Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNTT/E5lJ0N6C_r1Z1ryv-D1Xemr7LgM.roa
File: E5lJ0N6C_r1Z1ryv-D1Xemr7LgM.roa (raw, json)
Hash identifier: zUsYlO9PS4jer/jm0gDMzSP5xrsoYtcHDa03P+CNe4I=
Subject key identifier: 13:99:49:D0:DE:82:FE:BD:59:D6:BC:AF:F8:3D:57:7A:6A:FB:2E:03
Certificate issuer: /CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214
Certificate serial: 0C72
Authority key identifier: 9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/E5lJ0N6C_r1Z1ryv-D1Xemr7LgM.roa
Signing time: Mon 26 Aug 2024 05:32:40 +0000
ROA not before: Mon 26 Aug 2024 05:32:40 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18018
IP address blocks: 122.255.94.0/28 maxlen: 28
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:50:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3186 (0xc72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214
Validity
Not Before: Aug 26 05:32:40 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=139949D0DE82FEBD59D6BCAFF83D577A6AFB2E03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:db:cb:40:0f:da:31:ea:23:3b:81:6b:56:61:
94:5e:f3:bc:26:04:25:33:2f:aa:82:42:33:a2:49:
81:73:4b:bd:0e:e1:61:66:a4:b2:07:34:00:cc:36:
bf:2a:1b:49:55:ef:5c:e0:9e:ca:70:1e:20:58:2b:
10:0c:54:fa:ad:88:20:28:cf:de:be:e5:b0:f6:e9:
cf:a3:1b:27:cb:5f:3a:4b:31:c5:fd:c9:b5:99:e8:
60:d6:e6:22:0a:06:31:4e:d9:92:d7:30:30:ac:88:
e9:73:b7:73:ca:fa:9f:71:2d:eb:f7:09:26:01:f3:
3f:58:f8:d9:16:66:32:5e:4f:af:f9:c3:29:07:02:
a7:11:c8:77:bb:26:e8:3a:82:6a:13:e8:9b:95:51:
8d:a9:87:3a:cd:98:a4:1f:01:12:6e:19:1b:af:be:
3f:bd:d6:6f:7c:64:d0:89:20:be:28:d4:9d:70:eb:
4b:d9:8e:36:2d:6c:e7:50:c0:8e:5f:ca:d9:a5:be:
34:cd:fa:3a:c5:f0:b9:1a:d3:b0:18:5b:bf:37:43:
47:2f:b8:7d:87:55:63:ba:c5:25:3a:50:7a:7c:5a:
33:3f:00:63:8f:e4:d5:77:9e:2e:4b:19:8e:74:2d:
33:2d:0b:dd:18:dd:65:93:8b:e1:34:56:8e:0f:16:
2f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:99:49:D0:DE:82:FE:BD:59:D6:BC:AF:F8:3D:57:7A:6A:FB:2E:03
X509v3 Authority Key Identifier:
keyid:9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/E5lJ0N6C_r1Z1ryv-D1Xemr7LgM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.255.94.0/28
Signature Algorithm: sha256WithRSAEncryption
5b:ad:82:aa:48:53:4d:6c:c8:58:29:50:c1:d3:1b:89:6e:ed:
25:02:a0:c8:bc:14:9f:8c:44:79:4d:78:04:8e:e3:ab:20:96:
e2:9c:ac:07:f4:51:e4:87:54:20:78:eb:b0:79:70:df:f8:5c:
5d:52:55:38:6e:56:b3:ee:60:8c:6c:d7:2c:78:2d:50:47:68:
99:05:c8:06:fa:37:42:77:91:98:88:50:1a:0e:04:87:69:da:
8d:d7:41:d2:fe:5f:2d:0c:b5:97:7c:8d:c6:3d:38:98:cc:33:
f7:79:2f:3a:3d:94:ed:1b:39:9f:f5:32:20:3a:57:86:24:c1:
f9:82:cf:76:be:11:fe:2a:d3:fe:42:78:39:ac:75:b8:7f:40:
ee:62:42:e2:8e:dd:a6:b2:d0:f3:7f:09:c3:20:aa:0e:22:b8:
d3:ec:43:2a:26:8b:8f:da:72:c4:61:db:11:0b:a6:e2:3e:ee:
16:fd:30:bc:0c:83:e0:cd:cf:33:b0:0d:b3:2c:75:9d:05:3c:
cf:67:43:65:d4:82:c5:9c:53:c1:03:d4:c2:d7:a2:8c:a3:61:
63:b5:c8:09:2f:20:3c:d7:b0:66:96:e8:4b:ab:4c:b6:d5:01:
16:97:53:7c:d0:ff:68:ae:fa:a3:23:94:dc:3a:85:d8:4f:90:
bb:6f:07:44
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICDHIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUUy
Njk3RkE3MDI1MkY4M0Y0MUQxMjFFQzBCNUNCNDU4QjZGRjIxNDAeFw0yNDA4MjYw
NTMyNDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDEzOTk0OUQwREU4MkZF
QkQ1OUQ2QkNBRkY4M0Q1NzdBNkFGQjJFMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCz28tAD9ox6iM7gWtWYZRe87wmBCUzL6qCQjOiSYFzS70O4WFm
pLIHNADMNr8qG0lV71zgnspwHiBYKxAMVPqtiCAoz96+5bD26c+jGyfLXzpLMcX9
ybWZ6GDW5iIKBjFO2ZLXMDCsiOlzt3PK+p9xLev3CSYB8z9Y+NkWZjJeT6/5wykH
AqcRyHe7Jug6gmoT6JuVUY2phzrNmKQfARJuGRuvvj+91m98ZNCJIL4o1J1w60vZ
jjYtbOdQwI5fytmlvjTN+jrF8Lka07AYW783Q0cvuH2HVWO6xSU6UHp8WjM/AGOP
5NV3ni5LGY50LTMtC90Y3WWTi+E0Vo4PFi+xAgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQUE5lJ0N6C/r1Z1ryv+D1Xemr7LgMwHwYDVR0jBBgwFoAUniaX+nAlL4P0HRIe
wLXLRYtv8hQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOVFQv
bmlhWC1uQWxMNFAwSFJJZXdMWExSWXR2OGhRLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9uaWFYLW5BbEw0UDBIUklld0xYTFJZdHY4aFEuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05UVC9FNWxKME42Q19yMVoxcnl2LUQx
WGVtcjdMZ00ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEev9e
ADANBgkqhkiG9w0BAQsFAAOCAQEAW62CqkhTTWzIWClQwdMbiW7tJQKgyLwUn4xE
eU14BI7jqyCW4pysB/RR5IdUIHjrsHlw3/hcXVJVOG5Ws+5gjGzXLHgtUEdomQXI
Bvo3QneRmIhQGg4Eh2najddB0v5fLQy1l3yNxj04mMwz93kvOj2U7Rs5n/UyIDpX
hiTB+YLPdr4R/irT/kJ4Oax1uH9A7mJC4o7dprLQ838JwyCqDiK40+xDKiaLj9py
xGHbEQum4j7uFv0wvAyD4M3PM7ANsyx1nQU8z2dDZdSCxZxTwQPUwteijKNhY7XI
CS8gPNewZpboS6tMttUBFpdTfND/aK76oyOU3DqF2E+Qu28HRA==
-----END CERTIFICATE-----
Generated at Thu Apr 17 07:45:24 2025 by rpki-client