Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHARMWAY/9T6mIkXEe20US5wVSTh8cBqQlxY.roa
File: 9T6mIkXEe20US5wVSTh8cBqQlxY.roa (raw, json)
Hash identifier: g9vNOYwOsBgDPoJev72dJdWUeGIQui4rMYVOPbFYBfs=
Subject key identifier: F5:3E:A6:22:45:C4:7B:6D:14:4B:9C:15:49:38:7C:70:1A:90:97:16
Certificate issuer: /CN=179C63DB1D6F3AB2FB0EE78E1A897B85BBD2A602
Certificate serial: 0255
Authority key identifier: 17:9C:63:DB:1D:6F:3A:B2:FB:0E:E7:8E:1A:89:7B:85:BB:D2:A6:02
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/F5xj2x1vOrL7DueOGol7hbvSpgI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHARMWAY/9T6mIkXEe20US5wVSTh8cBqQlxY.roa
Signing time: Mon 26 Aug 2024 05:10:33 +0000
ROA not before: Mon 26 Aug 2024 05:10:33 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 63895
IP address blocks: 103.185.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 597 (0x255)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179C63DB1D6F3AB2FB0EE78E1A897B85BBD2A602
Validity
Not Before: Aug 26 05:10:33 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F53EA62245C47B6D144B9C1549387C701A909716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4a:a7:1b:cc:d6:25:9d:fa:50:27:4c:d7:56:
d2:73:da:4a:0c:65:51:cc:eb:ff:f5:ac:f6:2e:27:
3c:40:26:ab:df:54:32:b2:a6:5b:75:ad:79:29:bd:
d5:06:37:32:a3:a5:67:48:8b:7e:a3:86:1d:4c:d1:
dc:cb:74:2d:bc:75:ed:a0:db:d0:73:32:33:9f:bb:
2c:0a:09:52:04:f8:f7:45:c2:bd:e0:52:1a:7f:76:
59:c2:8c:e5:ad:d3:46:dc:f6:3d:78:cb:79:53:ca:
b7:77:3b:94:ba:8b:52:ad:ac:59:1a:14:c4:45:9b:
e7:99:bd:b0:36:89:5a:69:6e:3d:f9:e2:da:c6:7b:
9e:ac:60:01:1c:ac:56:1e:8b:a8:7a:51:ee:5f:c5:
7f:cb:84:5a:84:db:77:89:c3:9d:f4:4a:05:67:0f:
46:2d:b8:a9:30:49:54:64:c3:b9:e5:44:9e:67:a7:
05:ea:a3:59:12:9b:4c:da:af:07:d5:04:c4:f4:d9:
27:2c:6f:1f:ea:7a:2b:0b:f6:f4:91:a0:92:b9:d2:
1c:a5:58:cf:43:f5:4e:ec:98:dd:4a:38:30:3e:60:
63:56:a6:2d:69:0d:5c:4f:12:79:d6:e6:7a:a2:0a:
7d:43:1c:e1:81:d0:e9:ee:ac:54:45:91:2f:23:71:
ab:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3E:A6:22:45:C4:7B:6D:14:4B:9C:15:49:38:7C:70:1A:90:97:16
X509v3 Authority Key Identifier:
keyid:17:9C:63:DB:1D:6F:3A:B2:FB:0E:E7:8E:1A:89:7B:85:BB:D2:A6:02
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHARMWAY/F5xj2x1vOrL7DueOGol7hbvSpgI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/F5xj2x1vOrL7DueOGol7hbvSpgI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHARMWAY/9T6mIkXEe20US5wVSTh8cBqQlxY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.185.29.0/24
