Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/KUGguKjBbo5xV0_ZHNAZjNCs1Mk.roa
File: KUGguKjBbo5xV0_ZHNAZjNCs1Mk.roa (raw, json)
Hash identifier: sidi+L7+8AFHZDfvi9pWdU4k36snS01WZuAPwf5UDbM=
Subject key identifier: 29:41:A0:B8:A8:C1:6E:8E:71:57:4F:D9:1C:D0:19:8C:D0:AC:D4:C9
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 1173
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/KUGguKjBbo5xV0_ZHNAZjNCs1Mk.roa
Signing time: Mon 26 Aug 2024 05:10:47 +0000
ROA not before: Mon 26 Aug 2024 05:10:47 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 10085
IP address blocks: 203.163.194.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:14:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4467 (0x1173)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Aug 26 05:10:47 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=2941A0B8A8C16E8E71574FD91CD0198CD0ACD4C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:90:93:f8:e4:da:3e:04:26:7b:8e:f5:c6:ab:
51:13:b3:0c:c9:66:d7:8c:e7:e2:41:e3:ac:43:2f:
4d:d7:ed:17:da:2a:ae:d4:02:3d:cd:1e:af:a8:cc:
50:1d:75:a6:f2:4e:bf:65:79:9a:f2:84:06:10:22:
78:7f:d4:d6:2f:58:c0:d8:9d:54:fc:c1:55:63:a2:
72:c9:fa:ff:de:36:d8:46:52:2c:4d:16:e4:e4:66:
a5:08:cb:af:91:4e:96:03:22:ab:d0:ac:df:7a:3f:
bc:15:4d:c3:9a:a8:3a:c0:3f:b9:c5:6f:02:59:0b:
61:1d:0f:4a:ca:49:b1:12:bc:aa:bc:6d:5c:2d:7d:
3d:73:55:5d:d7:19:4d:55:e6:95:ab:13:9e:4e:31:
31:d5:cd:67:d2:b9:d7:7c:ae:9b:bf:cd:de:04:13:
4a:ba:07:bc:a2:29:6a:d6:44:1b:e4:e4:50:45:ca:
4b:04:2c:06:59:d7:7a:e0:8d:7a:ec:f7:65:7a:3f:
a1:18:e5:39:f7:16:6b:31:bb:9e:c8:39:b8:43:d4:
02:70:b7:d2:d5:2c:2c:f5:69:f0:44:2d:71:e8:c5:
66:05:96:08:a9:e6:36:4e:fa:2c:0d:41:63:2b:72:
c5:15:94:84:90:ac:d7:df:ba:2e:0d:c8:ba:f7:cb:
e2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:41:A0:B8:A8:C1:6E:8E:71:57:4F:D9:1C:D0:19:8C:D0:AC:D4:C9
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/KUGguKjBbo5xV0_ZHNAZjNCs1Mk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.163.194.0/23
Signature Algorithm: sha256WithRSAEncryption
91:b1:e8:e4:b3:e5:4d:5d:3a:8f:2d:e9:bc:dc:3c:44:fb:28:
30:f4:b4:53:9e:68:84:0a:67:30:57:96:90:22:62:e4:e5:70:
8f:07:81:58:9c:ce:11:69:26:d0:f3:47:2d:53:19:e2:ee:ed:
51:60:ea:1c:5d:5a:f5:a7:41:8c:65:e7:f8:6b:ae:67:93:45:
9c:57:eb:45:1e:b5:46:41:f4:81:df:17:19:46:de:36:db:79:
3a:97:02:b6:e2:47:ab:92:97:78:aa:65:16:bd:f2:01:ad:2f:
aa:0c:18:60:84:93:91:b1:69:62:22:1a:d5:02:9d:e6:1d:b0:
62:a6:a8:a2:80:bb:e4:56:a1:23:41:92:a4:23:0d:dc:34:24:
ce:4c:98:77:39:a6:05:8f:ac:a7:b7:c0:ba:fa:d7:e2:08:0c:
c2:a3:cf:7e:7e:27:81:e3:4f:7e:7f:c9:82:4c:58:79:4a:13:
c3:43:ca:31:30:ae:af:1d:cd:88:fb:20:a4:5a:59:8f:8f:8f:
a8:de:69:02:4e:06:7f:2e:0f:21:98:13:7c:74:93:1e:4d:f9:
e5:15:95:c6:2b:72:4c:f6:18:67:98:3b:48:15:07:34:fa:7e:
81:e0:6c:b2:f9:af:6b:f7:11:71:f9:bc:8e:d8:4b:65:ac:08:
6c:18:b7:dc
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICEXMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNDA4MjYw
NTEwNDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI5NDFBMEI4QThDMTZF
OEU3MTU3NEZEOTFDRDAxOThDRDBBQ0Q0QzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDikJP45No+BCZ7jvXGq1ETswzJZteM5+JB46xDL03X7RfaKq7U
Aj3NHq+ozFAddabyTr9leZryhAYQInh/1NYvWMDYnVT8wVVjonLJ+v/eNthGUixN
FuTkZqUIy6+RTpYDIqvQrN96P7wVTcOaqDrAP7nFbwJZC2EdD0rKSbESvKq8bVwt
fT1zVV3XGU1V5pWrE55OMTHVzWfSudd8rpu/zd4EE0q6B7yiKWrWRBvk5FBFyksE
LAZZ13rgjXrs92V6P6EY5Tn3Fmsxu57IObhD1AJwt9LVLCz1afBELXHoxWYFlgip
5jZO+iwNQWMrcsUVlISQrNffui4NyLr3y+LJAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUKUGguKjBbo5xV0/ZHNAZjNCs1MkwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9LVUdndUtqQmJvNXhW
MF9aSE5BWmpOQ3MxTWsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQBy6PCMA0GCSqGSIb3DQEBCwUAA4IBAQCRsejks+VNXTqPLem83DxE+ygw9LRT
nmiECmcwV5aQImLk5XCPB4FYnM4RaSbQ80ctUxni7u1RYOocXVr1p0GMZef4a65n
k0WcV+tFHrVGQfSB3xcZRt4223k6lwK24kerkpd4qmUWvfIBrS+qDBhghJORsWli
IhrVAp3mHbBipqiigLvkVqEjQZKkIw3cNCTOTJh3OaYFj6ynt8C6+tfiCAzCo89+
fieB409+f8mCTFh5ShPDQ8oxMK6vHc2I+yCkWlmPj4+o3mkCTgZ/Lg8hmBN8dJMe
TfnlFZXGK3JM9hhnmDtIFQc0+n6B4Gyy+a9r9xFx+byO2EtlrAhsGLfc
-----END CERTIFICATE-----
Generated at Wed Apr 9 13:49:02 2025 by rpki-client