Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/lEV1Yic_4E4fKms3ISop87l31UM.roa
File: lEV1Yic_4E4fKms3ISop87l31UM.roa (raw, json)
Hash identifier: u6BtPJKXOkhId5st3HjbG8iSwiDBAR17tbXCLketgBM=
Subject key identifier: 94:45:75:62:27:3F:E0:4E:1F:2A:6B:37:21:2A:29:F3:B9:77:D5:43
Certificate issuer: /CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A
Certificate serial: 0143
Authority key identifier: EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/lEV1Yic_4E4fKms3ISop87l31UM.roa
Signing time: Tue 19 Nov 2024 08:19:59 +0000
ROA not before: Tue 19 Nov 2024 08:19:59 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 152618
IP address blocks: 202.160.80.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Dec 2024 01:41:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 323 (0x143)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A
Validity
Not Before: Nov 19 08:19:59 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=94457562273FE04E1F2A6B37212A29F3B977D543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e3:62:36:3e:21:41:fc:6e:ac:db:28:10:fd:
72:ba:0a:26:e5:f9:5d:83:ab:a2:cb:a9:f4:29:6e:
df:31:88:56:ae:0c:c8:b6:95:c2:4d:83:0f:17:69:
cc:98:b9:7f:3a:67:7d:60:62:0a:3f:7c:63:5e:80:
e2:b0:55:d9:ac:8f:8d:cd:e6:9f:ce:d7:33:2a:12:
5d:65:2b:e8:46:1a:b0:49:f3:20:c0:86:11:23:a2:
41:81:79:d6:b8:fe:8e:da:b4:8d:d3:50:ca:27:4f:
b5:90:94:35:eb:67:71:fa:58:84:7f:03:23:b5:46:
f2:41:05:d4:b6:ce:c0:69:59:bb:d3:37:d0:3d:03:
0d:8e:7d:c3:9e:d8:03:1b:cb:5a:e1:32:1d:29:4d:
31:df:72:9d:4e:51:4d:0a:29:b9:6d:68:98:9b:59:
ea:9e:45:ff:1c:63:12:90:32:c6:cf:d3:ea:34:bc:
a5:11:79:02:5b:f7:0f:55:c6:71:01:5b:a0:43:c7:
35:d5:c9:76:e4:e1:1c:43:3b:a9:02:48:a3:a6:bf:
d0:49:93:b8:63:be:43:73:78:65:40:a8:2a:a3:3f:
b6:03:bd:69:d9:1f:b4:a8:d1:9b:50:ec:1f:81:3f:
00:30:d7:34:2b:09:e8:f9:28:18:b2:ce:3a:64:21:
98:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:45:75:62:27:3F:E0:4E:1F:2A:6B:37:21:2A:29:F3:B9:77:D5:43
X509v3 Authority Key Identifier:
keyid:EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/lEV1Yic_4E4fKms3ISop87l31UM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.160.80.0/21
Signature Algorithm: sha256WithRSAEncryption
4d:e6:62:4b:c4:24:8b:5e:8a:5a:f2:46:40:6d:27:55:b8:d1:
52:e0:3e:72:7c:36:33:45:1e:07:e4:71:83:50:17:d9:46:3f:
21:6f:e6:37:b6:f5:73:89:e8:6d:62:d3:9b:6d:db:ae:bd:6e:
c7:6a:78:84:69:fd:28:f9:f5:74:83:f6:e9:3a:ab:2c:aa:78:
e8:93:1d:20:ab:71:5d:d8:aa:11:18:b2:be:1c:a8:eb:00:d3:
2d:56:0f:dd:12:5a:bb:2d:60:49:90:aa:ce:46:8a:6a:b1:19:
55:2d:cd:63:29:c0:32:fa:bd:5e:ab:a2:eb:3d:dc:3a:e7:6d:
fa:05:5a:1b:d6:e5:b5:e9:cc:c6:4d:89:39:9a:71:64:28:6a:
d1:07:fa:71:76:a9:10:05:e0:38:99:47:b9:d3:9d:12:03:3d:
3a:ba:c8:2d:b0:2d:a6:1a:11:f8:6a:44:2c:f6:25:ac:70:72:
c0:ef:c0:d6:2a:a5:0e:05:58:e0:bf:e8:29:de:38:7f:1a:ef:
f5:e3:54:e2:a6:43:3c:d7:24:e7:bf:8b:7b:16:af:e1:0c:a0:
e3:3f:5c:96:14:e1:17:05:9c:f6:eb:13:30:35:cf:63:ba:04:
a5:7f:4a:d0:af:32:cd:26:63:04:ff:dd:00:a3:1c:97:87:8c:
49:18:0a:84
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUNE
MkZEQzM4NTIyQTc0QTQyMkRFN0JEMUMwMjZENTVFMDhEOUU5QTAeFw0yNDExMTkw
ODE5NTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk0NDU3NTYyMjczRkUw
NEUxRjJBNkIzNzIxMkEyOUYzQjk3N0Q1NDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC142I2PiFB/G6s2ygQ/XK6Cibl+V2Dq6LLqfQpbt8xiFauDMi2
lcJNgw8XacyYuX86Z31gYgo/fGNegOKwVdmsj43N5p/O1zMqEl1lK+hGGrBJ8yDA
hhEjokGBeda4/o7atI3TUMonT7WQlDXrZ3H6WIR/AyO1RvJBBdS2zsBpWbvTN9A9
Aw2OfcOe2AMby1rhMh0pTTHfcp1OUU0KKbltaJibWeqeRf8cYxKQMsbP0+o0vKUR
eQJb9w9VxnEBW6BDxzXVyXbk4RxDO6kCSKOmv9BJk7hjvkNzeGVAqCqjP7YDvWnZ
H7So0ZtQ7B+BPwAw1zQrCej5KBiyzjpkIZjfAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUlEV1Yic/4E4fKms3ISop87l31UMwHwYDVR0jBBgwFoAU7NL9w4Uip0pCLee9
HAJtVeCNnpowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFBTSUxL
RVJBLzdOTDl3NFVpcDBwQ0xlZTlIQUp0VmVDTm5wby5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvN05MOXc0VWlwMHBDTGVlOUhBSnRWZUNObnBvLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFBTSUxLRVJBL2xFVjFZaWNfNEU0
ZkttczNJU29wODdsMzFVTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAPKoFAwDQYJKoZIhvcNAQELBQADggEBAE3mYkvEJIteilryRkBtJ1W40VLg
PnJ8NjNFHgfkcYNQF9lGPyFv5je29XOJ6G1i05tt2669bsdqeIRp/Sj59XSD9uk6
qyyqeOiTHSCrcV3YqhEYsr4cqOsA0y1WD90SWrstYEmQqs5GimqxGVUtzWMpwDL6
vV6rous93DrnbfoFWhvW5bXpzMZNiTmacWQoatEH+nF2qRAF4DiZR7nTnRIDPTq6
yC2wLaYaEfhqRCz2JaxwcsDvwNYqpQ4FWOC/6CneOH8a7/XjVOKmQzzXJOe/i3sW
r+EMoOM/XJYU4RcFnPbrEzA1z2O6BKV/StCvMs0mYwT/3QCjHJeHjEkYCoQ=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:19:32 2025 by rpki-client