Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/xCJmTuy0YhTMxPN56UZqHhfvdWs.roa
File: xCJmTuy0YhTMxPN56UZqHhfvdWs.roa (raw, json)
Hash identifier: fXm+Qh24TYcvyQmyBt5tKlcpg71ro4ce2yeqJTjS7rA=
Subject key identifier: C4:22:66:4E:EC:B4:62:14:CC:C4:F3:79:E9:46:6A:1E:17:EF:75:6B
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 15F7
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/xCJmTuy0YhTMxPN56UZqHhfvdWs.roa
Signing time: Mon 26 Aug 2024 05:21:38 +0000
ROA not before: Mon 26 Aug 2024 05:21:38 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9919
IP address blocks: 218.210.0.0/15 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5623 (0x15f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Aug 26 05:21:38 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C422664EECB46214CCC4F379E9466A1E17EF756B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b9:4a:e9:b2:15:07:7f:21:2d:29:72:22:3f:
e6:6e:d9:76:f9:eb:61:96:f1:53:51:53:5a:fd:01:
7c:82:14:fd:8f:c4:23:48:b7:03:b1:41:70:21:e1:
49:44:a7:21:65:89:c3:1a:93:ac:95:7e:5f:d4:cf:
5b:5c:3d:0b:02:0d:24:1c:40:38:d5:d1:09:ae:7b:
ec:bc:f8:7d:19:a1:6d:fb:18:72:39:33:ad:b5:eb:
f4:e2:1d:cb:e4:0c:e4:3a:c5:9d:77:ad:c2:20:7c:
f8:1a:5d:42:5b:15:a0:78:6f:28:f0:69:60:1c:a2:
92:97:a0:bb:96:6c:0a:43:3b:06:c4:c8:35:e7:b9:
df:b9:61:77:e8:56:b7:3f:e6:9f:37:85:60:fc:a6:
a1:47:de:73:ca:d9:8d:ad:87:8e:f4:0b:29:68:91:
21:a2:fc:7e:b4:b6:86:71:b1:73:f9:8a:f2:ae:f3:
0b:f8:e7:a0:ec:26:d1:ca:c9:9b:bb:b4:90:f4:bd:
9a:97:e0:db:ef:68:9d:5f:b3:24:cb:7e:b4:91:f9:
16:06:ce:de:a5:be:38:83:44:e3:1c:14:5d:15:49:
49:8e:e6:70:9e:75:e1:dd:fa:89:41:78:a1:2d:f0:
c6:4a:42:f5:55:6b:9e:0e:e4:0d:30:d0:9b:68:80:
e3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:22:66:4E:EC:B4:62:14:CC:C4:F3:79:E9:46:6A:1E:17:EF:75:6B
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/xCJmTuy0YhTMxPN56UZqHhfvdWs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.210.0.0/15
Signature Algorithm: sha256WithRSAEncryption
6b:59:2e:27:f5:de:2a:80:37:5b:b7:65:26:80:c7:fc:22:2b:
51:70:12:58:e6:6b:6b:4a:17:cb:67:30:5a:f8:92:b0:eb:ef:
7b:a1:95:73:47:88:56:df:74:b6:25:fe:77:78:9c:92:18:e3:
a8:ee:74:ac:85:13:51:d6:0d:2f:ee:78:64:c6:3b:f3:04:01:
b4:e3:a0:f9:49:f1:70:a8:d8:5e:e7:b0:5e:0f:93:47:22:ee:
08:68:c7:e7:09:8c:24:84:65:f8:30:35:40:fb:e5:56:cd:1a:
43:6c:63:89:68:81:79:de:b6:0e:ea:c7:3e:c2:79:32:8d:fe:
86:35:f5:76:d5:8e:6a:91:03:4f:ab:ce:1f:61:39:a9:de:83:
4b:47:e9:61:bc:8c:71:86:4f:72:3b:55:31:bd:9f:a6:cc:94:
de:10:2d:ce:8d:15:df:4b:85:46:7d:71:32:fa:7d:54:c4:3a:
5f:ce:ff:05:44:4d:ab:48:a0:81:43:f5:fe:c1:f3:49:a0:35:
50:a6:51:31:83:c9:2e:59:3b:7b:40:bd:0a:e8:e0:36:2e:36:
f8:df:5f:a1:f0:03:24:00:1a:78:f6:e5:f6:13:c5:8c:fd:e5:
78:b7:b2:c7:f8:c4:78:e1:84:b3:b4:13:0b:1a:27:ac:69:32:
08:a0:3a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:37:44 2025 by rpki-client