Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/9UhAWxS7znVK_xB6h9qTy1p0QQI.roa
File: 9UhAWxS7znVK_xB6h9qTy1p0QQI.roa (raw, json)
Hash identifier: gYNnKtN5FX+E112NTOgtU+DlFvJILF6baVJv7HHIsvA=
Subject key identifier: F5:48:40:5B:14:BB:CE:75:4A:FF:10:7A:87:DA:93:CB:5A:74:41:02
Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial: 0CFD
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/9UhAWxS7znVK_xB6h9qTy1p0QQI.roa
Signing time: Mon 26 Aug 2024 05:12:55 +0000
ROA not before: Mon 26 Aug 2024 05:12:55 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9244
IP address blocks: 113.21.160.0/19 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:50:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3325 (0xcfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Validity
Not Before: Aug 26 05:12:55 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F548405B14BBCE754AFF107A87DA93CB5A744102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6d:e8:fd:89:8b:86:61:b6:5e:f4:8a:7f:de:
ff:90:7e:00:3c:1d:9f:9d:f1:cc:a1:11:bc:98:23:
d9:54:da:75:be:d7:c0:69:07:63:bd:44:b7:73:a1:
47:e0:a6:d9:66:c1:de:37:b5:20:6d:a3:1c:0e:bc:
ed:63:5d:56:db:cd:57:dd:0b:a9:a0:1e:af:ef:30:
c2:28:df:09:42:bd:90:07:f3:0e:b1:9e:a9:28:4a:
04:b1:18:31:2c:4e:c9:99:8f:b6:6f:1e:ee:f9:34:
ec:04:81:da:8c:b0:9e:f9:57:0b:fc:ee:d5:d6:46:
37:9e:73:26:c0:c5:9f:7d:96:b3:94:be:75:6a:71:
8f:7a:2c:24:2e:1b:8a:65:34:d6:8a:27:03:e6:af:
10:73:68:93:7d:2a:be:33:eb:2d:ca:55:70:5d:e8:
59:7f:37:ea:5e:fd:69:7a:ce:17:1d:18:e8:c1:9a:
09:cc:58:8a:e7:96:bc:83:27:e2:e1:b6:a8:a8:ed:
70:27:2d:54:b2:6c:11:eb:dc:ec:8e:6e:ed:a3:f1:
ba:89:36:b4:a7:86:91:9f:ae:71:f2:18:3d:3f:fa:
e0:d8:78:0f:53:69:e8:09:0c:2d:90:9a:96:48:51:
04:cb:5e:d4:e1:25:2f:e7:69:5f:96:b4:94:8d:39:
1e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:48:40:5B:14:BB:CE:75:4A:FF:10:7A:87:DA:93:CB:5A:74:41:02
X509v3 Authority Key Identifier:
keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/9UhAWxS7znVK_xB6h9qTy1p0QQI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.21.160.0/19
Signature Algorithm: sha256WithRSAEncryption
6c:88:a3:e1:81:61:e1:b5:24:61:88:72:25:90:1a:0a:5d:29:
38:ee:38:57:e4:17:4a:68:13:bb:c8:98:62:4a:e3:9f:b9:ec:
88:87:09:9d:29:a8:0a:9f:29:b0:6c:04:b9:c7:43:ff:ab:e9:
f7:2f:74:17:45:bd:d0:d4:31:2c:65:92:38:83:95:fc:bb:67:
d8:94:85:31:63:31:16:fb:5d:1d:b3:97:0d:40:33:5f:57:1e:
e4:df:44:d1:b2:59:cd:83:2f:53:b0:d3:d4:3d:0b:5d:41:1d:
74:b5:c9:35:2f:91:70:cb:f3:a4:cf:3d:79:e7:c4:2e:fc:52:
39:d1:5c:69:f6:56:df:d1:ea:5d:ef:47:43:8a:31:9b:18:f7:
aa:42:2b:2c:57:5f:12:7d:ca:bc:31:f2:cb:6f:8f:c1:7a:55:
1e:5d:18:6f:28:c1:aa:a9:5c:df:cf:1e:74:7b:dc:50:5c:d4:
7c:94:f3:67:6f:94:32:72:f7:a9:5f:4b:01:51:09:4b:8c:b7:
fa:5b:31:1d:35:29:0d:5a:ec:36:fe:2d:8b:20:0e:a8:8b:3c:
0f:ec:73:6b:41:54:00:d7:ed:3a:73:e0:e2:dd:0b:a9:04:7b:
24:64:e4:69:d1:fd:e5:6b:1f:8e:5a:f6:61:ed:73:6b:a1:7b:
41:b0:7f:ae
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDP0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZC
M0E2OTk2NEY3RTk2REIwQjM1ODEzMjhGMDA2REJDQTFBQkE5NzAeFw0yNDA4MjYw
NTEyNTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEY1NDg0MDVCMTRCQkNF
NzU0QUZGMTA3QTg3REE5M0NCNUE3NDQxMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7bej9iYuGYbZe9Ip/3v+QfgA8HZ+d8cyhEbyYI9lU2nW+18Bp
B2O9RLdzoUfgptlmwd43tSBtoxwOvO1jXVbbzVfdC6mgHq/vMMIo3wlCvZAH8w6x
nqkoSgSxGDEsTsmZj7ZvHu75NOwEgdqMsJ75Vwv87tXWRjeecybAxZ99lrOUvnVq
cY96LCQuG4plNNaKJwPmrxBzaJN9Kr4z6y3KVXBd6Fl/N+pe/Wl6zhcdGOjBmgnM
WIrnlryDJ+Lhtqio7XAnLVSybBHr3OyObu2j8bqJNrSnhpGfrnHyGD0/+uDYeA9T
aegJDC2QmpZIUQTLXtThJS/naV+WtJSNOR4HAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU9UhAWxS7znVK/xB6h9qTy1p0QQIwHwYDVR0jBBgwFoAUT7OmmWT36W2ws1gT
KPAG28oaupcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVU
L1Q3T21tV1QzNlcyd3MxZ1RLUEFHMjhvYXVwYy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvVDdPbW1XVDM2VzJ3czFnVEtQQUcyOG9hdXBjLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVULzlVaEFXeFM3em5WS194QjZo
OXFUeTFwMFFRSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAVx
FaAwDQYJKoZIhvcNAQELBQADggEBAGyIo+GBYeG1JGGIciWQGgpdKTjuOFfkF0po
E7vImGJK45+57IiHCZ0pqAqfKbBsBLnHQ/+r6fcvdBdFvdDUMSxlkjiDlfy7Z9iU
hTFjMRb7XR2zlw1AM19XHuTfRNGyWc2DL1Ow09Q9C11BHXS1yTUvkXDL86TPPXnn
xC78UjnRXGn2Vt/R6l3vR0OKMZsY96pCKyxXXxJ9yrwx8stvj8F6VR5dGG8owaqp
XN/PHnR73FBc1HyU82dvlDJy96lfSwFRCUuMt/pbMR01KQ1a7Db+LYsgDqiLPA/s
c2tBVADX7Tpz4OLdC6kEeyRk5GnR/eVrH45a9mHtc2uhe0Gwf64=
-----END CERTIFICATE-----
Generated at Tue Apr 22 15:01:24 2025 by rpki-client