Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/NOzXWvW3Ll2gZ2_Yg5v-6CNmkus.roa
File: NOzXWvW3Ll2gZ2_Yg5v-6CNmkus.roa (raw, json)
Hash identifier: sRiUpmizJDdNfqE1bYi11KHWcXst1vJfjOj7NP/Ssc4=
Subject key identifier: 34:EC:D7:5A:F5:B7:2E:5D:A0:67:6F:D8:83:9B:FE:E8:23:66:92:EB
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 16E1
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/NOzXWvW3Ll2gZ2_Yg5v-6CNmkus.roa
Signing time: Mon 26 Aug 2024 05:22:43 +0000
ROA not before: Mon 26 Aug 2024 05:22:43 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4780
IP address blocks: 218.210.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5857 (0x16e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Aug 26 05:22:43 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=34ECD75AF5B72E5DA0676FD8839BFEE8236692EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c3:bf:11:30:0f:1e:33:5f:87:97:f0:bf:8f:
20:ab:3d:85:27:c5:7b:da:29:d5:9b:35:4d:4a:4e:
cc:85:d5:49:b1:19:79:8b:73:87:94:af:d0:c8:5d:
05:a8:28:6d:18:eb:3d:cb:28:ad:42:2f:b2:1a:96:
de:09:cc:4c:48:9c:c0:9e:09:2d:c1:66:ff:d8:9a:
e9:d9:3c:6e:19:f3:5d:2c:aa:41:b9:06:de:68:f3:
18:69:11:42:c0:d8:2e:6f:6e:d8:87:53:85:19:1f:
97:b7:f3:b6:ee:73:42:10:72:ad:75:77:f0:9b:ee:
ca:13:74:21:38:c5:c6:4f:27:b0:47:9a:3b:23:ac:
e4:a6:9a:86:c8:0f:4b:b0:31:66:07:00:72:33:9f:
57:64:3d:de:26:e6:24:5c:e1:94:93:b0:9a:35:b1:
e2:6f:3f:89:0e:28:1a:f6:c6:02:f4:c7:7b:7c:05:
14:48:e9:77:dc:e2:83:e2:97:02:d9:0d:f1:8e:e9:
23:8f:2b:fe:a8:4d:30:74:4b:89:c7:09:71:e7:ef:
d0:25:18:20:f3:16:2b:ef:34:d1:0a:b4:d9:72:e9:
7a:d8:8d:d1:21:6f:a7:b6:82:1c:0a:75:f4:27:6c:
11:50:9c:d3:c5:48:9d:52:c9:0b:14:28:0a:8a:80:
d9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:EC:D7:5A:F5:B7:2E:5D:A0:67:6F:D8:83:9B:FE:E8:23:66:92:EB
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/NOzXWvW3Ll2gZ2_Yg5v-6CNmkus.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.210.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a4:90:46:8a:f2:2f:96:c0:15:69:b0:d9:47:c1:61:e7:d7:5b:
cb:f5:d9:9e:e5:5e:da:98:ee:39:47:2a:79:9d:f3:85:0b:02:
a3:f2:fe:91:bb:4d:e1:a4:1e:8e:12:de:82:e2:b5:8f:d9:db:
52:04:82:0d:e0:ca:01:81:b1:a3:f9:9e:c0:91:59:40:03:b5:
77:4a:5a:ba:5a:72:96:86:b8:c9:47:e9:d9:f8:5d:a2:1d:36:
6a:f2:f7:24:b6:11:09:0e:15:79:6d:8f:d2:a6:36:bc:eb:0f:
d9:3f:5b:4c:10:54:3f:ef:18:66:66:2f:b5:9f:64:22:6b:f7:
d2:4c:e7:8b:60:bb:83:55:a8:9a:b3:0e:d1:ea:c1:e9:2f:68:
50:d7:66:55:e0:c8:5e:6a:06:0d:aa:d5:2a:95:44:3f:a7:0b:
85:e4:9d:e3:65:2a:ff:42:8a:c4:da:39:4a:c1:f5:4e:15:4c:
52:36:ad:29:17:24:ef:9d:84:7d:fc:f4:32:6a:d8:9f:a5:09:
b1:62:5a:f3:ef:dc:14:f1:4c:d6:d3:0f:04:99:5a:75:24:02:
10:41:29:7d:46:e3:84:97:9a:9e:1e:2e:c4:70:7c:54:f6:07:
8d:8c:22:16:72:5c:73:4d:71:0c:d9:f2:c0:07:ae:25:f1:e9:
66:56:54:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:25:34 2025 by rpki-client