Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/AdELYAE_rBjgnPF6SVV-nJP5KMI.roa
File: AdELYAE_rBjgnPF6SVV-nJP5KMI.roa (raw, json)
Hash identifier: 5eduTSXIe6awGRLREDjPvW/MZKLjaMd/3Za9EFgSK4E=
Subject key identifier: 01:D1:0B:60:01:3F:AC:18:E0:9C:F1:7A:49:55:7E:9C:93:F9:28:C2
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0FFD
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/AdELYAE_rBjgnPF6SVV-nJP5KMI.roa
Signing time: Mon 26 Aug 2024 05:15:57 +0000
ROA not before: Mon 26 Aug 2024 05:15:57 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17709
IP address blocks: 222.250.0.0/18 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:28:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4093 (0xffd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Aug 26 05:15:57 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=01D10B60013FAC18E09CF17A49557E9C93F928C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5c:08:85:f1:4a:e7:07:12:63:6b:ee:b0:03:
19:4b:33:4c:a3:7f:11:ae:23:6a:28:4f:94:2f:19:
d3:65:80:03:50:ab:9e:4e:0b:1c:b8:72:c6:bc:0d:
f1:2d:25:d0:95:af:db:1b:1b:d2:50:de:33:e0:bf:
ea:d9:49:1e:47:91:a1:41:40:f2:ab:1d:36:3e:3b:
36:61:8f:0e:9e:6f:27:ac:cd:94:c7:38:fa:db:b8:
a1:84:bb:f3:13:b5:29:7e:c9:43:a6:df:34:3e:2f:
79:9f:db:cd:7d:77:36:1c:f8:7a:c2:43:bb:ad:5f:
7e:fe:2c:de:ce:01:b6:10:28:f2:91:bc:4a:ed:9f:
db:00:ef:8c:87:b7:80:43:d6:0b:c7:14:c4:da:fd:
93:1d:ab:53:07:9c:a4:b2:5f:c2:57:a0:78:63:55:
68:92:95:39:8f:cb:5c:b4:fb:de:c5:b8:51:3a:40:
29:77:1e:b9:8a:3a:f6:54:4e:2e:9e:cd:de:14:a6:
1a:76:a3:b5:39:06:b7:28:9d:cf:84:dd:7b:e0:69:
57:95:e2:21:cc:8f:8b:70:08:7a:14:df:71:48:6b:
d3:f4:cb:17:0d:9a:6f:01:51:56:d3:43:bb:fa:7d:
1b:a9:a6:7c:39:a8:fd:78:09:77:e3:f8:f4:90:42:
65:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D1:0B:60:01:3F:AC:18:E0:9C:F1:7A:49:55:7E:9C:93:F9:28:C2
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/AdELYAE_rBjgnPF6SVV-nJP5KMI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
222.250.0.0/18
Signature Algorithm: sha256WithRSAEncryption
4a:85:b2:ef:b4:18:1a:06:c4:ee:34:e2:1a:a9:d6:5e:96:02:
97:9a:48:21:f7:42:3c:bf:a4:33:cd:ab:b1:36:62:89:6d:0e:
a2:3a:34:0c:43:a0:0c:91:f0:b4:15:a6:85:32:5d:2f:12:f2:
a5:e1:18:0f:ed:4e:d7:02:88:a5:a0:89:8c:a2:86:d5:a3:9f:
ae:d9:34:13:3e:a8:9d:d4:b3:83:f0:77:b3:ce:cf:9a:44:a2:
03:d6:45:85:4b:60:8c:e1:08:07:6f:e9:00:0c:8b:5e:19:a1:
ec:6c:9e:87:29:2d:ae:91:d1:d9:9e:c2:cb:50:98:9c:ba:d9:
33:60:61:0f:93:63:d3:2f:8f:23:95:60:7a:6c:67:85:b3:ea:
86:19:75:c5:5f:2d:dd:41:13:a6:19:0c:fe:69:a9:6d:37:79:
18:0c:c7:44:42:a7:69:9f:16:25:b4:2c:8b:f2:2c:e8:ae:c1:
4c:61:36:05:0e:e6:21:1f:f2:98:c3:36:7d:27:51:5b:99:84:
42:3b:c0:10:da:e8:f5:b2:cc:9c:1a:2e:74:2c:eb:0d:25:6a:
08:ff:f9:5a:6f:53:49:26:7f:7b:02:31:a5:79:f3:2a:85:5d:
4d:c8:7f:ce:96:44:ac:67:37:3b:27:a2:d0:78:6d:60:f0:26:
6d:e2:36:87
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICD/0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2
M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw
NTE1NTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDAxRDEwQjYwMDEzRkFD
MThFMDlDRjE3QTQ5NTU3RTlDOTNGOTI4QzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEXAiF8UrnBxJja+6wAxlLM0yjfxGuI2ooT5QvGdNlgANQq55O
Cxy4csa8DfEtJdCVr9sbG9JQ3jPgv+rZSR5HkaFBQPKrHTY+OzZhjw6ebyeszZTH
OPrbuKGEu/MTtSl+yUOm3zQ+L3mf2819dzYc+HrCQ7utX37+LN7OAbYQKPKRvErt
n9sA74yHt4BD1gvHFMTa/ZMdq1MHnKSyX8JXoHhjVWiSlTmPy1y0+97FuFE6QCl3
HrmKOvZUTi6ezd4Uphp2o7U5Brconc+E3XvgaVeV4iHMj4twCHoU33FIa9P0yxcN
mm8BUVbTQ7v6fRuppnw5qP14CXfj+PSQQmUjAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUAdELYAE/rBjgnPF6SVV+nJP5KMIwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D
T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt
T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0FkRUxZQUVfckJqZ25QRjZTVlYtbkpQ
NUtNSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbe+gAwDQYJ
KoZIhvcNAQELBQADggEBAEqFsu+0GBoGxO404hqp1l6WApeaSCH3Qjy/pDPNq7E2
YoltDqI6NAxDoAyR8LQVpoUyXS8S8qXhGA/tTtcCiKWgiYyihtWjn67ZNBM+qJ3U
s4Pwd7POz5pEogPWRYVLYIzhCAdv6QAMi14ZoexsnocpLa6R0dmewstQmJy62TNg
YQ+TY9MvjyOVYHpsZ4Wz6oYZdcVfLd1BE6YZDP5pqW03eRgMx0RCp2mfFiW0LIvy
LOiuwUxhNgUO5iEf8pjDNn0nUVuZhEI7wBDa6PWyzJwaLnQs6w0lagj/+VpvU0km
f3sCMaV58yqFXU3If86WRKxnNzsnotB4bWDwJm3iNoc=
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:43:59 2025 by rpki-client