Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWINS/z9KcfQUFUGCW4v1saDNoWXFwkKQ.roa
File: z9KcfQUFUGCW4v1saDNoWXFwkKQ.roa (raw, json)
Hash identifier: dUrEYjDunBuXwHkGLgDDXUXUNXEoksl4/0pRWuFlU/4=
Subject key identifier: CF:D2:9C:7D:05:05:50:60:96:E2:FD:6C:68:33:68:59:71:70:90:A4
Certificate issuer: /CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791
Certificate serial: 0DA5
Authority key identifier: 61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/z9KcfQUFUGCW4v1saDNoWXFwkKQ.roa
Signing time: Mon 07 Jul 2025 06:13:22 +0000
ROA not before: Mon 07 Jul 2025 06:13:22 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 204677
IP address blocks: 43.224.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Jul 2025 09:34:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3493 (0xda5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791
Validity
Not Before: Jul 7 06:13:22 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=CFD29C7D0505506096E2FD6C68336859717090A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ba:5f:8a:1b:b8:be:3b:35:44:d0:2b:43:d5:
17:a4:07:cd:6e:15:40:6f:3a:96:8f:e6:f8:9d:bd:
19:c9:30:59:e4:93:4d:78:a0:8e:7c:89:8f:5a:46:
09:5b:64:36:ce:cc:16:d1:b5:4e:1a:86:26:51:d4:
40:94:d3:fa:83:e4:fc:19:89:2d:5f:74:8a:99:e4:
80:58:b0:df:a8:89:b0:77:b8:b0:e2:65:1a:40:f5:
f0:9f:89:fb:b4:3b:3e:53:05:0b:3a:1b:be:43:6e:
83:ec:5f:9f:46:17:71:bf:f8:76:7e:13:cb:45:32:
d4:95:5c:74:29:2a:56:82:7d:46:0e:3b:98:bd:14:
35:54:89:ff:3c:cd:3d:f1:d4:ec:d8:e7:b7:bc:8f:
55:ee:31:b4:e8:50:fe:5b:67:e0:0f:41:3a:22:23:
3c:36:b6:d0:b5:a1:e0:f3:e5:21:c1:e6:2a:51:76:
7b:6c:8c:e9:f2:18:77:f2:aa:e8:76:a8:1c:da:7c:
e4:ff:1e:4b:a3:d0:e0:a6:54:3a:f7:88:3a:55:e3:
36:15:3b:8e:67:ab:d2:fd:8b:9d:3a:b2:7a:a9:e0:
64:4f:da:62:69:2e:bf:de:3e:9e:c3:be:ef:bc:96:
58:c6:6e:ca:ff:7b:07:4c:59:0b:c8:df:4a:3d:5d:
31:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D2:9C:7D:05:05:50:60:96:E2:FD:6C:68:33:68:59:71:70:90:A4
X509v3 Authority Key Identifier:
keyid:61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/YV-b2YzHDog20BqUgcGcXC1F15E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/z9KcfQUFUGCW4v1saDNoWXFwkKQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.224.22.0/24
Signature Algorithm: sha256WithRSAEncryption
04:af:10:b7:f8:78:de:ba:62:74:e0:c7:12:e0:68:65:60:b2:
91:d0:26:5b:e5:f7:d6:17:79:4d:33:1a:94:ff:ac:a1:ad:3e:
c1:35:4a:70:81:ce:6e:49:9f:3b:d9:01:0e:bf:1a:99:36:69:
84:a6:fb:aa:c2:19:89:3c:96:45:21:22:da:38:bf:61:47:41:
67:96:59:7f:26:62:65:07:17:c4:3e:8f:50:e2:91:a0:4d:1b:
cb:ed:39:26:2a:f8:dc:e6:d9:2c:de:79:0c:9e:d9:81:7d:3f:
70:ea:9d:e5:8b:9a:f9:74:af:64:86:1b:1d:d3:98:3a:c5:ea:
30:be:74:dc:72:88:a5:7c:5c:a7:60:50:69:7a:7e:54:fa:c0:
88:ee:0e:bc:09:91:ed:ba:da:4c:e4:be:72:64:78:89:89:a5:
be:d4:47:5f:14:0f:21:83:3b:1b:66:3f:7b:a6:41:cd:6c:f5:
69:55:63:27:56:56:8a:58:8d:90:b6:05:7f:91:5e:5f:ff:16:
f7:82:d7:93:3e:24:d3:10:70:d7:0a:6f:25:33:41:88:6b:85:
1d:11:0f:17:25:06:55:f5:bc:d2:5f:69:5a:26:ea:a1:35:c0:
99:6e:da:7f:b2:7d:32:a8:21:a6:a8:69:cf:06:df:80:74:6a:
0b:41:e7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 23:45:21 2025 by rpki-client