Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/awIZh6KzSYKgVU1YGX__k8Rc-fI.roa
File: awIZh6KzSYKgVU1YGX__k8Rc-fI.roa (raw, json)
Hash identifier: 8kCJcp3prAEXxvcP7fI5TZMUkspzTMPqPVBPeYMh+Xs=
Subject key identifier: 6B:02:19:87:A2:B3:49:82:A0:55:4D:58:19:7F:FF:93:C4:5C:F9:F2
Certificate issuer: /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Certificate serial: 06E0
Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/awIZh6KzSYKgVU1YGX__k8Rc-fI.roa
Signing time: Mon 26 Aug 2024 05:20:58 +0000
ROA not before: Mon 26 Aug 2024 05:20:58 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17415
IP address blocks: 103.152.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:49:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1760 (0x6e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Validity
Not Before: Aug 26 05:20:58 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=6B021987A2B34982A0554D58197FFF93C45CF9F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7f:0c:73:4b:bc:e9:19:1a:14:04:d0:6e:0f:
88:8e:8f:af:8e:e7:1d:ba:a6:b7:f2:72:fb:b3:84:
46:11:30:23:f6:29:b2:a2:7d:a6:1d:6d:1e:32:7e:
7c:a9:c6:8a:d0:d6:a9:3d:0e:0f:d3:ee:10:19:0f:
58:3f:16:ae:cb:a2:ed:e1:da:ab:6b:9f:c9:75:5e:
6b:c4:94:0d:77:b8:b9:ac:b6:ea:d2:0a:dc:fc:e3:
4d:da:4f:37:e3:5d:dd:35:2c:21:ea:6c:94:41:9d:
cd:cd:bc:e6:37:95:0b:21:a2:d3:2f:3e:a7:5c:9c:
e7:6f:36:ad:e2:35:5f:a6:fb:00:d3:4c:f9:96:9c:
fa:37:d5:a2:9e:3e:39:8e:81:9b:46:de:98:bf:1c:
0e:04:b7:63:e4:b3:3d:f2:04:ec:30:ae:88:6c:cd:
75:65:a7:82:2e:d4:a4:ba:a3:c3:44:30:87:bc:45:
23:93:a2:20:57:45:0e:27:81:e9:81:40:36:1a:69:
9a:f7:dd:6f:35:2c:ac:31:c4:6f:67:82:7f:9c:69:
cb:46:cb:a8:57:18:9f:0b:42:52:6e:5d:8b:b0:47:
d4:74:d4:a1:5e:20:ea:43:af:e7:cf:df:25:19:f6:
29:77:19:d1:13:da:b4:ba:cf:0f:52:67:11:6d:d7:
63:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:02:19:87:A2:B3:49:82:A0:55:4D:58:19:7F:FF:93:C4:5C:F9:F2
X509v3 Authority Key Identifier:
keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/awIZh6KzSYKgVU1YGX__k8Rc-fI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.203.0/24
Signature Algorithm: sha256WithRSAEncryption
89:f7:9b:1c:79:76:40:31:d7:0d:44:e5:91:28:5b:f4:96:a0:
4d:ff:96:28:f6:5f:51:48:e7:08:eb:09:75:d4:33:c2:bf:73:
5e:e5:20:02:aa:2a:9e:c0:cc:a5:b4:0b:7d:e6:83:78:10:35:
39:ea:39:f9:a0:10:08:e2:4e:bf:f6:5b:84:54:7a:37:c1:a2:
74:14:bd:9e:c4:b1:6b:6d:27:66:66:77:d3:f4:78:a6:0c:83:
04:16:d7:17:54:28:a6:2a:d1:37:f8:05:33:04:9a:92:3e:21:
5a:57:2b:15:94:08:d2:22:fa:65:47:aa:bf:90:6a:aa:d1:70:
04:78:3a:21:33:26:3f:73:64:c8:81:6f:8a:97:d0:2d:6e:5d:
0e:b2:61:e1:3f:c2:85:f8:bb:7e:0f:23:7c:09:af:cc:05:be:
32:89:76:04:7c:24:e0:0d:25:c4:d3:ec:02:c8:b1:53:4a:e9:
ff:dd:23:65:ac:92:ea:9b:fe:f6:74:17:2d:c9:49:6c:24:af:
47:32:d2:fb:49:4a:6c:f8:e8:f9:7b:4c:de:aa:ac:d5:f7:d6:
fc:97:b6:19:87:a1:1f:4c:eb:bb:73:84:0e:31:ed:2b:4d:5d:
d5:ce:8f:0c:51:fc:09:c2:0e:f7:ae:26:61:b1:b7:ba:43:88:
33:84:97:6e
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICBuAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQURG
RTZFNTZEQUY4NDkyRUM3REU4OEIzQTkwNkIzMTM5QjU1Qjg2NDAeFw0yNDA4MjYw
NTIwNThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZCMDIxOTg3QTJCMzQ5
ODJBMDU1NEQ1ODE5N0ZGRjkzQzQ1Q0Y5RjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCyfwxzS7zpGRoUBNBuD4iOj6+O5x26prfycvuzhEYRMCP2KbKi
faYdbR4yfnypxorQ1qk9Dg/T7hAZD1g/Fq7Lou3h2qtrn8l1XmvElA13uLmsturS
Ctz8403aTzfjXd01LCHqbJRBnc3NvOY3lQshotMvPqdcnOdvNq3iNV+m+wDTTPmW
nPo31aKePjmOgZtG3pi/HA4Et2Pksz3yBOwwrohszXVlp4Iu1KS6o8NEMIe8RSOT
oiBXRQ4ngemBQDYaaZr33W81LKwxxG9ngn+cactGy6hXGJ8LQlJuXYuwR9R01KFe
IOpDr+fP3yUZ9il3GdET2rS6zw9SZxFt12M1AgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUawIZh6KzSYKgVU1YGX//k8Rc+fIwHwYDVR0jBBgwFoAUrf5uVtr4SS7H3oiz
qQazE5tVuGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJ
VEVBL3JmNXVWdHI0U1M3SDNvaXpxUWF6RTV0VnVHUS5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvcmY1dVZ0cjRTUzdIM29penFRYXpFNXRWdUdRLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJVEVBL2F3SVpoNkt6U1lL
Z1ZVMVlHWF9fazhSYy1mSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABnmMswDQYJKoZIhvcNAQELBQADggEBAIn3mxx5dkAx1w1E5ZEoW/SWoE3/
lij2X1FI5wjrCXXUM8K/c17lIAKqKp7AzKW0C33mg3gQNTnqOfmgEAjiTr/2W4RU
ejfBonQUvZ7EsWttJ2Zmd9P0eKYMgwQW1xdUKKYq0Tf4BTMEmpI+IVpXKxWUCNIi
+mVHqr+QaqrRcAR4OiEzJj9zZMiBb4qX0C1uXQ6yYeE/woX4u34PI3wJr8wFvjKJ
dgR8JOANJcTT7ALIsVNK6f/dI2Wskuqb/vZ0Fy3JSWwkr0cy0vtJSmz46Pl7TN6q
rNX31vyXthmHoR9M67tzhA4x7StNXdXOjwxR/AnCDveuJmGxt7pDiDOEl24=
-----END CERTIFICATE-----
Generated at Wed Apr 16 02:45:13 2025 by rpki-client