Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NKBNET/sRg2XlieAO2a9AX6D1Nl9IqEvqA.roa
File: sRg2XlieAO2a9AX6D1Nl9IqEvqA.roa (raw, json)
Hash identifier: mm1H1t+bgtqAtSukSKbWzeIs5R0FrD0rZH27ftDyp6s=
Subject key identifier: B1:18:36:5E:58:9E:00:ED:9A:F4:05:FA:0F:53:65:F4:8A:84:BE:A0
Certificate issuer: /CN=8051F2ECEFC242E9AF9F1E454A4FB796591B8DAB
Certificate serial: 12F9
Authority key identifier: 80:51:F2:EC:EF:C2:42:E9:AF:9F:1E:45:4A:4F:B7:96:59:1B:8D:AB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/sRg2XlieAO2a9AX6D1Nl9IqEvqA.roa
Signing time: Mon 26 Aug 2024 05:23:10 +0000
ROA not before: Mon 26 Aug 2024 05:23:10 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 7482
IP address blocks: 2403:b340::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4857 (0x12f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8051F2ECEFC242E9AF9F1E454A4FB796591B8DAB
Validity
Not Before: Aug 26 05:23:10 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=B118365E589E00ED9AF405FA0F5365F48A84BEA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:36:de:57:b5:8b:61:99:80:6d:ef:5f:50:aa:
50:93:09:89:91:10:da:52:24:9e:3d:e7:f6:d5:8d:
6c:57:64:ae:e2:18:3f:c0:97:46:34:1c:0b:e2:7f:
ce:89:67:d7:5b:30:67:f5:8e:e5:4a:9b:f2:aa:d1:
d6:ee:f9:4c:3b:1b:43:f9:13:8e:9d:b5:14:2b:2d:
c4:a6:dc:19:2f:4d:df:6c:ab:e6:db:4c:d9:a4:b9:
80:02:51:da:71:17:d2:e2:c0:5c:db:8f:ff:d8:b8:
7a:b0:11:6c:2d:a0:32:85:91:eb:74:a8:88:ce:f1:
92:5e:80:3b:c6:cf:de:eb:22:5d:3c:3a:37:cb:a8:
a1:2e:0d:e4:cf:94:27:b2:6d:21:db:84:5e:5c:c0:
72:23:6c:94:64:da:df:96:5d:fd:dd:a0:32:4c:d6:
f2:16:22:64:59:8b:c4:3f:70:e3:14:5e:61:07:6c:
53:78:69:1a:c9:35:5f:98:73:aa:df:80:0e:2e:0d:
97:43:6e:55:81:33:ff:96:37:5d:1d:ab:49:e2:84:
dc:f3:a4:2e:5b:03:fb:f9:ea:a2:be:9e:a7:f1:22:
32:06:87:b1:e5:40:a5:9c:35:f4:4e:0d:a7:39:30:
c0:86:46:ec:d4:9d:87:07:ed:da:b6:92:20:a2:d9:
6a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:18:36:5E:58:9E:00:ED:9A:F4:05:FA:0F:53:65:F4:8A:84:BE:A0
X509v3 Authority Key Identifier:
keyid:80:51:F2:EC:EF:C2:42:E9:AF:9F:1E:45:4A:4F:B7:96:59:1B:8D:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/gFHy7O_CQumvnx5FSk-3llkbjas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/sRg2XlieAO2a9AX6D1Nl9IqEvqA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:b340::/32
Signature Algorithm: sha256WithRSAEncryption
09:33:f3:10:7b:34:fb:f6:49:f8:5f:d5:61:b1:b6:c8:f6:f2:
