Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ARCHE/NLWWs7mSUjo-r4cxWwFfexxEZbM.roa
File: NLWWs7mSUjo-r4cxWwFfexxEZbM.roa (raw, json)
Hash identifier: X2yKhKXK4HqDbGO5btwZvRy8rDlRJVSgmZAXwuh+hDM=
Subject key identifier: 34:B5:96:B3:B9:92:52:3A:3E:AF:87:31:5B:01:5F:7B:1C:44:65:B3
Certificate issuer: /CN=EAB250D058FACBEB3EA0D16B53865061339074B6
Certificate serial: ED
Authority key identifier: EA:B2:50:D0:58:FA:CB:EB:3E:A0:D1:6B:53:86:50:61:33:90:74:B6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/6rJQ0Fj6y-s-oNFrU4ZQYTOQdLY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ARCHE/NLWWs7mSUjo-r4cxWwFfexxEZbM.roa
Signing time: Thu 09 Jan 2025 15:34:13 +0000
ROA not before: Thu 09 Jan 2025 15:34:13 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 151188
IP address blocks: 157.15.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 20:34:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237 (0xed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EAB250D058FACBEB3EA0D16B53865061339074B6
Validity
Not Before: Jan 9 15:34:13 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=34B596B3B992523A3EAF87315B015F7B1C4465B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:77:3a:3d:74:0a:50:88:e5:20:ab:b3:25:51:
27:92:2d:e5:4c:04:a3:0e:ba:52:5b:b6:83:c5:7d:
fa:4f:42:c1:2f:97:3f:23:10:12:d1:21:a7:e8:73:
8b:36:59:6c:f3:0b:21:cd:4a:0a:d1:84:70:d4:ab:
2f:24:3f:47:e5:b5:84:45:b8:ec:06:1f:67:bb:97:
8d:32:89:5e:27:2e:e7:6d:63:85:43:14:bb:b9:21:
2d:1b:58:84:c9:2a:82:5c:0a:6d:b4:11:f7:17:e3:
66:a3:b0:99:22:0f:9b:21:11:e2:8b:f7:64:15:f8:
d7:58:75:16:27:cd:58:b3:38:64:fe:a3:ad:ea:0f:
c3:5e:7c:f9:9e:0b:a9:71:d4:e7:5a:14:e8:20:7b:
ac:d9:9c:a4:c1:de:bd:0e:53:99:0d:11:fb:83:99:
af:71:fd:d6:a6:b9:49:05:fb:77:ef:fa:e1:c9:b3:
bc:a6:84:92:21:f4:4e:0e:cb:02:0c:77:64:66:99:
1e:e2:d6:53:49:5b:fd:b7:62:dc:0b:78:46:d8:f1:
6b:7f:2a:18:2f:0f:54:d4:80:18:0e:c6:7f:71:fa:
92:23:2a:ab:f2:4a:bb:bd:67:9f:c7:23:a3:c0:cb:
a2:12:43:c6:ed:52:c8:04:79:04:ef:b5:49:a6:2b:
75:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B5:96:B3:B9:92:52:3A:3E:AF:87:31:5B:01:5F:7B:1C:44:65:B3
X509v3 Authority Key Identifier:
keyid:EA:B2:50:D0:58:FA:CB:EB:3E:A0:D1:6B:53:86:50:61:33:90:74:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ARCHE/6rJQ0Fj6y-s-oNFrU4ZQYTOQdLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/6rJQ0Fj6y-s-oNFrU4ZQYTOQdLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ARCHE/NLWWs7mSUjo-r4cxWwFfexxEZbM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
