Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/5LmZ9R9NTOogrKZ75Wqy6ayX2s8.roa
File: 5LmZ9R9NTOogrKZ75Wqy6ayX2s8.roa (raw, json)
Hash identifier: w3TaWOtCKY/9H2QlOAQWAVsqlBRLTtvkcPG45WaRHnE=
Subject key identifier: E4:B9:99:F5:1F:4D:4C:EA:20:AC:A6:7B:E5:6A:B2:E9:AC:97:DA:CF
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 116A
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/5LmZ9R9NTOogrKZ75Wqy6ayX2s8.roa
Signing time: Mon 26 Aug 2024 05:10:45 +0000
ROA not before: Mon 26 Aug 2024 05:10:45 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131627
IP address blocks: 150.116.240.0/20 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:14:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4458 (0x116a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Aug 26 05:10:45 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E4B999F51F4D4CEA20ACA67BE56AB2E9AC97DACF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:09:c0:0a:1d:46:a8:fe:ea:ed:30:97:2a:93:
96:74:e4:3d:aa:f1:59:0b:a3:9c:ba:53:38:73:e2:
02:93:6a:c1:db:52:c6:e6:6a:ef:df:16:49:81:21:
34:b4:63:46:98:ee:18:56:eb:f6:12:ec:ca:ca:79:
91:b9:cc:d0:45:f3:22:f3:39:22:e4:be:6a:43:30:
52:ab:d7:5c:f2:bd:4b:d7:82:67:65:1a:04:48:5e:
a5:d5:49:0f:e7:7c:e5:01:96:d1:e6:ce:4c:4d:0a:
a1:58:11:46:a6:19:59:c5:ab:fe:f0:48:b4:0c:72:
8b:d3:a3:26:a7:16:3a:c8:f3:4a:52:12:63:fe:65:
9e:51:83:a3:ba:7d:52:55:44:05:dd:ba:68:7a:0b:
c5:83:b2:1e:9c:5d:c5:47:fd:3a:d9:df:5e:47:7e:
b7:33:c8:7d:de:4b:38:8f:f8:5b:3e:52:68:26:fa:
5f:29:01:7d:6b:56:7f:d2:9e:3c:88:0b:38:95:7b:
c3:30:d0:3f:71:68:04:4a:9f:df:ea:8f:ef:b3:ce:
b8:4f:79:d7:50:4e:17:98:01:7a:9c:59:37:a3:3a:
61:05:88:ac:1e:d6:74:32:df:99:d2:8c:8c:27:47:
bf:a4:12:61:54:d6:95:cc:83:50:0b:80:46:bb:69:
eb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B9:99:F5:1F:4D:4C:EA:20:AC:A6:7B:E5:6A:B2:E9:AC:97:DA:CF
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/5LmZ9R9NTOogrKZ75Wqy6ayX2s8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.240.0/20
Signature Algorithm: sha256WithRSAEncryption
62:c5:33:ea:59:c7:5d:e4:b9:da:6a:43:b0:85:ad:94:e0:9e:
b0:a6:66:bf:63:e2:fe:2f:a5:41:f5:f7:e5:f8:d8:e4:b8:46:
ca:88:ec:8e:e5:a9:98:96:ae:89:7c:fd:4e:6e:ef:f3:dc:a4:
67:f6:04:dc:ec:11:f1:36:9c:ae:46:b7:56:29:f5:8f:c1:f9:
ee:0c:34:7d:7c:78:f4:44:06:c0:d4:18:67:ee:ad:70:cc:bd:
da:56:ab:36:c2:83:66:00:7f:51:82:f7:be:bc:da:01:d4:eb:
e0:2f:f4:14:37:7b:ba:28:d6:10:83:9e:38:c9:33:58:33:bc:
0a:20:4d:24:9c:1b:d3:bd:ea:aa:6a:7d:00:63:db:b8:fb:50:
95:27:98:ae:7d:af:f4:09:ae:6d:94:36:b0:fe:2b:5e:b3:ea:
72:c3:bd:a3:46:c5:50:78:4e:e2:99:39:f1:5d:c6:51:b4:66:
cd:35:69:9c:9a:64:c9:36:3d:03:37:5f:f6:70:e2:6f:93:99:
ce:01:f0:9a:3a:90:38:4e:92:7c:01:7a:41:f3:22:ce:f1:72:
02:ad:c8:34:14:5f:69:a6:8a:e3:d4:c1:4b:08:a0:27:e5:7d:
75:3c:1e:d6:59:a5:5c:3e:03:e8:71:bf:6d:5a:ef:24:dd:87:
45:76:ac:8c
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICEWowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNDA4MjYw
NTEwNDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEU0Qjk5OUY1MUY0RDRD
RUEyMEFDQTY3QkU1NkFCMkU5QUM5N0RBQ0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7CcAKHUao/urtMJcqk5Z05D2q8VkLo5y6Uzhz4gKTasHbUsbm
au/fFkmBITS0Y0aY7hhW6/YS7MrKeZG5zNBF8yLzOSLkvmpDMFKr11zyvUvXgmdl
GgRIXqXVSQ/nfOUBltHmzkxNCqFYEUamGVnFq/7wSLQMcovToyanFjrI80pSEmP+
ZZ5Rg6O6fVJVRAXdumh6C8WDsh6cXcVH/TrZ315HfrczyH3eSziP+Fs+Umgm+l8p
AX1rVn/SnjyICziVe8Mw0D9xaARKn9/qj++zzrhPeddQTheYAXqcWTejOmEFiKwe
1nQy35nSjIwnR7+kEmFU1pXMg1ALgEa7aeuhAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQU5LmZ9R9NTOogrKZ75Wqy6ayX2s8wHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy81TG1aOVI5TlRPb2dy
S1o3NVdxeTZheVgyczgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQElnTwMA0GCSqGSIb3DQEBCwUAA4IBAQBixTPqWcdd5LnaakOwha2U4J6wpma/
Y+L+L6VB9ffl+NjkuEbKiOyO5amYlq6JfP1Obu/z3KRn9gTc7BHxNpyuRrdWKfWP
wfnuDDR9fHj0RAbA1Bhn7q1wzL3aVqs2woNmAH9Rgve+vNoB1OvgL/QUN3u6KNYQ
g544yTNYM7wKIE0knBvTveqqan0AY9u4+1CVJ5iufa/0Ca5tlDaw/ites+pyw72j
RsVQeE7imTnxXcZRtGbNNWmcmmTJNj0DN1/2cOJvk5nOAfCaOpA4TpJ8AXpB8yLO
8XICrcg0FF9pporj1MFLCKAn5X11PB7WWaVcPgPocb9tWu8k3YdFdqyM
-----END CERTIFICATE-----
Generated at Wed Apr 9 13:35:48 2025 by rpki-client