Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/IzN5l1Ltcg7e77NpJ7Q1jBZqWmo.roa
File: IzN5l1Ltcg7e77NpJ7Q1jBZqWmo.roa (raw, json)
Hash identifier: Cyrst28dM/NuqXJgMypg/81mekRl6lBEtKLhuND8TWY=
Subject key identifier: 23:33:79:97:52:ED:72:0E:DE:EF:B3:69:27:B4:35:8C:16:6A:5A:6A
Certificate issuer: /CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
Certificate serial: 0C52
Authority key identifier: 6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/IzN5l1Ltcg7e77NpJ7Q1jBZqWmo.roa
Signing time: Mon 26 Aug 2024 05:12:04 +0000
ROA not before: Mon 26 Aug 2024 05:12:04 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18046
IP address blocks: 103.130.44.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:12:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3154 (0xc52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
Validity
Not Before: Aug 26 05:12:04 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=2333799752ED720EDEEFB36927B4358C166A5A6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:85:da:09:e4:cb:3f:51:61:23:ac:75:9d:0b:
b8:62:08:a4:a8:30:3c:09:ea:fe:c8:a6:d8:0c:59:
d3:94:b3:7d:ac:e8:e1:bf:a5:73:fd:78:57:36:a5:
27:1b:18:0d:ff:e0:4a:12:79:f7:6a:95:35:2e:c7:
44:63:a0:5b:6b:0f:32:63:20:f4:25:fc:ed:b0:67:
10:24:9f:35:4f:7d:f4:78:f8:af:e6:ce:3c:e6:bd:
eb:73:db:70:e9:e1:c7:af:43:b9:5b:8d:3e:b7:dc:
ae:61:44:91:af:45:73:11:32:b4:77:08:58:3d:af:
cc:8e:22:12:4c:c9:3c:44:d0:d7:97:2a:cc:8a:52:
04:7e:71:6f:98:34:b9:d0:68:98:ea:d4:a5:07:27:
26:61:7e:2d:03:7f:f1:e7:d3:9b:b2:3a:16:d1:32:
c0:8d:cd:1a:13:11:0b:ed:c7:96:3b:77:4f:59:77:
2d:5f:40:fd:e4:3a:f4:02:02:ac:61:c2:c0:c2:85:
1e:ca:f2:15:60:f9:23:37:cf:47:e3:b0:62:7b:14:
e9:08:34:fd:77:39:a8:33:6a:6b:0b:40:2f:75:38:
5f:95:ce:05:16:c0:84:dd:7e:83:92:52:36:51:a4:
cc:df:19:af:5e:62:29:37:0f:a1:bf:61:37:8b:ce:
a7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:33:79:97:52:ED:72:0E:DE:EF:B3:69:27:B4:35:8C:16:6A:5A:6A
X509v3 Authority Key Identifier:
keyid:6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/IzN5l1Ltcg7e77NpJ7Q1jBZqWmo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.44.0/22
Signature Algorithm: sha256WithRSAEncryption
06:92:bc:d2:6a:73:82:3e:70:8b:9a:e7:63:4c:0d:b3:8c:6d:
49:24:3f:af:a0:b3:b2:45:9c:dc:ed:39:65:7e:d3:8f:ce:f9:
78:37:c4:b5:71:6a:b7:6c:c7:ec:f6:b8:4b:b6:54:a6:ae:3b:
d0:82:e1:2d:be:c9:46:a7:0f:03:fe:b3:7d:4c:e0:d5:d5:73:
71:92:c6:4b:01:14:c3:b6:20:5f:6f:f5:3e:ba:db:7f:a3:b6:
eb:2a:2d:21:81:91:7c:2e:e0:db:08:c2:87:3e:67:58:8b:b7:
2d:21:79:0b:48:f9:11:69:00:29:2c:4f:8a:8f:5e:c1:54:dd:
8d:8b:8f:e7:2c:ec:7f:c6:60:26:3f:0c:54:5a:49:9c:eb:1a:
27:88:31:c9:d8:41:19:5b:6c:92:62:10:69:f6:61:63:3a:6e:
3b:f5:35:18:11:45:41:1c:36:f0:4d:6e:cf:69:9b:9b:15:87:
71:e5:05:73:cc:de:8f:d1:61:11:3e:bd:5b:94:ab:b7:95:ed:
f7:2b:be:09:dd:0a:26:98:cb:08:bb:70:83:66:c6:55:5a:f0:
14:6e:ec:a7:bc:76:67:ac:8a:36:34:99:ef:4f:a9:52:20:3d:
1b:2e:db:67:35:64:00:64:2a:c1:d4:b7:99:6c:d9:ad:02:ea:
9c:6e:4a:f2
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICDFIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkZE
RUEzNDcwNzE1MjI5MEMxRDI2MDZGRkJGQzY5QjkyN0Q0MEE1QjAeFw0yNDA4MjYw
NTEyMDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDIzMzM3OTk3NTJFRDcy
MEVERUVGQjM2OTI3QjQzNThDMTY2QTVBNkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCkhdoJ5Ms/UWEjrHWdC7hiCKSoMDwJ6v7IptgMWdOUs32s6OG/
pXP9eFc2pScbGA3/4EoSefdqlTUux0RjoFtrDzJjIPQl/O2wZxAknzVPffR4+K/m
zjzmvetz23Dp4cevQ7lbjT633K5hRJGvRXMRMrR3CFg9r8yOIhJMyTxE0NeXKsyK
UgR+cW+YNLnQaJjq1KUHJyZhfi0Df/Hn05uyOhbRMsCNzRoTEQvtx5Y7d09Zdy1f
QP3kOvQCAqxhwsDChR7K8hVg+SM3z0fjsGJ7FOkINP13OagzamsLQC91OF+VzgUW
wITdfoOSUjZRpMzfGa9eYik3D6G/YTeLzqflAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUIzN5l1Ltcg7e77NpJ7Q1jBZqWmowHwYDVR0jBBgwFoAUb96jRwcVIpDB0mBv
+/xpuSfUClswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1lDQ0FU
Vi9iOTZqUndjVklwREIwbUJ2LV94cHVTZlVDbHMuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL2I5NmpSd2NWSXBEQjBtQnYtX3hwdVNmVUNscy5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NZQ0NBVFYvSXpONWwxTHRjZzdlNzdO
cEo3UTFqQlpxV21vLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AmeCLDANBgkqhkiG9w0BAQsFAAOCAQEABpK80mpzgj5wi5rnY0wNs4xtSSQ/r6Cz
skWc3O05ZX7Tj875eDfEtXFqt2zH7Pa4S7ZUpq470ILhLb7JRqcPA/6zfUzg1dVz
cZLGSwEUw7YgX2/1Prrbf6O26yotIYGRfC7g2wjChz5nWIu3LSF5C0j5EWkAKSxP
io9ewVTdjYuP5yzsf8ZgJj8MVFpJnOsaJ4gxydhBGVtskmIQafZhYzpuO/U1GBFF
QRw28E1uz2mbmxWHceUFc8zej9FhET69W5Srt5Xt9yu+Cd0KJpjLCLtwg2bGVVrw
FG7sp7x2Z6yKNjSZ70+pUiA9Gy7bZzVkAGQqwdS3mWzZrQLqnG5K8g==
-----END CERTIFICATE-----
Generated at Thu Apr 17 02:44:25 2025 by rpki-client