Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/gSWYZU2UlH9RQ1hYnMaBgQYKVAM.roa
File: gSWYZU2UlH9RQ1hYnMaBgQYKVAM.roa (raw, json)
Hash identifier: nt4LX1atm2/VK+hmQxeq2/vYrnK2k8I+jgJeFtdRyPQ=
Subject key identifier: 81:25:98:65:4D:94:94:7F:51:43:58:58:9C:C6:81:81:06:0A:54:03
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 167D
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/gSWYZU2UlH9RQ1hYnMaBgQYKVAM.roa
Signing time: Mon 26 Aug 2024 05:22:15 +0000
ROA not before: Mon 26 Aug 2024 05:22:15 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9919
IP address blocks: 210.64.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5757 (0x167d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Aug 26 05:22:15 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=812598654D94947F514358589CC68181060A5403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:41:bf:e7:20:74:be:e1:7b:a1:bd:84:1a:3f:
5d:3d:24:b4:a2:9d:fa:ca:50:f9:54:c4:4f:b9:b5:
cf:f4:99:ef:b4:a0:45:3e:dc:f8:da:2d:5e:80:96:
d7:4f:eb:35:fa:8a:cc:42:d2:39:c8:be:a3:21:40:
6b:79:c2:86:48:f7:96:ad:a6:7f:56:fd:70:dc:32:
9b:af:37:55:f0:56:41:ec:2c:a6:a1:fd:08:a2:da:
3d:39:cc:5f:7e:bf:85:c1:e7:6f:36:75:b6:af:88:
80:2f:01:72:e9:d0:34:6e:0a:37:b0:c0:64:4a:40:
84:9e:6f:e2:c3:4f:b6:62:8b:86:d4:d5:22:fd:ba:
0d:a9:32:fc:ae:f6:95:df:18:5d:90:2e:fd:5c:09:
b2:41:ac:51:b4:b8:b4:87:f7:ce:96:e1:b5:49:f2:
94:69:7f:14:dc:17:5f:1d:3e:aa:ec:77:61:e7:dd:
bb:09:97:e1:ee:1e:de:85:f2:96:95:24:c7:b0:aa:
ac:34:94:07:9e:9d:67:0e:49:4d:62:3a:3a:6a:fd:
f0:66:f9:8f:f5:ed:e9:8d:6c:35:2f:6e:af:08:2c:
10:7c:5d:6d:d4:d3:09:2c:6c:dd:79:09:da:91:cf:
a1:85:65:d4:95:d7:63:64:18:fd:5f:56:45:a5:07:
66:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:25:98:65:4D:94:94:7F:51:43:58:58:9C:C6:81:81:06:0A:54:03
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/gSWYZU2UlH9RQ1hYnMaBgQYKVAM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.64.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6c:86:e0:4c:fc:2c:ae:2c:0a:e7:0c:b8:58:b2:87:58:d6:f0:
b9:d7:8f:ca:03:e0:96:04:00:3e:81:03:2e:b2:29:92:08:62:
a6:2c:40:c0:cf:a2:7f:bb:d3:b9:75:cc:62:1b:5f:cc:73:ca:
33:df:32:e8:59:3f:55:94:5b:ee:7a:7e:89:e4:df:19:de:8b:
46:bf:43:da:29:23:e4:47:50:0f:d9:99:26:ca:16:cd:44:1a:
69:ae:0c:19:4a:4a:45:86:ed:26:21:d3:46:76:d4:93:86:87:
5a:8a:e9:2c:85:29:7f:64:6d:71:81:4a:4f:cf:db:a6:e5:90:
24:44:ed:5a:c6:fd:ed:0f:09:58:eb:0b:9f:3a:52:a3:2c:9a:
eb:02:3a:80:b4:9d:16:99:4f:f7:4c:4c:28:35:4f:e9:bd:13:
02:41:c6:3c:5c:1e:2b:60:f0:8d:73:4a:56:d2:87:a2:8b:56:
08:d7:1d:81:80:1c:e2:1c:e6:71:19:9c:80:34:c9:95:5d:45:
a0:d8:01:41:5e:22:83:f5:f0:2b:ab:9e:fc:59:56:02:51:db:
0b:f3:0a:c1:d0:53:8e:22:6d:f1:ad:6d:b7:a7:94:06:dd:68:
30:cd:42:dd:8c:e2:2b:cb:4d:52:9e:27:75:fb:a7:ae:60:2d:
8f:94:33:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:14:31 2025 by rpki-client