bf:de:66:66:bf:46:13:c5:53:fb:bf:69:4f:69:0c:78:3f:ec:
fd:9d:81:94:04:e5:82:ef:6b:fb:95:a9:69:bf:7d:f2:a2:3a:
b7:70:f2:59:36:da:8b:23:c2:b9:f0:f9:6d:7a:9e:f5:1e:21:
b4:e4:5e:3f:e3:f1:43:8b:56:26:91:c1:70:a9:1d:4d:46:34:
b5:39:4b:3f:e3:21:f0:ee:83:61:11:e4:f0:9e:95:d9:fa:a4:
df:34:41:43:48:d4:79:8c:89:e0:00:e8:0b:23:33:8a:e6:98:
36:9e:74:74:a2:65:85:8b:83:18:c5:2d:6b:92:77:d3:0d:21:
e8:9c:d4:f6:9b:c0:1f:f8:d1:15:b3:5e:80:a2:84:fa:ba:91:
4d:61:d6:43:a5:3d:c6:25:f2:77:49:c0:74:22:3c:18:e7:fa:
4d:6e:f3:ca:88:af:88:e8:85:8c:9a:ba:00:58:9d:26:21:5c:
23:2f:4e:d7:bb:b9:21:2a:28:0b:59:d0:7e:35:50:f8:ba:13:
b1:74:0c:6e:ea:eb:96:57:f9:ce:70:4d:c1:e1:26:dd:80:f7:
d4:d1:a8:b8:7a:a5:ff:39:de:15:60:0b:03:02:2d:b9:b1:85:
38:50:50:b8
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICEvkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODA1
MUYyRUNFRkMyNDJFOUFGOUYxRTQ1NEE0RkI3OTY1OTFCOERBQjAeFw0yNDA4MjYw
NTIzMTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEIxMTgzNjVFNTg5RTAw
RUQ5QUY0MDVGQTBGNTM2NUY0OEE4NEJFQTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRNt5XtYthmYBt719QqlCTCYmRENpSJJ495/bVjWxXZK7iGD/A
l0Y0HAvif86JZ9dbMGf1juVKm/Kq0dbu+Uw7G0P5E46dtRQrLcSm3BkvTd9sq+bb
TNmkuYACUdpxF9LiwFzbj//YuHqwEWwtoDKFket0qIjO8ZJegDvGz97rIl08OjfL
qKEuDeTPlCeybSHbhF5cwHIjbJRk2t+WXf3doDJM1vIWImRZi8Q/cOMUXmEHbFN4
aRrJNV+Yc6rfgA4uDZdDblWBM/+WN10dq0nihNzzpC5bA/v56qK+nqfxIjIGh7Hl
QKWcNfRODac5MMCGRuzUnYcH7dq2kiCi2WrzAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUsRg2XlieAO2a9AX6D1Nl9IqEvqAwHwYDVR0jBBgwFoAUgFHy7O/CQumvnx5F
Sk+3llkbjaswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTktCTkVU
L2dGSHk3T19DUXVtdm54NUZTay0zbGxrYmphcy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvZ0ZIeTdPX0NRdW12bng1RlNrLTNsbGtiamFzLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvTktCTkVUL3NSZzJYbGllQU8yYTlBWDZE
MU5sOUlxRXZxQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAk
A7NAMA0GCSqGSIb3DQEBCwUAA4IBAQAJM/MQezT79kn4X9VhsbbI9vK/3mZmv0YT
xVP7v2lPaQx4P+z9nYGUBOWC72v7lalpv33yojq3cPJZNtqLI8K58Pltep71HiG0
5F4/4/FDi1YmkcFwqR1NRjS1OUs/4yHw7oNhEeTwnpXZ+qTfNEFDSNR5jIngAOgL
IzOK5pg2nnR0omWFi4MYxS1rknfTDSHonNT2m8Af+NEVs16AooT6upFNYdZDpT3G
JfJ3ScB0IjwY5/pNbvPKiK+I6IWMmroAWJ0mIVwjL07Xu7khKigLWdB+NVD4uhOx
dAxu6uuWV/nOcE3B4SbdgPfU0ai4eqX/Od4VYAsDAi25sYU4UFC4
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:31:59 2025 by rpki-client