Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/0Qjv66WeGICIK38VYpCvU9MT-6Q.roa
File: 0Qjv66WeGICIK38VYpCvU9MT-6Q.roa (raw, json)
Hash identifier: j9BWGrY041sYzyj1DqNv9QG7u4RQG+KIxXL+MZ+7hjM=
Subject key identifier: D1:08:EF:EB:A5:9E:18:80:88:2B:7F:15:62:90:AF:53:D3:13:FB:A4
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1699
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/0Qjv66WeGICIK38VYpCvU9MT-6Q.roa
Signing time: Mon 26 Aug 2024 05:22:22 +0000
ROA not before: Mon 26 Aug 2024 05:22:22 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 136543
IP address blocks: 115.30.65.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:07:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5785 (0x1699)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Aug 26 05:22:22 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D108EFEBA59E1880882B7F156290AF53D313FBA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f1:c8:59:50:1c:38:19:d1:f3:7a:22:f0:bd:
71:49:a4:c9:d2:f9:32:14:57:3d:c7:47:42:08:26:
71:97:e3:77:a2:07:c5:90:e8:67:2c:24:9f:db:88:
0b:9a:85:ad:98:ea:33:1f:49:b2:e7:71:17:de:b4:
1a:4b:ba:17:ec:98:5f:b7:18:32:d4:31:ab:22:0f:
a4:d4:99:83:11:d2:0d:87:c0:76:db:f8:e4:24:9e:
69:87:92:24:63:a9:18:91:cb:b9:9f:06:94:c6:81:
d2:c9:7e:97:e1:9b:e4:4c:76:8a:c5:bd:0e:d0:bc:
4b:4c:c2:ad:b7:08:a3:d2:d1:d7:ba:4e:2c:2f:f1:
c5:76:d1:d7:23:c9:fb:6b:d5:65:7a:cc:c4:31:72:
df:ee:37:50:d3:c1:be:b4:5b:4a:61:ec:86:2f:6d:
d3:d6:2e:0f:52:6a:0a:42:ff:13:98:40:10:b2:a8:
c4:43:e7:0a:04:25:09:8e:12:db:0a:7e:7a:23:9e:
34:2d:e5:05:59:2c:83:a2:7d:0d:e3:11:d2:4f:09:
b7:f3:6c:ba:f8:b0:d4:68:8c:24:c9:97:a4:36:75:
19:fb:67:b1:82:9d:fd:6c:10:c0:a2:79:37:0f:5f:
33:80:d1:3c:9f:e8:aa:09:9e:a6:4e:a1:45:f2:3b:
7d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:08:EF:EB:A5:9E:18:80:88:2B:7F:15:62:90:AF:53:D3:13:FB:A4
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/0Qjv66WeGICIK38VYpCvU9MT-6Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.30.65.0/24
Signature Algorithm: sha256WithRSAEncryption
65:9f:18:57:d8:53:8b:60:67:4f:36:03:fb:c3:0f:db:82:52:
3f:d0:79:65:f9:e6:99:e1:b6:11:b6:50:28:72:97:cd:45:a9:
52:12:da:41:05:bc:47:d9:46:7e:ea:0f:ec:1b:af:e2:99:22:
9d:8d:39:a2:60:91:8f:f3:72:66:d5:44:d4:4d:35:7b:58:cb:
9f:d1:4b:9a:3d:d9:f7:77:06:a4:23:f7:53:41:1f:a6:40:21:
73:8e:95:3d:2a:5c:a5:9a:08:75:e2:f1:ad:02:36:2f:0d:1c:
67:5b:e6:1c:be:cd:6a:4f:9e:10:71:7c:46:0c:e6:5a:12:d4:
a7:e0:7c:c2:41:f5:26:e6:40:3c:09:24:d7:8d:b2:50:a4:e7:
a6:e2:3c:11:14:21:b5:05:a2:50:35:4a:9b:4c:2d:3b:50:b2:
0c:3e:12:f1:e4:ca:65:30:5e:d6:6f:ee:48:35:a7:d6:60:e4:
50:52:aa:9d:67:20:c9:ec:09:80:80:1f:df:d1:81:7d:f7:2f:
53:92:05:cb:78:13:4e:20:69:c5:d6:df:15:62:73:ca:d4:ef:
0b:ab:34:d7:5b:a6:2f:dc:33:18:53:2d:14:be:e7:40:2d:bc:
11:9b:50:de:a6:8b:23:b7:b1:f5:66:4d:4a:90:4c:6a:ec:c5:
5f:21:5a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 17:14:34 2025 by rpki-client