157.15.33.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:37:85:7a:e4:4d:a9:11:f5:11:b5:23:ef:98:ba:6d:2e:f8:
ad:05:f3:4f:e4:da:da:4e:43:86:ec:50:48:65:de:f2:d9:7f:
b4:a7:18:91:34:50:c2:d2:36:76:fd:ac:ae:76:52:8a:18:2f:
5b:ae:e6:f2:87:42:11:85:b0:de:ba:60:89:1a:84:d3:7f:5d:
f3:cd:24:38:cb:97:d8:44:c4:c3:0c:46:ae:18:42:70:24:da:
74:30:19:85:95:47:ce:b8:e2:a2:34:2b:be:cc:40:4f:ec:dc:
bd:dd:88:52:8f:fd:e2:53:a8:cc:bf:fd:0c:41:43:df:46:21:
18:4f:cf:f7:ce:6a:5b:66:1f:33:bd:d9:95:55:ed:46:34:2c:
23:99:26:ce:52:1d:bb:3f:69:6e:4a:67:42:52:98:ee:e9:e3:
7e:1a:5d:05:b9:6e:4a:69:78:43:d0:9e:09:1d:e8:a5:7b:b7:
31:fe:14:63:d0:09:dd:1b:89:90:9c:3d:33:4e:10:fe:2c:73:
0e:b3:d4:8f:42:5f:11:d2:95:4f:ef:1e:44:af:5c:c4:73:c9:
ff:c5:c7:00:1b:6e:16:b1:d6:d0:85:f9:02:dd:67:40:c2:5c:
96:22:f2:19:68:4e:d4:66:7d:28:19:de:b5:a3:59:16:d7:82:
78:9f:89:1d
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUFC
MjUwRDA1OEZBQ0JFQjNFQTBEMTZCNTM4NjUwNjEzMzkwNzRCNjAeFw0yNTAxMDkx
NTM0MTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM0QjU5NkIzQjk5MjUy
M0EzRUFGODczMTVCMDE1RjdCMUM0NDY1QjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4dzo9dApQiOUgq7MlUSeSLeVMBKMOulJbtoPFffpPQsEvlz8j
EBLRIafoc4s2WWzzCyHNSgrRhHDUqy8kP0fltYRFuOwGH2e7l40yiV4nLudtY4VD
FLu5IS0bWITJKoJcCm20EfcX42ajsJkiD5shEeKL92QV+NdYdRYnzVizOGT+o63q
D8NefPmeC6lx1OdaFOgge6zZnKTB3r0OU5kNEfuDma9x/damuUkF+3fv+uHJs7ym
hJIh9E4OywIMd2RmmR7i1lNJW/23YtwLeEbY8Wt/KhgvD1TUgBgOxn9x+pIjKqvy
Sru9Z5/HI6PAy6ISQ8btUsgEeQTvtUmmK3XhAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUNLWWs7mSUjo+r4cxWwFfexxEZbMwHwYDVR0jBBgwFoAU6rJQ0Fj6y+s+oNFr
U4ZQYTOQdLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVJDSEUv
NnJKUTBGajZ5LXMtb05GclU0WlFZVE9RZExZLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS82ckpRMEZqNnktcy1vTkZyVTRaUVlUT1FkTFkuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9BUkNIRS9OTFdXczdtU1Vqby1yNGN4V3dG
ZmV4eEVaYk0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQ8h
MA0GCSqGSIb3DQEBCwUAA4IBAQCxN4V65E2pEfURtSPvmLptLvitBfNP5NraTkOG
7FBIZd7y2X+0pxiRNFDC0jZ2/ayudlKKGC9brubyh0IRhbDeumCJGoTTf13zzSQ4
y5fYRMTDDEauGEJwJNp0MBmFlUfOuOKiNCu+zEBP7Ny93YhSj/3iU6jMv/0MQUPf
RiEYT8/3zmpbZh8zvdmVVe1GNCwjmSbOUh27P2luSmdCUpju6eN+Gl0FuW5KaXhD
0J4JHeile7cx/hRj0AndG4mQnD0zThD+LHMOs9SPQl8R0pVP7x5Er1zEc8n/xccA
G24WsdbQhfkC3WdAwlyWIvIZaE7UZn0oGd61o1kW14J4n4kd
-----END CERTIFICATE-----
Generated at Tue Apr 8 14:15:04 2025 by rpki-client