
da:96:90:4a:70:27:95:e8:0d:96:6e:72:37:af:24:b8:5a:b1:
16:03:97:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 03:30:50 2025 by rpki-client on console.sobornost.net