Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/CUQvwNRbcKDD5Xeq-BFalJBgmzY.roa
File: CUQvwNRbcKDD5Xeq-BFalJBgmzY.roa (raw, json)
Hash identifier: PjPWWhz8SzJ9jkDCYBHrgQJNNLOSPiHHx8hBySG3HRs=
Subject key identifier: 09:44:2F:C0:D4:5B:70:A0:C3:E5:77:AA:F8:11:5A:94:90:60:9B:36
Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial: 0ED3
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/CUQvwNRbcKDD5Xeq-BFalJBgmzY.roa
Signing time: Mon 26 Aug 2024 05:21:46 +0000
ROA not before: Mon 26 Aug 2024 05:21:46 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9919
IP address blocks: 192.72.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:08:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3795 (0xed3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Validity
Not Before: Aug 26 05:21:46 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=09442FC0D45B70A0C3E577AAF8115A9490609B36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:73:42:4d:7b:49:99:2d:bd:40:99:d9:76:ba:
9e:c6:68:89:13:22:b8:58:40:1e:57:cd:cd:22:ba:
a4:18:83:82:59:b1:1e:cc:2a:7d:93:6c:56:dc:23:
95:29:62:b1:90:b1:89:26:59:93:12:fa:01:05:52:
d7:e4:a6:4c:82:2f:35:4f:6a:23:e2:8b:54:35:d0:
5c:d0:17:1e:44:83:44:32:09:a7:78:eb:bd:51:27:
d0:01:13:ed:d0:1c:53:b9:81:a9:28:3e:b9:a2:8f:
b8:53:02:d0:0b:14:66:62:81:e8:ab:df:c1:68:75:
16:4e:2e:e2:29:10:d0:4d:2f:79:91:55:39:65:02:
2a:15:ba:2a:af:42:5a:5a:4f:40:d9:f1:a6:0c:48:
bc:51:bb:5f:61:7f:0d:2e:9a:17:67:72:c9:d9:f1:
47:12:5b:32:5a:dd:e1:cd:46:da:b7:b7:57:98:f0:
90:0d:4f:96:b3:1d:e1:78:2c:6e:ce:d4:93:c4:50:
11:ca:3d:7e:09:61:4b:51:f2:df:e3:38:96:fa:b9:
d1:c3:fc:d3:31:65:64:1c:d0:d4:8c:6b:49:f9:e8:
8e:c8:2b:f1:f5:0f:ce:c5:c8:73:f1:90:d1:2c:6c:
61:61:33:ea:9d:4c:d2:24:8d:25:15:c4:a9:90:cb:
75:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:44:2F:C0:D4:5B:70:A0:C3:E5:77:AA:F8:11:5A:94:90:60:9B:36
X509v3 Authority Key Identifier:
keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/CUQvwNRbcKDD5Xeq-BFalJBgmzY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.72.3.0/24
Signature Algorithm: sha256WithRSAEncryption
20:46:7b:6a:87:a0:22:60:81:eb:a4:2b:d3:2b:5d:52:5a:77:
6a:68:ee:2e:b4:8d:08:30:f7:68:49:6c:57:25:cf:04:50:49:
4c:c1:1a:d6:03:7f:41:5d:59:df:91:43:13:f7:21:0b:1a:40:
a8:50:30:70:67:c7:0f:9a:6c:90:e3:c1:fb:84:92:72:8e:2b:
09:ce:a7:17:a7:12:a9:22:33:14:18:77:46:1d:0f:42:79:a8:
ee:42:d5:64:25:89:06:66:c8:e0:32:c5:ab:20:d6:75:07:ba:
de:5c:95:ec:ac:07:f1:f5:83:d1:37:42:16:88:33:23:7d:fb:
4e:09:2c:fc:3b:e4:26:e0:eb:05:db:c0:d3:5d:56:6d:b9:73:
19:ca:2c:d3:9b:23:78:bb:3b:33:fe:8c:d5:9e:fc:24:2c:b5:
91:ec:87:f2:65:92:0e:20:4b:46:28:69:ad:52:b8:39:c0:00:
a2:2f:4b:55:e0:9e:8f:ec:ce:97:34:15:07:99:ba:9e:f0:d4:
1d:57:b7:13:41:0d:dd:6a:b8:33:74:b8:90:a4:ac:31:1c:f4:
10:78:8d:c5:e1:e9:d0:46:81:e0:32:39:02:86:79:ef:d5:1a:
a0:a1:45:21:f3:4a:1a:90:c6:01:3c:6d:f2:12:e7:16:a8:77:
fc:66:ee:31
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDtMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjRB
NjVBMEVCODY2OTIxOUM0MTg1NDQyRDQ5RkM5RDZGODI1QjY2NTAeFw0yNDA4MjYw
NTIxNDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA5NDQyRkMwRDQ1Qjcw
QTBDM0U1NzdBQUY4MTE1QTk0OTA2MDlCMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6c0JNe0mZLb1Amdl2up7GaIkTIrhYQB5Xzc0iuqQYg4JZsR7M
Kn2TbFbcI5UpYrGQsYkmWZMS+gEFUtfkpkyCLzVPaiPii1Q10FzQFx5Eg0QyCad4
671RJ9ABE+3QHFO5gakoPrmij7hTAtALFGZigeir38FodRZOLuIpENBNL3mRVTll
AioVuiqvQlpaT0DZ8aYMSLxRu19hfw0umhdncsnZ8UcSWzJa3eHNRtq3t1eY8JAN
T5azHeF4LG7O1JPEUBHKPX4JYUtR8t/jOJb6udHD/NMxZWQc0NSMa0n56I7IK/H1
D87FyHPxkNEsbGFhM+qdTNIkjSUVxKmQy3XlAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUCUQvwNRbcKDD5Xeq+BFalJBgmzYwHwYDVR0jBBgwFoAUtKZaDrhmkhnEGFRC
1J/J1vgltmUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy90
S1phRHJobWtobkVHRlJDMUpfSjF2Z2x0bVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L3RLWmFEcmhta2huRUdGUkMxSl9KMXZnbHRtVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvQ1VRdndOUmJjS0RENVhlcS1CRmFs
SkJnbXpZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMBIAzAN
BgkqhkiG9w0BAQsFAAOCAQEAIEZ7aoegImCB66Qr0ytdUlp3amjuLrSNCDD3aEls
VyXPBFBJTMEa1gN/QV1Z35FDE/chCxpAqFAwcGfHD5pskOPB+4SSco4rCc6nF6cS
qSIzFBh3Rh0PQnmo7kLVZCWJBmbI4DLFqyDWdQe63lyV7KwH8fWD0TdCFogzI337
Tgks/DvkJuDrBdvA011WbblzGcos05sjeLs7M/6M1Z78JCy1keyH8mWSDiBLRihp
rVK4OcAAoi9LVeCej+zOlzQVB5m6nvDUHVe3E0EN3Wq4M3S4kKSsMRz0EHiNxeHp
0EaB4DI5AoZ579UaoKFFIfNKGpDGATxt8hLnFqh3/GbuMQ==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:35:26 2025 by rpki-client