Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/lY9hjM5BeCKMiHD9eOD-Dn7UmQk.roa
File: lY9hjM5BeCKMiHD9eOD-Dn7UmQk.roa (raw, json)
Hash identifier: TUgk5EJ0wEJV9meCZ2HedAp2l07rMLjTGwyUaG1BBkY=
Subject key identifier: 95:8F:61:8C:CE:41:78:22:8C:88:70:FD:78:E0:FE:0E:7E:D4:99:09
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 1034
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/lY9hjM5BeCKMiHD9eOD-Dn7UmQk.roa
Signing time: Mon 26 Aug 2024 05:13:30 +0000
ROA not before: Mon 26 Aug 2024 05:13:30 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17809
IP address blocks: 27.96.252.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:56:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4148 (0x1034)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Aug 26 05:13:30 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=958F618CCE4178228C8870FD78E0FE0E7ED49909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:57:c1:f7:03:f4:ab:13:39:5d:42:a9:ae:2f:
fe:64:da:97:c3:7f:5e:fa:30:82:c5:72:b1:e2:af:
6e:3f:59:34:24:3e:cc:e0:ae:0d:2e:70:52:31:57:
ee:74:02:20:b5:15:c8:ff:f9:af:9d:0c:d6:e6:8c:
03:b5:db:18:be:8c:9a:ec:f0:e6:a2:3d:29:51:45:
91:dc:cd:c0:0b:4e:eb:12:56:19:2f:c5:d5:ac:5d:
ea:ab:f1:3e:2d:c5:de:02:41:b7:17:e5:3f:67:f5:
85:40:ef:fe:61:08:ff:b0:74:4e:c2:d4:b6:d4:7e:
df:26:e7:bc:33:4f:8a:1d:84:b4:8a:59:92:94:34:
6d:bd:dc:21:cc:6b:dd:e5:5c:37:3b:80:79:59:e4:
37:d9:43:49:96:19:82:3e:cb:f0:62:10:fb:b6:bf:
49:d9:77:0f:dd:bd:6a:8e:a5:3d:50:7a:6f:9f:ec:
bc:0f:95:47:5b:ad:18:18:f7:51:e5:69:cb:00:e4:
4d:94:6c:18:96:0f:b8:54:ec:9d:09:2a:64:1e:66:
a5:53:9d:69:e3:3f:6c:75:25:f9:87:34:d3:94:60:
5e:58:82:53:19:83:3f:26:00:d2:a1:c2:2e:c1:56:
f1:33:81:da:d5:16:d1:7e:0b:c6:e0:3b:52:db:42:
56:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8F:61:8C:CE:41:78:22:8C:88:70:FD:78:E0:FE:0E:7E:D4:99:09
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/lY9hjM5BeCKMiHD9eOD-Dn7UmQk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.96.252.0/22
Signature Algorithm: sha256WithRSAEncryption
70:9d:ad:c7:a9:01:ae:c5:bb:9e:c5:47:d9:8f:3a:dd:d2:18:
64:1b:b1:5d:08:4c:81:d1:9d:34:d3:91:ab:eb:fe:88:a9:19:
9a:bf:67:94:07:9b:d0:0d:01:7d:18:8e:23:5e:c8:fc:23:99:
2d:3f:45:3f:62:7e:42:cd:cc:6b:e5:6a:9b:b9:7e:c6:7c:b7:
d4:ad:96:ed:68:00:c2:93:fa:17:47:30:f1:2d:70:31:07:d9:
53:33:73:5c:f9:eb:ce:3d:f9:ce:cd:16:51:d6:13:5a:13:f3:
2f:6b:22:d7:6f:4e:4f:ad:fa:77:37:80:91:ea:14:fb:7b:b7:
a4:f5:0b:02:ab:55:fd:07:80:a5:50:5a:bb:7a:73:84:ec:73:
4f:0c:cc:ca:39:e7:e5:3b:a3:49:b1:8f:ce:72:75:93:04:52:
35:1b:60:2e:a8:07:d4:a0:f9:8b:4c:21:04:64:fb:70:b3:c1:
b8:5e:ab:79:1c:ba:f5:36:b7:56:5e:b4:60:8a:1e:6a:76:15:
49:6d:00:59:7b:14:f0:57:44:9e:25:8b:d1:01:e7:10:74:9e:
2f:10:b9:41:04:14:2c:87:29:0f:66:7a:d8:1d:9e:7d:13:47:
cb:c8:05:87:4f:e1:c9:99:cf:0a:59:24:56:df:b3:87:f4:1b:
86:bc:19:dc
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICEDQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0
NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNDA4MjYw
NTEzMzBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk1OEY2MThDQ0U0MTc4
MjI4Qzg4NzBGRDc4RTBGRTBFN0VENDk5MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRV8H3A/SrEzldQqmuL/5k2pfDf176MILFcrHir24/WTQkPszg
rg0ucFIxV+50AiC1Fcj/+a+dDNbmjAO12xi+jJrs8OaiPSlRRZHczcALTusSVhkv
xdWsXeqr8T4txd4CQbcX5T9n9YVA7/5hCP+wdE7C1LbUft8m57wzT4odhLSKWZKU
NG293CHMa93lXDc7gHlZ5DfZQ0mWGYI+y/BiEPu2v0nZdw/dvWqOpT1Qem+f7LwP
lUdbrRgY91HlacsA5E2UbBiWD7hU7J0JKmQeZqVTnWnjP2x1JfmHNNOUYF5YglMZ
gz8mANKhwi7BVvEzgdrVFtF+C8bgO1LbQlYhAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUlY9hjM5BeCKMiHD9eOD+Dn7UmQkwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId
1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L
a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvbFk5aGpNNUJlQ0tNaUhEOWVPRC1E
bjdVbVFrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAhtg/DAN
BgkqhkiG9w0BAQsFAAOCAQEAcJ2tx6kBrsW7nsVH2Y863dIYZBuxXQhMgdGdNNOR
q+v+iKkZmr9nlAeb0A0BfRiOI17I/COZLT9FP2J+Qs3Ma+Vqm7l+xny31K2W7WgA
wpP6F0cw8S1wMQfZUzNzXPnrzj35zs0WUdYTWhPzL2si129OT636dzeAkeoU+3u3
pPULAqtV/QeApVBau3pzhOxzTwzMyjnn5TujSbGPznJ1kwRSNRtgLqgH1KD5i0wh
BGT7cLPBuF6reRy69Ta3Vl60YIoeanYVSW0AWXsU8FdEniWL0QHnEHSeLxC5QQQU
LIcpD2Z62B2efRNHy8gFh0/hyZnPClkkVt+zh/QbhrwZ3A==
-----END CERTIFICATE-----
Generated at Tue Apr 22 13:49:15 2025 by rpki-client