Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWINS/TuJlri5TzNvW6K9PbtJF19euOoM.roa
File: TuJlri5TzNvW6K9PbtJF19euOoM.roa (raw, json)
Hash identifier: MwK38JJvgg31m358F5bXpel7nZ0DM+3DwPzVH7LQVaI=
Subject key identifier: 4E:E2:65:AE:2E:53:CC:DB:D6:E8:AF:4F:6E:D2:45:D7:D7:AE:3A:83
Certificate issuer: /CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791
Certificate serial: 0D87
Authority key identifier: 61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/TuJlri5TzNvW6K9PbtJF19euOoM.roa
Signing time: Fri 06 Jun 2025 09:22:27 +0000
ROA not before: Fri 06 Jun 2025 09:22:27 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38136
IP address blocks: 43.224.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Jul 2025 06:12:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3463 (0xd87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791
Validity
Not Before: Jun 6 09:22:27 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=4EE265AE2E53CCDBD6E8AF4F6ED245D7D7AE3A83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2d:44:ed:60:1a:b7:02:92:81:d8:9c:22:7a:
4c:c9:2f:fd:f2:02:f7:63:15:c1:b9:34:bb:86:41:
6f:d7:d3:d0:62:ef:5c:9f:44:f3:da:b6:98:f3:f6:
2f:da:3b:99:c1:93:68:c9:eb:19:20:03:7d:61:35:
f2:04:d9:36:ef:f0:10:49:d7:f7:4a:61:07:6a:aa:
ab:64:68:ff:4a:14:b4:89:18:c7:fd:7b:4d:01:0f:
58:f9:ff:49:71:10:7e:ea:55:a6:28:e0:14:a1:d4:
e0:13:27:80:a3:c9:6f:03:ef:43:30:93:07:5e:46:
7d:ee:1f:a3:2d:13:19:54:ca:7d:a4:29:00:5b:70:
e9:a1:5a:68:18:68:81:1c:8f:42:52:ad:dd:c7:c1:
ff:3d:d0:76:e4:eb:a8:3a:e2:81:8a:33:57:a0:96:
a0:73:48:0c:ad:11:53:d6:90:56:78:3a:aa:e3:ab:
a8:30:52:1c:46:d9:d7:58:47:66:ba:ca:2e:50:ce:
97:25:79:f9:0a:bd:7d:2b:a9:dc:13:eb:89:64:f5:
92:44:eb:d9:a3:be:94:f7:28:7d:45:39:e4:7b:73:
ca:7a:c2:0b:90:fb:38:04:36:f0:c3:27:8a:01:a4:
d8:0f:b7:6d:28:59:b9:e4:1d:86:85:41:1b:62:67:
f4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E2:65:AE:2E:53:CC:DB:D6:E8:AF:4F:6E:D2:45:D7:D7:AE:3A:83
X509v3 Authority Key Identifier:
keyid:61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/YV-b2YzHDog20BqUgcGcXC1F15E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/TuJlri5TzNvW6K9PbtJF19euOoM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.224.21.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:a7:ee:56:18:06:ee:e7:fc:5c:d3:34:5c:12:ef:d8:76:f6:
13:f5:29:54:48:7e:05:ad:bc:24:19:9e:b3:2d:06:e9:5b:04:
49:46:4f:47:e2:2d:a0:42:52:dd:f1:2a:0a:67:d5:4a:c9:b4:
52:90:e8:2b:86:38:a8:64:11:87:44:d7:6d:2a:16:cf:47:64:
b9:8a:74:f1:71:96:53:21:52:b2:12:4d:bb:65:47:77:42:62:
3f:04:19:df:b9:85:62:0d:6d:61:5a:bf:d4:23:72:84:ad:b4:
95:8c:f4:36:da:50:8f:ec:db:6a:83:37:21:12:b5:55:19:72:
2e:37:cb:5b:eb:40:33:4c:b3:60:c7:a6:3d:bc:c2:11:92:4b:
89:5e:94:97:c8:23:76:8e:6c:dc:dc:d9:41:77:13:18:ec:10:
d0:a9:9b:a6:95:38:a9:b7:b4:9c:a8:15:70:b4:33:74:0f:03:
00:c5:a7:da:0b:cd:be:29:3b:b2:37:d5:d9:e5:f7:c3:79:26:
b8:c5:8e:dd:42:ee:4f:96:4c:4a:f0:5b:e5:ab:3d:03:5d:8b:
a7:6a:42:cc:e8:9c:37:17:aa:d0:af:de:f7:ec:32:02:87:55:
3d:98:15:35:d2:b9:38:82:7d:63:af:01:d8:f9:89:f3:55:80:
e9:e8:e8:d6
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICDYcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjE1
RjlCRDk4Q0M3MEU4ODM2RDAxQTk0ODFDMTlDNUMyRDQ1RDc5MTAeFw0yNTA2MDYw
OTIyMjdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDRFRTI2NUFFMkU1M0ND
REJENkU4QUY0RjZFRDI0NUQ3RDdBRTNBODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCtLUTtYBq3ApKB2JwiekzJL/3yAvdjFcG5NLuGQW/X09Bi71yf
RPPatpjz9i/aO5nBk2jJ6xkgA31hNfIE2Tbv8BBJ1/dKYQdqqqtkaP9KFLSJGMf9
e00BD1j5/0lxEH7qVaYo4BSh1OATJ4CjyW8D70MwkwdeRn3uH6MtExlUyn2kKQBb
cOmhWmgYaIEcj0JSrd3Hwf890Hbk66g64oGKM1eglqBzSAytEVPWkFZ4Oqrjq6gw
UhxG2ddYR2a6yi5QzpclefkKvX0rqdwT64lk9ZJE69mjvpT3KH1FOeR7c8p6wguQ
+zgENvDDJ4oBpNgPt20oWbnkHYaFQRtiZ/SLAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUTuJlri5TzNvW6K9PbtJF19euOoMwHwYDVR0jBBgwFoAUYV+b2YzHDog20BqU
gcGcXC1F15EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFdJTlMv
WVYtYjJZekhEb2cyMEJxVWdjR2NYQzFGMTVFLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9ZVi1iMll6SERvZzIwQnFVZ2NHY1hDMUYxNUUuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9EV0lOUy9UdUpscmk1VHpOdlc2SzlQYnRK
RjE5ZXVPb00ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAK+AV
MA0GCSqGSIb3DQEBCwUAA4IBAQB9p+5WGAbu5/xc0zRcEu/YdvYT9SlUSH4Frbwk
GZ6zLQbpWwRJRk9H4i2gQlLd8SoKZ9VKybRSkOgrhjioZBGHRNdtKhbPR2S5inTx
cZZTIVKyEk27ZUd3QmI/BBnfuYViDW1hWr/UI3KErbSVjPQ22lCP7NtqgzchErVV
GXIuN8tb60AzTLNgx6Y9vMIRkkuJXpSXyCN2jmzc3NlBdxMY7BDQqZumlTipt7Sc
qBVwtDN0DwMAxafaC82+KTuyN9XZ5ffDeSa4xY7dQu5PlkxK8Fvlqz0DXYunakLM
6Jw3F6rQr9737DICh1U9mBU10rk4gn1jrwHY+YnzVYDp6OjW
-----END CERTIFICATE-----
Generated at Sun Jul 20 23:18:54 2025 by rpki-client