Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/OgNENrSKPQiu0cWEeZa6ufzJUcU.roa
File: OgNENrSKPQiu0cWEeZa6ufzJUcU.roa (raw, json)
Hash identifier: e5BrwZyBb0GCqY/ZgbmrOW87vabnK5dlOTE17VLa7GA=
Subject key identifier: 3A:03:44:36:B4:8A:3D:08:AE:D1:C5:84:79:96:BA:B9:FC:C9:51:C5
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 11C4
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/OgNENrSKPQiu0cWEeZa6ufzJUcU.roa
Signing time: Mon 26 Aug 2024 05:11:07 +0000
ROA not before: Mon 26 Aug 2024 05:11:07 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38851
IP address blocks: 223.26.108.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:15:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4548 (0x11c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Aug 26 05:11:07 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=3A034436B48A3D08AED1C5847996BAB9FCC951C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:17:3a:b9:0b:a0:9f:4a:f0:86:b7:6d:12:e1:
69:de:e8:0a:d3:3c:f9:70:52:ba:7d:77:79:20:85:
3a:9d:4e:77:45:7d:25:b4:5f:2f:28:f9:06:09:be:
3a:16:9f:55:92:b6:d9:c7:91:3c:7a:36:c3:3c:5f:
25:b2:44:75:41:61:de:5e:34:f5:cb:4b:0f:e7:72:
e3:f9:3d:df:a8:13:70:21:a8:42:6e:d3:49:5f:64:
05:5a:37:9a:5d:8a:fc:81:e0:1f:5b:6d:d0:e8:77:
8b:3b:7d:92:3f:85:fc:85:20:5c:04:88:e2:4f:c3:
30:d9:82:c1:e4:75:35:2c:52:42:4c:aa:fa:64:06:
a8:a6:75:9e:8a:15:ac:76:4b:49:0f:fa:c3:27:6b:
23:18:7e:4c:51:2d:bd:d4:a7:ba:14:e5:fd:10:51:
74:50:43:76:cd:e9:0a:a6:00:5c:81:66:d8:a2:32:
fb:83:b3:f9:e1:2f:fd:1b:cb:18:a4:ea:e6:8b:91:
49:24:01:5f:64:3a:2b:36:e6:80:3c:8e:c5:61:9d:
db:63:94:76:83:26:59:fd:7f:51:55:a4:74:2b:03:
dc:61:54:21:dc:c0:ef:bb:ab:88:52:cc:55:a5:c3:
32:63:73:0c:4f:9d:84:fd:c6:27:7b:1c:b5:b7:ac:
43:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:03:44:36:B4:8A:3D:08:AE:D1:C5:84:79:96:BA:B9:FC:C9:51:C5
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/OgNENrSKPQiu0cWEeZa6ufzJUcU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.26.108.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:f6:de:ae:83:1b:f1:c1:1e:2a:d2:ed:50:95:ad:c3:d2:9c:
87:88:8b:96:31:fb:7a:1f:6e:9c:1e:81:b4:fc:b0:05:0f:d7:
7e:94:26:df:98:3b:a6:db:15:f9:73:93:0f:93:1e:5d:7c:2b:
0c:57:f0:9e:dd:f8:83:af:43:83:57:06:ef:14:e2:c4:f4:73:
09:77:98:11:7f:40:df:3f:f3:b9:bc:02:52:ba:58:25:0c:31:
9b:25:ac:79:67:c9:de:99:aa:c6:c3:19:71:97:03:13:75:c9:
5b:1b:6c:6c:a4:56:b8:ae:f2:e7:c3:a5:09:ea:0e:13:42:ed:
8e:15:e3:10:02:ea:58:40:18:3e:46:3d:c7:48:26:d9:60:a9:
cd:a0:89:d3:b1:57:ee:1b:a3:ed:13:9b:e3:f7:3c:64:77:54:
af:28:92:2c:e6:6c:f4:fb:e1:31:aa:23:48:72:39:d6:bc:22:
61:b9:f9:93:3a:dd:25:1d:47:47:65:cc:9e:95:f2:be:fc:7b:
8a:51:62:fb:f8:13:61:39:9e:f5:aa:5c:e1:40:b0:dd:0a:8b:
21:1d:19:d7:dc:c8:1d:98:2e:1d:a7:99:3a:06:07:3e:a3:2c:
6c:97:73:3a:7b:7c:16:46:f0:67:3a:aa:cf:72:cb:47:2e:f2:
65:b1:aa:b0
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICEcQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNDA4MjYw
NTExMDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNBMDM0NDM2QjQ4QTNE
MDhBRUQxQzU4NDc5OTZCQUI5RkNDOTUxQzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCuFzq5C6CfSvCGt20S4Wne6ArTPPlwUrp9d3kghTqdTndFfSW0
Xy8o+QYJvjoWn1WSttnHkTx6NsM8XyWyRHVBYd5eNPXLSw/ncuP5Pd+oE3AhqEJu
00lfZAVaN5pdivyB4B9bbdDod4s7fZI/hfyFIFwEiOJPwzDZgsHkdTUsUkJMqvpk
BqimdZ6KFax2S0kP+sMnayMYfkxRLb3Up7oU5f0QUXRQQ3bN6QqmAFyBZtiiMvuD
s/nhL/0byxik6uaLkUkkAV9kOis25oA8jsVhndtjlHaDJln9f1FVpHQrA9xhVCHc
wO+7q4hSzFWlwzJjcwxPnYT9xid7HLW3rEMtAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUOgNENrSKPQiu0cWEeZa6ufzJUcUwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9PZ05FTnJTS1BRaXUw
Y1dFZVphNnVmekpVY1Uucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQC3xpsMA0GCSqGSIb3DQEBCwUAA4IBAQCr9t6ugxvxwR4q0u1Qla3D0pyHiIuW
Mft6H26cHoG0/LAFD9d+lCbfmDum2xX5c5MPkx5dfCsMV/Ce3fiDr0ODVwbvFOLE
9HMJd5gRf0DfP/O5vAJSulglDDGbJax5Z8nemarGwxlxlwMTdclbG2xspFa4rvLn
w6UJ6g4TQu2OFeMQAupYQBg+Rj3HSCbZYKnNoInTsVfuG6PtE5vj9zxkd1SvKJIs
5mz0++ExqiNIcjnWvCJhufmTOt0lHUdHZcyelfK+/HuKUWL7+BNhOZ71qlzhQLDd
CoshHRnX3MgdmC4dp5k6Bgc+oyxsl3M6e3wWRvBnOqrPcstHLvJlsaqw
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:21:20 2025 by rpki-client