Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/u6twFdMJU_-e-AVN_dZeLJgXX-g.roa
File: u6twFdMJU_-e-AVN_dZeLJgXX-g.roa (raw, json)
Hash identifier: tIa/mf68byJswf1tiKP3J06HIyatZyS2AgCn6d8boek=
Subject key identifier: BB:AB:70:15:D3:09:53:FF:9E:F8:05:4D:FD:D6:5E:2C:98:17:5F:E8
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 117F
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/u6twFdMJU_-e-AVN_dZeLJgXX-g.roa
Signing time: Mon 26 Aug 2024 05:10:50 +0000
ROA not before: Mon 26 Aug 2024 05:10:50 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 63199
IP address blocks: 150.116.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:14:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4479 (0x117f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Aug 26 05:10:50 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=BBAB7015D30953FF9EF8054DFDD65E2C98175FE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:72:8e:02:27:2e:6b:28:d1:04:32:71:82:d3:
01:45:d2:88:80:c6:c3:31:ea:55:d9:52:4c:75:29:
73:68:ad:c2:96:bc:5d:62:ff:07:05:4f:05:7d:16:
2e:c2:c9:64:ec:22:ae:32:dd:75:69:47:3f:bf:79:
75:13:44:56:b4:87:f6:ad:69:ef:66:46:d5:5e:b1:
58:44:f6:01:c3:35:b6:7e:75:2f:d8:6b:db:6f:2d:
17:23:01:b1:24:af:f0:dc:1f:79:59:65:17:9e:ee:
d0:b6:59:d3:9e:7e:c8:2a:23:c5:41:01:07:f1:bd:
c5:97:13:55:da:8b:36:e8:c7:dd:18:db:b5:77:1c:
4d:1a:6a:de:f3:c1:a3:8e:9a:aa:1e:ca:5f:cd:00:
a9:c3:dc:4d:5e:2b:91:9e:f0:79:ed:7a:88:59:a5:
7f:29:a2:19:5b:e0:4b:bc:ca:52:d8:9b:88:3f:49:
0c:96:4e:6d:5e:d2:57:b1:86:01:7c:b6:e9:0b:e5:
f5:0e:69:9f:71:7c:a2:6a:fc:5f:68:fc:c0:51:f5:
a6:46:b5:81:09:9c:60:d0:f4:7a:5e:c2:e5:dc:6a:
55:03:89:c7:9a:62:8f:f2:97:be:6c:5c:e9:f2:94:
69:ea:a5:72:88:16:12:f7:7a:28:79:60:c9:24:b5:
de:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AB:70:15:D3:09:53:FF:9E:F8:05:4D:FD:D6:5E:2C:98:17:5F:E8
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/u6twFdMJU_-e-AVN_dZeLJgXX-g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.5.0/24
Signature Algorithm: sha256WithRSAEncryption
47:b3:ee:0f:40:0c:b1:0b:37:36:af:ca:a2:b4:1f:71:fb:7f:
ad:1b:e0:89:4d:8f:22:90:70:0b:12:47:b3:71:f6:68:1c:8f:
03:68:22:a5:87:93:c2:66:87:3f:b3:7c:35:05:99:bf:fd:cf:
4c:d9:52:73:19:27:cd:a4:3e:4b:08:30:6e:62:46:dc:03:ba:
af:b0:3c:29:ab:3b:a4:5f:ab:15:74:6a:a3:bd:d4:2d:9f:8c:
c8:80:6e:b6:ed:5d:0f:d5:5c:bf:58:16:04:a5:38:3e:2f:d7:
c8:1b:79:6e:15:6c:15:be:f8:2c:fd:fb:20:84:97:d0:8c:5e:
cf:ac:8b:aa:5a:83:5f:6b:6a:d9:0c:85:30:85:ae:54:23:ad:
eb:5c:3c:d7:8d:4b:af:d7:de:92:4e:a7:33:42:c2:fb:53:5d:
4f:d4:92:35:11:8f:76:b3:2b:8e:82:d0:04:80:5a:f2:a5:da:
7f:98:ff:71:d9:4c:d7:a8:57:d4:37:c6:1e:54:18:02:75:ae:
f1:8c:4c:05:eb:ca:05:13:f4:f4:9b:b2:ac:d7:00:9e:4c:fb:
72:7f:99:a0:28:8c:98:0b:20:14:d0:07:83:4d:1d:60:42:dc:
e8:02:43:f8:c3:a0:48:07:68:1e:bf:7f:bd:34:35:1e:ee:be:
25:1f:e2:b6
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICEX8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNDA4MjYw
NTEwNTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJCQUI3MDE1RDMwOTUz
RkY5RUY4MDU0REZERDY1RTJDOTgxNzVGRTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQco4CJy5rKNEEMnGC0wFF0oiAxsMx6lXZUkx1KXNorcKWvF1i
/wcFTwV9Fi7CyWTsIq4y3XVpRz+/eXUTRFa0h/atae9mRtVesVhE9gHDNbZ+dS/Y
a9tvLRcjAbEkr/DcH3lZZRee7tC2WdOefsgqI8VBAQfxvcWXE1Xaizbox90Y27V3
HE0aat7zwaOOmqoeyl/NAKnD3E1eK5Ge8HnteohZpX8pohlb4Eu8ylLYm4g/SQyW
Tm1e0lexhgF8tukL5fUOaZ9xfKJq/F9o/MBR9aZGtYEJnGDQ9HpewuXcalUDicea
Yo/yl75sXOnylGnqpXKIFhL3eih5YMkktd6lAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUu6twFdMJU/+e+AVN/dZeLJgXX+gwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy91NnR3RmRNSlVfLWUt
QVZOX2RaZUxKZ1hYLWcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAlnQFMA0GCSqGSIb3DQEBCwUAA4IBAQBHs+4PQAyxCzc2r8qitB9x+3+tG+CJ
TY8ikHALEkezcfZoHI8DaCKlh5PCZoc/s3w1BZm//c9M2VJzGSfNpD5LCDBuYkbc
A7qvsDwpqzukX6sVdGqjvdQtn4zIgG627V0P1Vy/WBYEpTg+L9fIG3luFWwVvvgs
/fsghJfQjF7PrIuqWoNfa2rZDIUwha5UI63rXDzXjUuv196STqczQsL7U11P1JI1
EY92syuOgtAEgFrypdp/mP9x2UzXqFfUN8YeVBgCda7xjEwF68oFE/T0m7Ks1wCe
TPtyf5mgKIyYCyAU0AeDTR1gQtzoAkP4w6BIB2gev3+9NDUe7r4lH+K2
-----END CERTIFICATE-----
Generated at Wed Apr 9 13:49:00 2025 by rpki-client