Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CENTROID/1mERHD1QE9hpE_Pa9Q9cmKJGjdI.roa
File: 1mERHD1QE9hpE_Pa9Q9cmKJGjdI.roa (raw, json)
Hash identifier: TQMVD0zv6Clvw9ETByChjhfhBU0ZpSXA4UQmdceiP5U=
Subject key identifier: D6:61:11:1C:3D:50:13:D8:69:13:F3:DA:F5:0F:5C:98:A2:46:8D:D2
Certificate issuer: /CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8
Certificate serial: 0BED
Authority key identifier: 79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/1mERHD1QE9hpE_Pa9Q9cmKJGjdI.roa
Signing time: Mon 26 Aug 2024 05:10:14 +0000
ROA not before: Mon 26 Aug 2024 05:10:14 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131618
IP address blocks: 103.104.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3053 (0xbed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8
Validity
Not Before: Aug 26 05:10:14 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D661111C3D5013D86913F3DAF50F5C98A2468DD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d8:d5:f7:fb:45:cb:18:1c:f1:e5:e1:af:81:
b6:d2:d1:bd:33:60:eb:67:e0:0f:0b:1d:79:56:c0:
76:69:1a:61:c7:dc:9c:93:72:9e:41:b7:f4:77:49:
ba:01:17:20:71:28:25:93:72:6f:a3:70:01:f8:8a:
51:26:b6:5d:00:6b:4e:a2:2a:ee:9c:04:8e:ee:e1:
1b:c7:86:4f:ac:04:2b:2c:e6:f1:b7:81:d2:d4:28:
b9:37:6a:61:54:67:91:0f:dd:21:ce:46:e6:d5:73:
e4:40:45:0e:4b:49:e8:e5:35:a9:6f:66:2d:2a:75:
e2:53:50:8b:34:58:8a:71:2b:ba:b9:19:14:c8:19:
e2:81:c2:6f:a3:78:04:19:5f:22:e1:d8:4c:58:09:
05:89:45:ec:fa:9b:b6:37:82:e3:e7:1c:85:2a:c5:
38:c0:2b:20:db:7f:1f:43:5d:1c:c5:25:a6:bc:e1:
3a:d6:43:b0:bb:90:a7:c5:57:a1:c8:e1:45:43:26:
3f:4f:04:29:20:a6:26:70:96:d7:ab:86:b0:c1:6b:
53:74:c2:49:02:04:16:c8:e1:9a:ba:55:c3:64:3a:
9c:5c:6d:bc:61:9e:f3:ec:cc:9a:61:d4:31:ae:cf:
85:9b:67:7c:39:a8:e3:59:cb:6a:42:72:15:46:29:
c8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:61:11:1C:3D:50:13:D8:69:13:F3:DA:F5:0F:5C:98:A2:46:8D:D2
X509v3 Authority Key Identifier:
keyid:79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/1mERHD1QE9hpE_Pa9Q9cmKJGjdI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.104.151.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:b2:a6:bc:2f:0c:45:f2:74:87:94:73:ba:10:dc:71:8d:2b:
95:c2:b7:e6:60:55:fd:8e:2d:e1:dd:56:92:b9:b4:c4:0e:12:
84:42:32:72:1b:20:f0:25:17:f8:96:f7:f4:f9:1e:52:8b:0a:
a6:7c:23:08:34:9c:44:79:da:a1:1c:04:f2:d1:c9:f7:8a:9c:
88:7a:2f:be:6e:dc:c8:5f:f1:cc:3d:f1:d9:64:e7:0f:40:cb:
3e:5c:d5:48:87:62:57:7a:ce:9f:9f:4c:aa:e9:a9:56:94:17:
7e:2c:07:01:e3:36:48:24:ef:63:74:52:72:33:4b:bb:83:c2:
0c:94:f5:3c:26:43:09:e3:93:77:4d:c0:8d:aa:dd:e9:5a:47:
da:79:33:eb:f8:80:28:6d:7a:78:f5:d7:b0:99:c2:db:55:cb:
79:9d:b6:88:da:b7:1c:82:ae:6a:17:0a:92:b6:dd:ad:41:60:
ef:c4:c8:ee:7a:95:8d:5c:d6:8f:75:3b:1b:d7:e2:7d:c0:98:
d6:36:40:c9:07:84:9a:86:d7:f0:eb:01:49:3c:0b:2e:e0:bf:
79:76:a9:51:f5:45:77:2d:81:e5:30:b6:57:10:a9:51:93:5d:
14:3f:cb:2f:2f:45:3b:1e:ce:68:ec:ad:ce:d0:38:ed:cc:b5:
b7:0c:07:94
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICC+0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzk1
QTkxRUQ0MEFBQTE1QjlBQkNBMjFDMjA1QjM2RUM3NDk0OUZDODAeFw0yNDA4MjYw
NTEwMTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ2NjExMTFDM0Q1MDEz
RDg2OTEzRjNEQUY1MEY1Qzk4QTI0NjhERDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDb2NX3+0XLGBzx5eGvgbbS0b0zYOtn4A8LHXlWwHZpGmHH3JyT
cp5Bt/R3SboBFyBxKCWTcm+jcAH4ilEmtl0Aa06iKu6cBI7u4RvHhk+sBCss5vG3
gdLUKLk3amFUZ5EP3SHORubVc+RARQ5LSejlNalvZi0qdeJTUIs0WIpxK7q5GRTI
GeKBwm+jeAQZXyLh2ExYCQWJRez6m7Y3guPnHIUqxTjAKyDbfx9DXRzFJaa84TrW
Q7C7kKfFV6HI4UVDJj9PBCkgpiZwlterhrDBa1N0wkkCBBbI4Zq6VcNkOpxcbbxh
nvPszJph1DGuz4WbZ3w5qONZy2pCchVGKcjnAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQU1mERHD1QE9hpE/Pa9Q9cmKJGjdIwHwYDVR0jBBgwFoAUeVqR7UCqoVuavKIc
IFs27HSUn8gwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0VOVFJP
SUQvZVZxUjdVQ3FvVnVhdktJY0lGczI3SFNVbjhnLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9lVnFSN1VDcW9WdWF2S0ljSUZzMjdIU1VuOGcuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DRU5UUk9JRC8xbUVSSEQxUUU5aHBF
X1BhOVE5Y21LSkdqZEkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAZ2iXMA0GCSqGSIb3DQEBCwUAA4IBAQC0sqa8LwxF8nSHlHO6ENxxjSuVwrfm
YFX9ji3h3VaSubTEDhKEQjJyGyDwJRf4lvf0+R5SiwqmfCMINJxEedqhHATy0cn3
ipyIei++btzIX/HMPfHZZOcPQMs+XNVIh2JXes6fn0yq6alWlBd+LAcB4zZIJO9j
dFJyM0u7g8IMlPU8JkMJ45N3TcCNqt3pWkfaeTPr+IAobXp49dewmcLbVct5nbaI
2rccgq5qFwqStt2tQWDvxMjuepWNXNaPdTsb1+J9wJjWNkDJB4Sahtfw6wFJPAsu
4L95dqlR9UV3LYHlMLZXEKlRk10UP8svL0U7Hs5o7K3O0DjtzLW3DAeU
-----END CERTIFICATE-----
Generated at Wed Apr 23 04:49:17 2025 by rpki-client