Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/oAV1PvB3WbK1DpR-SbC5PsnrDLs.roa
File: oAV1PvB3WbK1DpR-SbC5PsnrDLs.roa (raw, json)
Hash identifier: DHWyc9cbwOkP4WZFOGCqRaUd7dLybvCBuXFuPxVl0kY=
Subject key identifier: A0:05:75:3E:F0:77:59:B2:B5:0E:94:7E:49:B0:B9:3E:C9:EB:0C:BB
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 161A
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/oAV1PvB3WbK1DpR-SbC5PsnrDLs.roa
Signing time: Mon 26 Aug 2024 05:21:47 +0000
ROA not before: Mon 26 Aug 2024 05:21:47 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9674
IP address blocks: 106.107.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:07:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5658 (0x161a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Aug 26 05:21:47 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A005753EF07759B2B50E947E49B0B93EC9EB0CBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d1:d4:75:2b:9c:df:da:f4:bb:d2:6b:82:48:
15:64:da:90:11:15:e9:40:25:d4:49:ae:31:fb:cb:
33:cf:16:36:97:f3:48:69:e6:bc:ad:8e:1e:b1:ec:
65:c5:73:eb:f8:f0:90:9e:4b:3b:3e:29:53:28:1b:
d4:a5:ab:20:f9:6f:ad:aa:2e:e9:b9:2c:44:c6:b9:
38:d3:8b:20:d8:ce:76:cc:f6:23:82:ea:99:22:6d:
d6:d7:8e:56:18:6a:d8:bc:45:7a:5b:26:e5:9c:4d:
fd:5c:62:09:e0:b4:57:07:84:f2:9f:53:98:7c:9a:
9c:ce:48:7d:ea:16:1a:35:d8:68:5a:14:91:d2:cb:
14:20:fc:c5:98:8e:64:fc:ca:73:5f:e6:ed:e8:bd:
8c:b4:5e:27:d2:b8:99:73:c4:2b:4d:35:6a:96:a7:
e8:3a:1b:fa:0e:a5:7c:12:5a:e3:2d:a7:70:78:a2:
23:87:3b:89:8b:e6:51:99:c7:5c:57:57:83:97:46:
3d:52:8b:2e:32:b7:ee:ef:26:58:61:5a:6d:51:d2:
62:1a:76:79:90:2e:d5:de:7c:97:95:4a:4c:24:ad:
0e:91:0c:1b:bd:7a:93:ae:7a:8b:20:fc:71:fb:1a:
a2:5c:94:77:aa:f3:9e:fb:bf:f1:df:e8:60:fa:35:
a3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:05:75:3E:F0:77:59:B2:B5:0E:94:7E:49:B0:B9:3E:C9:EB:0C:BB
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/oAV1PvB3WbK1DpR-SbC5PsnrDLs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.107.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1b:b9:8e:0b:98:01:b1:9b:f0:1c:00:97:2c:f5:a4:1a:84:b8:
78:9c:cb:20:42:92:c5:63:3f:b7:71:03:15:bd:8e:ac:65:66:
2d:9f:4f:10:12:f6:aa:d7:97:ee:0f:cf:50:6b:9c:bb:91:62:
cf:cc:23:24:1d:4c:3e:db:4d:4b:02:21:20:d2:dd:b6:cd:b0:
58:c6:79:a0:20:1e:38:63:b4:f7:48:48:8f:37:47:4c:12:3b:
9a:fa:42:e1:72:e2:72:c5:59:6a:c2:b0:c8:ae:39:0d:8c:7f:
df:73:d5:4a:52:fc:81:a1:13:77:14:6c:0b:06:5b:96:d8:85:
50:a2:a6:77:de:4a:c4:e6:88:f9:d5:f2:05:d1:e7:7e:79:63:
1c:3c:b9:09:8f:4d:33:ec:b7:9e:2b:91:8a:cb:60:e1:9c:aa:
a3:e7:68:ec:f2:6e:71:ff:4c:9d:36:4a:49:aa:d1:05:e0:fd:
89:99:a1:64:96:40:70:23:f1:8d:3d:79:2e:a1:dc:41:8c:e1:
c1:f6:f9:79:c7:de:a8:4f:06:c6:9b:d6:ef:ee:86:4d:99:5e:
51:1b:4b:c8:d9:79:26:90:51:ae:48:c2:ec:57:87:46:65:48:
fa:a1:b9:90:04:ef:ac:1a:d8:ee:d3:8e:f4:53:60:b6:86:9f:
01:0a:e5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:27:51 2025 by rpki-client