Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/6UXflNjb8f4YqsFYV6uYLhUpj9c.roa
File: 6UXflNjb8f4YqsFYV6uYLhUpj9c.roa (raw, json)
Hash identifier: DshMI9qaqs1fk1L1n7FIT/jcQL1b2nJ9usjLMN0IGkY=
Subject key identifier: E9:45:DF:94:D8:DB:F1:FE:18:AA:C1:58:57:AB:98:2E:15:29:8F:D7
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 115D
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/6UXflNjb8f4YqsFYV6uYLhUpj9c.roa
Signing time: Mon 26 Aug 2024 05:10:42 +0000
ROA not before: Mon 26 Aug 2024 05:10:42 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 10133
IP address blocks: 203.163.222.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:15:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4445 (0x115d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Aug 26 05:10:42 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E945DF94D8DBF1FE18AAC15857AB982E15298FD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d2:3e:fb:73:88:84:76:f9:4e:b3:da:e3:ee:
9d:5d:b0:0e:59:9d:4d:d8:a9:5a:3d:90:d8:65:65:
5c:73:eb:17:32:76:a1:30:70:fc:1b:2e:ca:3f:ee:
c7:62:ec:f0:2d:e2:f5:e1:46:45:b2:7b:29:8a:27:
b2:f8:a7:6e:29:b0:3c:f6:b9:a8:c6:aa:9b:f9:de:
20:8b:7d:f6:53:d8:ef:70:98:e1:44:fa:75:dc:3f:
f6:df:3d:c8:91:aa:11:60:3e:ff:bd:ab:1c:43:82:
25:3c:12:3d:ad:b9:ba:6c:67:2f:c4:0e:3d:32:9b:
36:8a:c6:5d:a9:81:80:9b:a8:20:cf:8a:51:37:f7:
b7:69:6c:48:d0:4a:bd:65:81:d1:d5:53:6f:6e:a7:
32:f3:59:cb:f4:44:84:28:d5:b2:62:8b:c3:d9:eb:
62:b2:1a:4d:74:8a:e6:c0:f8:2b:b5:f8:6e:c2:1b:
1b:53:62:a4:f3:43:6a:7c:54:e0:b1:a1:13:57:98:
4b:e2:c9:af:23:44:90:1f:44:17:91:8e:80:7f:e6:
0f:ab:ce:4b:fa:5a:a1:e3:03:2c:43:e2:05:91:82:
95:b0:3c:cb:06:91:42:4d:74:c2:f5:4d:af:18:df:
dd:74:b7:1a:af:79:09:a3:7b:ae:f9:55:b9:74:18:
d3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:45:DF:94:D8:DB:F1:FE:18:AA:C1:58:57:AB:98:2E:15:29:8F:D7
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/6UXflNjb8f4YqsFYV6uYLhUpj9c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.163.222.0/23
Signature Algorithm: sha256WithRSAEncryption
02:64:d5:b5:d3:cc:0f:b6:c6:5a:0d:04:ba:82:ac:25:72:53:
c4:32:8b:54:ef:1e:15:d0:db:dd:a1:af:b6:d1:9a:db:5a:30:
61:81:58:47:a2:16:c9:75:27:2a:68:c9:37:8b:a7:c3:c8:33:
bb:0e:9b:66:e4:87:ea:48:e8:c4:c5:47:f3:7a:23:bc:e4:35:
b2:3c:43:8d:ff:f4:ed:55:a8:88:be:e3:b5:34:75:8c:ea:22:
29:d8:1b:ab:37:cd:f5:eb:13:d9:0e:5f:11:bc:8c:61:a7:e5:
04:91:51:b1:8a:b0:86:4b:5b:73:70:b6:be:d1:0b:ba:6e:71:
d6:c1:a3:f4:a5:7b:b0:25:a6:5f:44:ba:bf:f9:86:9f:1f:57:
45:7b:b4:90:f3:a8:01:e9:41:6f:b7:cd:42:73:d7:01:17:21:
ac:b7:94:98:32:cd:16:2f:e5:67:5f:d3:98:d4:0b:34:34:16:
69:2a:9a:bc:fd:fa:22:ae:e2:6b:f3:fb:e8:84:84:e9:4d:b7:
99:1f:f0:68:c2:35:3d:27:07:6e:1c:c6:b1:4c:89:c4:05:58:
93:98:70:44:bb:bf:83:df:30:7b:b6:2d:23:96:08:74:91:7f:
bb:cb:01:1d:d9:2b:08:dc:0f:9e:98:91:2e:5e:2b:a5:2a:4a:
8e:d5:f8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:20:13 2025 by rpki-client