Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/ZSHuNfJyRGwLWPwLNqjEBnQ-iec.roa
File: ZSHuNfJyRGwLWPwLNqjEBnQ-iec.roa (raw, json)
Hash identifier: q2ueSIW39s5gZmEd1v60Z56lnWVYJK30sNTs4Ner+X0=
Subject key identifier: 65:21:EE:35:F2:72:44:6C:0B:58:FC:0B:36:A8:C4:06:74:3E:89:E7
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 101D
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/ZSHuNfJyRGwLWPwLNqjEBnQ-iec.roa
Signing time: Mon 26 Aug 2024 05:16:05 +0000
ROA not before: Mon 26 Aug 2024 05:16:05 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9311
IP address blocks: 210.201.60.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:28:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4125 (0x101d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Aug 26 05:16:05 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=6521EE35F272446C0B58FC0B36A8C406743E89E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3b:5c:70:b9:16:50:90:b3:95:0b:b7:5e:1f:
0f:aa:9e:b4:9d:a0:c4:23:20:a7:50:72:9b:75:b7:
60:b3:3f:e6:fb:01:c8:12:3b:f3:80:25:8d:93:b5:
a3:d8:d9:b2:f7:b2:47:fc:5e:e9:74:26:e0:a9:27:
ce:fa:4d:e7:60:a0:a7:48:c7:87:88:e6:a4:56:f4:
d2:02:5a:aa:cd:94:03:f2:f7:b2:83:a4:14:ec:78:
fc:a5:f0:ba:31:77:bd:30:18:ff:71:f1:cc:75:cb:
cb:9b:9a:53:92:4e:25:38:d4:70:2f:f2:a7:d4:fb:
9b:54:c0:7b:d6:f2:94:fd:7f:a7:02:c3:3e:32:ef:
16:14:a2:c3:25:90:ec:39:71:37:54:e9:6e:45:8a:
77:71:66:58:3f:29:4d:9a:f1:05:07:a5:83:8c:15:
9f:e3:cd:40:ba:bd:a8:12:07:6a:e4:41:f6:4d:d6:
f6:c5:a4:e5:ff:be:00:0b:f1:f9:41:c3:b3:1a:57:
4e:c4:a9:63:7f:df:66:25:d7:c6:4d:be:eb:ca:df:
77:41:e9:78:83:6a:58:6e:71:27:3f:3c:cb:06:a4:
66:df:64:88:84:10:38:e2:18:5e:16:3d:5d:4c:3a:
02:66:f2:78:6f:7e:62:13:40:12:9e:d3:7c:db:14:
b1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:21:EE:35:F2:72:44:6C:0B:58:FC:0B:36:A8:C4:06:74:3E:89:E7
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/ZSHuNfJyRGwLWPwLNqjEBnQ-iec.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.201.60.0/23
Signature Algorithm: sha256WithRSAEncryption
ca:e4:33:9e:38:f4:cc:03:f7:73:f3:29:da:e3:e0:ca:ac:e9:
a0:c8:18:1a:4a:27:1e:37:47:6f:08:ea:fa:5e:ff:7b:23:d0:
71:b7:20:68:b1:bb:78:04:ca:7b:45:e6:0c:83:e2:e3:5f:57:
61:f5:43:67:e2:d5:84:e1:c0:1f:64:1a:16:a2:3f:a4:12:0a:
1f:49:8f:b9:7e:8d:dd:8e:7a:56:94:ba:f6:7a:76:67:27:2a:
87:ef:2c:8c:68:3a:79:1e:39:2e:66:a6:1c:df:d6:ef:ea:17:
7c:83:90:ab:7f:64:3c:86:9e:bf:70:c4:45:2f:c3:47:7d:c6:
ea:be:69:2e:ae:e6:77:71:88:1b:82:78:68:c9:af:2a:28:bf:
aa:39:c6:5d:5c:2a:6d:05:db:5a:10:24:6d:8b:fd:97:da:36:
35:1a:10:2f:ec:d4:7e:d0:19:b9:ba:8b:33:34:46:e5:b4:b7:
c2:1c:7e:29:d0:a0:1f:61:b9:19:fb:5a:32:73:07:28:80:c9:
ec:0b:5f:cb:d0:da:57:64:a4:c7:f6:e6:d9:d6:f8:cc:3c:e1:
dc:70:49:09:53:af:93:a9:8e:92:6c:8d:a2:7a:05:f2:89:b8:
07:50:9e:28:5d:fa:ae:be:44:32:6e:0c:2a:08:35:28:28:b1:
13:ce:c0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:34:28 2025 by rpki-client