Signature Algorithm: sha256WithRSAEncryption
61:0a:d6:72:bd:ff:ce:8f:e6:c5:ed:a5:bd:d4:50:1b:2e:35:
6f:d3:88:75:10:b7:eb:da:1f:6d:64:f4:00:e8:9c:bc:46:78:
d6:51:b9:b6:6a:95:eb:7b:11:16:84:87:ed:40:64:32:8a:c4:
59:00:5a:8c:4f:b9:66:b6:09:c5:d6:64:c7:a6:03:5b:6f:24:
c6:11:61:ed:10:86:34:5c:d4:94:9d:c8:8a:35:e1:99:35:e9:
a7:c8:06:6b:f4:01:2a:c6:6f:cf:f4:23:31:73:c2:87:73:97:
64:c3:c9:ed:f7:ed:33:32:e2:ba:d2:c6:43:e2:03:0c:28:6f:
ee:29:e0:53:82:de:35:d4:78:f1:e8:86:ce:4e:30:86:ac:53:
23:16:37:af:3d:41:a1:dd:ae:29:66:1f:75:4c:8b:c9:a0:79:
21:a0:4d:e1:46:3e:03:4d:0a:a4:a6:dd:8c:05:92:af:5a:4c:
92:d7:cf:7d:9f:46:2a:25:4e:50:2d:15:37:62:e0:b2:ac:e5:
43:67:dd:a4:91:83:88:ee:db:42:e7:f4:9f:78:6f:c4:29:1b:
97:fb:16:51:e5:18:f7:13:ef:12:f3:cd:41:8e:6a:86:65:12:
21:3b:7f:ea:37:95:9f:59:b0:6e:fb:22:92:6a:88:21:16:b7:
a3:5f:30:f0
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICAlUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTc5
QzYzREIxRDZGM0FCMkZCMEVFNzhFMUE4OTdCODVCQkQyQTYwMjAeFw0yNDA4MjYw
NTEwMzNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEY1M0VBNjIyNDVDNDdC
NkQxNDRCOUMxNTQ5Mzg3QzcwMUE5MDk3MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVSqcbzNYlnfpQJ0zXVtJz2koMZVHM6//1rPYuJzxAJqvfVDKy
plt1rXkpvdUGNzKjpWdIi36jhh1M0dzLdC28de2g29BzMjOfuywKCVIE+PdFwr3g
Uhp/dlnCjOWt00bc9j14y3lTyrd3O5S6i1KtrFkaFMRFm+eZvbA2iVppbj354trG
e56sYAEcrFYei6h6Ue5fxX/LhFqE23eJw530SgVnD0YtuKkwSVRkw7nlRJ5npwXq
o1kSm0zarwfVBMT02Scsbx/qeisL9vSRoJK50hylWM9D9U7smN1KODA+YGNWpi1p
DVxPEnnW5nqiCn1DHOGB0OnurFRFkS8jcauHAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQU9T6mIkXEe20US5wVSTh8cBqQlxYwHwYDVR0jBBgwFoAUF5xj2x1vOrL7DueO
Gol7hbvSpgIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hBUk1X
QVkvRjV4ajJ4MXZPckw3RHVlT0dvbDdoYnZTcGdJLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9GNXhqMngxdk9yTDdEdWVPR29sN2hidlNwZ0kuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSEFSTVdBWS85VDZtSWtYRWUyMFVT
NXdWU1RoOGNCcVFseFkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAZ7kdMA0GCSqGSIb3DQEBCwUAA4IBAQBhCtZyvf/Oj+bF7aW91FAbLjVv04h1
ELfr2h9tZPQA6Jy8RnjWUbm2apXrexEWhIftQGQyisRZAFqMT7lmtgnF1mTHpgNb
byTGEWHtEIY0XNSUnciKNeGZNemnyAZr9AEqxm/P9CMxc8KHc5dkw8nt9+0zMuK6
0sZD4gMMKG/uKeBTgt411Hjx6IbOTjCGrFMjFjevPUGh3a4pZh91TIvJoHkhoE3h
Rj4DTQqkpt2MBZKvWkyS1899n0YqJU5QLRU3YuCyrOVDZ92kkYOI7ttC5/SfeG/E
KRuX+xZR5Rj3E+8S881BjmqGZRIhO3/qN5WfWbBu+yKSaoghFrejXzDw
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:52:44 2025 by rpki-client