Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/DaUPQIwHhcR90VHhk2TEXUjaZmU.roa
File: DaUPQIwHhcR90VHhk2TEXUjaZmU.roa (raw, json)
Hash identifier: oRJQcxkBEF+xVnA3/4OshL5dKFDvKevEhiZW2kCs0UE=
Subject key identifier: 0D:A5:0F:40:8C:07:85:C4:7D:D1:51:E1:93:64:C4:5D:48:DA:66:65
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 1192
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/DaUPQIwHhcR90VHhk2TEXUjaZmU.roa
Signing time: Mon 26 Aug 2024 05:10:55 +0000
ROA not before: Mon 26 Aug 2024 05:10:55 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 137263
IP address blocks: 113.21.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:14:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4498 (0x1192)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Aug 26 05:10:55 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=0DA50F408C0785C47DD151E19364C45D48DA6665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e5:b6:35:8e:25:e2:c6:b6:19:5d:1b:94:3d:
1e:25:30:27:5e:0c:f0:c8:81:29:2a:bd:88:75:e1:
c1:5c:cc:fd:fa:3a:64:88:96:4d:b7:df:6d:77:ad:
a1:da:68:3a:4e:5e:55:fd:62:77:37:fe:f7:69:4d:
0b:97:28:db:a2:42:31:13:2b:44:99:c2:8f:5a:96:
b0:7b:66:09:67:49:b3:2f:c7:0c:5e:3a:a0:ad:e2:
71:f1:97:96:ff:55:6c:6e:5b:b0:c8:59:4a:14:9d:
67:aa:3b:01:74:b6:e2:d1:d8:e9:a7:0e:4f:29:08:
d5:ac:1b:1a:51:ab:fb:43:b1:cb:8f:d9:3e:c9:91:
4d:32:38:ba:49:78:07:cf:4e:c4:af:fe:13:8a:c6:
49:8b:4e:1c:a1:47:ea:8a:ed:7f:b0:d3:66:e7:77:
a6:b1:a5:58:64:da:44:49:e8:35:28:16:c6:56:db:
df:2e:fb:75:7a:64:5c:f3:7c:0b:f3:0e:18:92:60:
75:0f:c9:20:b2:0b:c7:a3:de:5f:fb:cd:c9:7c:e7:
77:71:fd:12:5f:b0:c3:ce:dd:e6:1c:0e:42:4c:5d:
5d:c5:5d:6a:c6:1a:a2:37:f1:49:8a:c0:7b:ee:40:
29:bd:45:20:41:12:d0:32:e2:79:a8:a3:8a:a5:c0:
76:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A5:0F:40:8C:07:85:C4:7D:D1:51:E1:93:64:C4:5D:48:DA:66:65
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/DaUPQIwHhcR90VHhk2TEXUjaZmU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.21.92.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:4e:d5:01:09:c8:8d:4b:41:f7:01:e7:71:30:f6:19:0c:13:
48:c0:47:81:9b:37:39:f7:29:50:26:09:42:d3:de:ef:7c:eb:
ab:6b:b7:68:54:ee:05:b3:fc:0f:c0:eb:28:21:8b:9d:c7:65:
fe:45:ac:c0:03:de:8a:b7:79:13:c1:4c:da:02:3f:bc:ed:d7:
d6:c8:b1:27:09:39:d7:de:20:0b:83:93:7d:68:e7:5e:7c:fe:
16:6d:c8:18:83:d2:8e:f6:79:c8:57:eb:74:43:e6:db:d9:4d:
44:14:8d:b6:a2:cb:e3:22:1b:83:40:8b:66:b6:21:a8:4a:c6:
ab:5b:2b:b8:f3:83:ee:8f:14:21:e5:a8:97:77:5f:09:e6:05:
73:bd:5e:32:4a:1d:bf:d9:ab:a7:0b:80:9a:ca:63:67:a8:7e:
f0:cd:ef:b8:57:7e:39:f0:3b:02:99:53:f2:3d:73:7e:7a:d9:
d5:fc:8c:0f:f7:ce:f9:e8:18:71:46:6a:1f:41:39:c4:cb:a7:
25:1c:c9:05:05:ad:6e:25:9d:5a:17:bc:97:b2:98:c0:6c:74:
0a:6a:f5:f0:15:cd:56:48:25:2e:53:f9:53:58:2a:d2:1a:df:
24:88:fe:f6:fb:29:1b:51:b9:e5:78:78:33:ed:56:52:34:e1:
3c:9a:3b:d5
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICEZIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNDA4MjYw
NTEwNTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBEQTUwRjQwOEMwNzg1
QzQ3REQxNTFFMTkzNjRDNDVENDhEQTY2NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCu5bY1jiXixrYZXRuUPR4lMCdeDPDIgSkqvYh14cFczP36OmSI
lk233213raHaaDpOXlX9Ync3/vdpTQuXKNuiQjETK0SZwo9alrB7ZglnSbMvxwxe
OqCt4nHxl5b/VWxuW7DIWUoUnWeqOwF0tuLR2OmnDk8pCNWsGxpRq/tDscuP2T7J
kU0yOLpJeAfPTsSv/hOKxkmLThyhR+qK7X+w02bnd6axpVhk2kRJ6DUoFsZW298u
+3V6ZFzzfAvzDhiSYHUPySCyC8ej3l/7zcl853dx/RJfsMPO3eYcDkJMXV3FXWrG
GqI38UmKwHvuQCm9RSBBEtAy4nmoo4qlwHbPAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUDaUPQIwHhcR90VHhk2TEXUjaZmUwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9EYVVQUUl3SGhjUjkw
VkhoazJURVhVamFabVUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAcRVcMA0GCSqGSIb3DQEBCwUAA4IBAQANTtUBCciNS0H3AedxMPYZDBNIwEeB
mzc59ylQJglC097vfOura7doVO4Fs/wPwOsoIYudx2X+RazAA96Kt3kTwUzaAj+8
7dfWyLEnCTnX3iALg5N9aOdefP4WbcgYg9KO9nnIV+t0Q+bb2U1EFI22osvjIhuD
QItmtiGoSsarWyu484PujxQh5aiXd18J5gVzvV4ySh2/2aunC4CaymNnqH7wze+4
V3458DsCmVPyPXN+etnV/IwP98756BhxRmofQTnEy6clHMkFBa1uJZ1aF7yXspjA
bHQKavXwFc1WSCUuU/lTWCrSGt8kiP72+ykbUbnleHgz7VZSNOE8mjvV
-----END CERTIFICATE-----
Generated at Wed Apr 9 09:52:59 2025 by rpki-client