Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/oyqTUE0EU1slGFsFmFyIp0q9IKs.roa
File: oyqTUE0EU1slGFsFmFyIp0q9IKs.roa (raw, json)
Hash identifier: dG40n8jXrF7ZloRSaZAy90luGp2ZSLgUc5cE5cnrGB8=
Subject key identifier: A3:2A:93:50:4D:04:53:5B:25:18:5B:05:98:5C:88:A7:4A:BD:20:AB
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1672
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/oyqTUE0EU1slGFsFmFyIp0q9IKs.roa
Signing time: Mon 26 Aug 2024 05:22:12 +0000
ROA not before: Mon 26 Aug 2024 05:22:12 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4780
IP address blocks: 211.78.160.0/19 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:07:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5746 (0x1672)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Aug 26 05:22:12 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A32A93504D04535B25185B05985C88A74ABD20AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3f:e3:aa:54:21:45:df:6d:d9:2c:a9:b7:46:
84:4a:3a:df:ee:7d:e6:2a:0a:9e:88:cc:a0:86:3d:
68:22:0b:7d:8f:6c:6a:8a:bd:20:81:ea:bd:2c:6d:
e1:e6:c0:37:40:13:ab:b7:99:fd:9d:ea:a8:f9:48:
b4:a4:15:3a:46:e5:8a:dd:75:c3:44:60:dd:ac:f1:
f2:72:c4:77:14:90:80:c5:ce:dc:ec:1d:69:2a:21:
ca:d7:cd:03:71:57:8f:63:b5:06:68:8b:96:38:cb:
31:40:b7:eb:e9:4d:2d:f5:74:8e:32:e7:ad:8e:cd:
f8:c8:97:3a:7c:46:0a:3c:0a:5c:24:09:57:23:9a:
4c:41:c9:c3:b2:00:cd:e2:16:88:1a:83:e6:e5:a1:
ca:2d:54:0a:60:fa:a0:42:a7:57:89:9f:a0:ef:46:
28:13:2a:1f:4c:1f:c4:a7:42:f4:28:94:39:85:96:
8d:0f:f3:ed:ac:1c:f6:78:9b:d9:4c:fd:f9:74:73:
e2:35:bb:ea:65:85:2a:a9:62:a9:8f:24:36:f8:86:
4f:c6:a0:3a:85:85:b2:33:08:be:4a:87:ad:e0:9b:
16:b3:8a:12:a7:82:19:b0:bb:4d:d7:08:19:55:3a:
23:29:53:24:01:bd:56:a3:2c:72:f8:33:fd:02:75:
fd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:2A:93:50:4D:04:53:5B:25:18:5B:05:98:5C:88:A7:4A:BD:20:AB
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/oyqTUE0EU1slGFsFmFyIp0q9IKs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.78.160.0/19
Signature Algorithm: sha256WithRSAEncryption
c9:e7:68:70:4f:af:f4:92:fd:12:28:34:8f:41:2a:ef:a5:fc:
fa:2c:fd:6f:d9:4b:f0:36:7e:e9:a1:68:55:3f:4e:21:20:32:
d2:79:fc:d9:59:fa:f9:b8:60:9b:04:26:44:8a:99:18:c1:bb:
c0:fd:f3:fe:ea:56:d0:83:80:ca:1c:54:e4:d3:51:88:47:30:
87:5e:36:f5:37:e9:f3:58:46:ea:bf:01:52:14:7a:09:4a:be:
40:a2:91:2a:c1:a6:8c:87:b7:d0:cb:48:80:37:d5:24:8d:81:
27:90:7f:89:43:c8:3c:22:db:c9:92:72:57:37:fa:99:35:48:
3c:2a:98:ea:53:ad:d8:23:92:02:91:22:32:9e:e1:d6:ae:d0:
0c:c7:64:f7:16:da:a4:6d:ba:7e:42:b7:bc:a9:5e:1c:73:ce:
bd:ce:d6:97:5d:c5:71:9a:3f:18:ff:3b:11:70:cd:49:31:67:
a9:c4:fc:cf:5d:63:8f:d4:25:0c:f5:5c:61:dc:59:6c:3d:10:
27:69:a1:14:a7:7f:49:c3:33:c2:83:7f:3e:7d:9b:86:75:b3:
2f:d0:51:25:8e:d1:0e:8e:40:e4:39:ed:75:ec:68:35:8d:29:
c6:b3:c3:4b:89:3f:55:44:3f:9f:8c:fa:e3:84:1d:9b:3d:c1:
cb:76:3a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:37:49 2025 by rpki-client