Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/AdEKAudTaXpO8J7FrB6ixGwo-zk.roa
File: AdEKAudTaXpO8J7FrB6ixGwo-zk.roa (raw, json)
Hash identifier: mMFGTzkrHPe1sY/dZd7QeOysKT/deT9OBNDjhsFKTF8=
Subject key identifier: 01:D1:0A:02:E7:53:69:7A:4E:F0:9E:C5:AC:1E:A2:C4:6C:28:FB:39
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0DA9
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/AdEKAudTaXpO8J7FrB6ixGwo-zk.roa
Signing time: Mon 26 Aug 2024 05:10:18 +0000
ROA not before: Mon 26 Aug 2024 05:10:18 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18429
IP address blocks: 27.147.24.0/21 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:03:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3497 (0xda9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Aug 26 05:10:18 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=01D10A02E753697A4EF09EC5AC1EA2C46C28FB39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6c:3a:e8:99:f7:15:b4:ee:8f:84:7f:d4:a4:
52:55:47:08:f1:27:7c:b8:7a:7f:11:b5:27:22:47:
3b:d3:d3:44:cc:b3:c4:21:e2:6b:6c:e9:54:08:4a:
34:03:35:2f:26:bf:23:3c:6d:ac:ce:cb:6a:0b:5e:
74:92:c1:73:6b:73:7e:62:c8:7d:96:86:75:c1:b6:
aa:c2:d1:f6:5d:ca:6d:36:42:37:7e:0b:f3:4c:ea:
1f:48:c0:84:42:ee:fa:d9:9a:7a:b0:ff:f3:74:63:
70:36:74:da:c8:1c:33:aa:03:bd:a3:32:05:a9:04:
bb:4c:b1:23:f9:04:9c:e9:47:1d:91:f0:2a:e1:76:
69:75:2f:5b:55:9d:9f:4d:2f:cf:30:ef:91:58:c1:
72:38:5e:f7:8b:2c:88:32:2c:ce:e0:35:5e:7d:51:
c6:62:75:d2:be:59:f3:ec:27:98:46:70:50:75:8e:
06:93:64:db:c9:50:92:b0:4a:be:56:b6:1e:0f:8a:
85:c5:31:bb:0b:25:6b:18:93:6f:3c:2f:1f:5a:dd:
b2:2b:db:b4:97:47:24:83:0f:ca:92:61:18:9d:7e:
2c:3d:38:59:68:bf:41:e3:dd:4a:6e:60:06:12:a0:
e4:08:ef:09:fc:0b:30:f5:57:40:69:1e:ff:51:41:
d3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D1:0A:02:E7:53:69:7A:4E:F0:9E:C5:AC:1E:A2:C4:6C:28:FB:39
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/AdEKAudTaXpO8J7FrB6ixGwo-zk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.147.24.0/21
Signature Algorithm: sha256WithRSAEncryption
79:49:1d:9b:c6:74:dc:c3:2d:39:da:ff:27:50:f5:6e:3d:ff:
b0:3e:9b:06:50:f0:14:a9:18:71:3d:5f:20:8b:53:01:92:89:
d3:9d:21:df:45:06:53:96:88:fc:10:7d:f5:99:f2:00:da:81:
25:5b:1f:53:13:1e:7d:55:e0:d2:15:ba:a3:e6:00:a1:0c:f0:
95:8a:57:84:5d:f3:c0:eb:fa:56:be:55:e8:d1:3c:00:c2:c5:
bf:28:e1:b2:63:26:07:38:3a:bb:4c:2d:5e:87:60:c8:e0:02:
31:f0:a4:a9:55:70:ac:04:2e:d0:12:ba:77:bf:f0:aa:67:8c:
e9:c2:89:a3:3b:08:13:95:45:70:c3:f5:5d:d1:01:e8:7f:18:
1a:99:71:b0:20:2d:6a:36:84:7c:30:66:0b:ec:ca:78:3e:a6:
7a:8b:8d:75:17:5f:c7:9a:3e:1b:3d:8a:6c:c9:be:3b:e0:bf:
fe:0f:37:dc:de:9b:aa:36:f6:31:b7:0b:dc:41:3c:cb:c9:2f:
c0:6e:37:47:5f:aa:de:34:bb:d0:2d:10:03:b5:b6:52:53:08:
70:4a:eb:b6:2b:f3:c6:c1:23:ef:f5:f0:d0:87:42:3e:84:5d:
3b:03:b5:38:4b:f7:e7:08:25:84:a2:03:07:5c:0b:a6:d1:02:
e5:91:90:47
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICDakwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx
RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yNDA4MjYw
NTEwMThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDAxRDEwQTAyRTc1MzY5
N0E0RUYwOUVDNUFDMUVBMkM0NkMyOEZCMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXbDromfcVtO6PhH/UpFJVRwjxJ3y4en8RtSciRzvT00TMs8Qh
4mts6VQISjQDNS8mvyM8bazOy2oLXnSSwXNrc35iyH2WhnXBtqrC0fZdym02Qjd+
C/NM6h9IwIRC7vrZmnqw//N0Y3A2dNrIHDOqA72jMgWpBLtMsSP5BJzpRx2R8Crh
dml1L1tVnZ9NL88w75FYwXI4XveLLIgyLM7gNV59UcZiddK+WfPsJ5hGcFB1jgaT
ZNvJUJKwSr5Wth4PioXFMbsLJWsYk288Lx9a3bIr27SXRySDD8qSYRidfiw9OFlo
v0Hj3UpuYAYSoOQI7wn8CzD1V0BpHv9RQdN5AgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUAdEKAudTaXpO8J7FrB6ixGwo+zkwHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0
X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv
WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC9BZEVLQXVkVGFYcE84SjdGckI2
aXhHd28temsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDG5MY
MA0GCSqGSIb3DQEBCwUAA4IBAQB5SR2bxnTcwy052v8nUPVuPf+wPpsGUPAUqRhx
PV8gi1MBkonTnSHfRQZTloj8EH31mfIA2oElWx9TEx59VeDSFbqj5gChDPCVileE
XfPA6/pWvlXo0TwAwsW/KOGyYyYHODq7TC1eh2DI4AIx8KSpVXCsBC7QErp3v/Cq
Z4zpwomjOwgTlUVww/Vd0QHofxgamXGwIC1qNoR8MGYL7Mp4PqZ6i411F1/Hmj4b
PYpsyb474L/+Dzfc3puqNvYxtwvcQTzLyS/AbjdHX6reNLvQLRADtbZSUwhwSuu2
K/PGwSPv9fDQh0I+hF07A7U4S/fnCCWEogMHXAum0QLlkZBH
-----END CERTIFICATE-----
Generated at Fri Apr 18 21:06:06 2025 by rpki-client