Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/YH8dYAWqCwEvSNIBYDQUnr_ZVfw.roa
File: YH8dYAWqCwEvSNIBYDQUnr_ZVfw.roa (raw, json)
Hash identifier: /qT20B61u7BugZW8Ye9ykR/aqQBy4UFvp4aah6rXNAs=
Subject key identifier: 60:7F:1D:60:05:AA:0B:01:2F:48:D2:01:60:34:14:9E:BF:D9:55:FC
Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Certificate serial: 0CD7
Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/YH8dYAWqCwEvSNIBYDQUnr_ZVfw.roa
Signing time: Mon 26 Aug 2024 05:27:36 +0000
ROA not before: Mon 26 Aug 2024 05:27:36 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17709
IP address blocks: 59.102.128.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:13:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3287 (0xcd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Validity
Not Before: Aug 26 05:27:36 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=607F1D6005AA0B012F48D2016034149EBFD955FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:31:dc:59:e2:8f:56:93:29:42:d1:00:80:25:
f3:de:25:f1:ee:2d:60:7d:4e:b6:f6:48:01:a6:55:
c8:e0:17:00:ff:8b:8e:61:4c:a4:b9:11:a6:e5:0d:
39:e5:09:96:c1:9f:e3:1e:0f:5e:0b:e1:e0:63:3b:
8e:40:43:2e:b9:68:27:83:d5:c9:07:55:97:6f:7b:
36:6b:39:11:b9:7c:5d:76:0d:c1:af:3a:6b:fb:2e:
7b:1f:c7:3d:d3:02:39:38:dd:13:e3:46:8c:5f:c4:
73:34:ff:0c:02:38:82:26:6a:9f:6d:41:60:0f:ad:
9b:2c:93:a0:e4:68:26:ed:53:a7:5a:81:b6:a1:0c:
01:2d:55:e1:be:5f:47:be:ce:c2:72:4e:8b:18:b4:
95:43:88:ca:80:f1:13:df:eb:ca:f9:72:42:86:2b:
55:dd:2c:d8:88:89:e9:a2:3a:3f:2f:9b:6d:88:0b:
5e:17:57:72:f6:8d:4d:43:1e:87:c0:2f:09:41:e8:
2d:77:a9:de:b1:ed:16:b3:da:55:f3:39:53:03:fa:
08:b6:60:83:ac:69:5d:37:b8:50:61:ce:44:b1:98:
d4:be:22:b8:e6:d6:0f:6b:33:4d:36:a2:ee:8e:e5:
63:82:88:2d:56:a1:82:02:dc:22:38:48:6e:40:cf:
4b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7F:1D:60:05:AA:0B:01:2F:48:D2:01:60:34:14:9E:BF:D9:55:FC
X509v3 Authority Key Identifier:
keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/YH8dYAWqCwEvSNIBYDQUnr_ZVfw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
59.102.128.0/21
Signature Algorithm: sha256WithRSAEncryption
9d:44:e2:3a:1a:38:0e:e2:a7:eb:99:ae:9f:c0:11:c9:cd:dd:
66:45:aa:b5:c5:ca:8b:76:bd:0a:d6:b3:f1:ea:d8:74:d0:99:
ac:82:14:a1:49:87:ee:66:a4:20:fb:8e:c3:80:33:6c:af:37:
8d:c7:6b:45:e5:8e:ae:40:50:a9:1d:14:8f:7c:cf:f5:7e:90:
a4:3b:b4:e4:bf:45:71:e2:f1:c1:8a:ff:b7:6d:e3:89:f3:24:
0f:b6:6a:32:60:76:7e:b2:3f:45:df:34:9d:c0:01:91:c0:dc:
f3:e9:8b:2f:65:2d:21:7d:56:61:f3:98:8e:ff:cf:02:a1:11:
30:a1:72:a7:93:8e:e4:4d:90:48:fb:0b:3b:90:a8:4f:99:87:
8f:ba:ed:0e:1a:e6:27:6c:8a:fc:66:ff:b1:2f:b3:2f:67:8f:
fa:b3:ec:0e:0a:05:b9:ff:ba:81:27:62:f9:bf:90:f7:47:88:
80:d9:db:0e:dd:6c:c7:40:a8:a4:67:68:61:47:64:94:1a:ba:
51:0c:b2:af:90:32:ce:5c:36:9a:e2:65:03:f5:2a:aa:5e:71:
29:2b:7f:7d:81:2f:9c:5d:a1:18:9d:fa:b9:88:ff:1d:c1:38:
f8:64:4a:ab:41:23:94:1d:c7:82:2b:f2:49:15:40:bb:e2:11:
39:28:73:90
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICDNcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMy
NzIwRUIwQkVBMDA1QzNFREU1NzRFMzFDMEFCNzU2M0ZBMENDNzAeFw0yNDA4MjYw
NTI3MzZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYwN0YxRDYwMDVBQTBC
MDEyRjQ4RDIwMTYwMzQxNDlFQkZEOTU1RkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCiMdxZ4o9WkylC0QCAJfPeJfHuLWB9Trb2SAGmVcjgFwD/i45h
TKS5EablDTnlCZbBn+MeD14L4eBjO45AQy65aCeD1ckHVZdvezZrORG5fF12DcGv
Omv7Lnsfxz3TAjk43RPjRoxfxHM0/wwCOIImap9tQWAPrZssk6DkaCbtU6dagbah
DAEtVeG+X0e+zsJyTosYtJVDiMqA8RPf68r5ckKGK1XdLNiIiemiOj8vm22IC14X
V3L2jU1DHofALwlB6C13qd6x7Raz2lXzOVMD+gi2YIOsaV03uFBhzkSxmNS+Irjm
1g9rM002ou6O5WOCiC1WoYIC3CI4SG5Az0vtAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUYH8dYAWqCwEvSNIBYDQUnr/ZVfwwHwYDVR0jBBgwFoAUgycg6wvqAFw+3ldO
McCrdWP6DMcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEJDT00v
Z3ljZzZ3dnFBRnctM2xkT01jQ3JkV1A2RE1jLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9neWNnNnd2cUFGdy0zbGRPTWNDcmRXUDZETWMuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQkNPTS9ZSDhkWUFXcUN3RXZTTklCWURR
VW5yX1pWZncucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDO2aA
MA0GCSqGSIb3DQEBCwUAA4IBAQCdROI6GjgO4qfrma6fwBHJzd1mRaq1xcqLdr0K
1rPx6th00JmsghShSYfuZqQg+47DgDNsrzeNx2tF5Y6uQFCpHRSPfM/1fpCkO7Tk
v0Vx4vHBiv+3beOJ8yQPtmoyYHZ+sj9F3zSdwAGRwNzz6YsvZS0hfVZh85iO/88C
oREwoXKnk47kTZBI+ws7kKhPmYePuu0OGuYnbIr8Zv+xL7MvZ4/6s+wOCgW5/7qB
J2L5v5D3R4iA2dsO3WzHQKikZ2hhR2SUGrpRDLKvkDLOXDaa4mUD9SqqXnEpK399
gS+cXaEYnfq5iP8dwTj4ZEqrQSOUHceCK/JJFUC74hE5KHOQ
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:39:01 2025 by rpki-client