Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DODOLTD/W9b9W4LLPbccyns2jjwR2VJOtxI.roa
File: W9b9W4LLPbccyns2jjwR2VJOtxI.roa (raw, json)
Hash identifier: i4AZqZZ5gnUa77gQUliL5YD480rRm1cMMfQeZH/116c=
Subject key identifier: 5B:D6:FD:5B:82:CB:3D:B7:1C:CA:7B:36:8E:3C:11:D9:52:4E:B7:12
Certificate issuer: /CN=F38A5E6BF643B818BE3CAE1432E632BB1D1763FA
Certificate serial: 03
Authority key identifier: F3:8A:5E:6B:F6:43:B8:18:BE:3C:AE:14:32:E6:32:BB:1D:17:63:FA
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/84pea_ZDuBi-PK4UMuYyux0XY_o.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DODOLTD/W9b9W4LLPbccyns2jjwR2VJOtxI.roa
Signing time: Fri 13 Dec 2024 04:18:11 +0000
ROA not before: Fri 13 Dec 2024 04:18:11 +0000
ROA not after: Thu 27 Nov 2025 15:30:38 +0000
asID: 17413
IP address blocks: 2401:dae0::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:16:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F38A5E6BF643B818BE3CAE1432E632BB1D1763FA
Validity
Not Before: Dec 13 04:18:11 2024 GMT
Not After : Nov 27 15:30:38 2025 GMT
Subject: CN=5BD6FD5B82CB3DB71CCA7B368E3C11D9524EB712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:74:db:ac:64:fb:70:6a:d8:00:c3:cc:bb:6b:
de:40:49:2e:4f:16:36:76:a9:ac:80:9b:69:64:b7:
56:6b:e2:c0:82:28:4c:1b:96:dc:4f:3d:d4:c1:bd:
ac:81:91:a7:2a:83:ae:2f:0f:98:70:9a:55:56:ce:
ad:aa:7a:49:42:5b:da:fd:86:a7:31:fe:18:4a:42:
8b:f0:34:9e:af:50:64:c9:27:15:3c:71:9a:d1:91:
93:6f:9d:6e:bc:90:bd:0b:86:34:6a:40:e9:c5:73:
dc:ea:28:87:06:11:68:57:53:fb:d1:22:9a:5f:b8:
3a:ee:56:11:dd:44:1f:26:4b:dc:ab:11:d9:b6:d4:
77:fb:ed:2d:3f:f7:de:c2:09:39:7a:d4:fd:3b:af:
c8:6b:fe:61:cf:34:12:9c:31:da:74:0b:c2:d0:88:
d8:6f:0f:8f:08:07:07:98:51:0d:df:19:3e:f3:62:
65:a4:e8:b7:05:05:14:ba:4c:6b:c2:32:c2:ec:5e:
c5:b2:b5:c6:87:ab:13:62:c9:17:99:ad:42:43:b6:
85:25:0a:2f:57:e8:43:2a:f7:e2:04:89:23:06:f2:
e5:d7:79:55:ea:15:05:0e:3b:45:96:e3:8c:00:93:
be:75:ec:3b:e7:fb:3b:8b:2c:ac:72:3f:7b:c7:5d:
dd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D6:FD:5B:82:CB:3D:B7:1C:CA:7B:36:8E:3C:11:D9:52:4E:B7:12
X509v3 Authority Key Identifier:
keyid:F3:8A:5E:6B:F6:43:B8:18:BE:3C:AE:14:32:E6:32:BB:1D:17:63:FA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DODOLTD/84pea_ZDuBi-PK4UMuYyux0XY_o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/84pea_ZDuBi-PK4UMuYyux0XY_o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DODOLTD/W9b9W4LLPbccyns2jjwR2VJOtxI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:dae0::/32
Signature Algorithm: sha256WithRSAEncryption
48:ea:a7:88:e5:cf:70:f7:ec:ad:6c:78:14:48:59:77:ec:86:
23:a2:3b:de:76:e0:03:a2:04:8c:42:88:17:5a:04:a6:74:5a:
18:d2:a8:50:18:5b:34:8d:07:78:19:6c:c5:10:db:43:8f:78:
6c:ed:60:f2:0d:6b:d6:76:c6:b8:27:c0:4e:19:fd:59:cf:bc:
05:a0:16:03:d0:06:8d:f2:7a:7a:da:51:5e:58:ff:12:a7:d0:
80:a4:3a:9e:9d:3a:4e:45:ef:cf:27:e8:aa:5a:c5:1c:7c:16:
dc:18:bb:3a:d9:d8:fd:aa:a0:fd:41:ed:c6:28:a7:93:58:fe:
de:4e:44:dd:91:2c:0b:0d:84:30:cb:66:f3:e3:7a:49:cb:cd:
a6:d1:50:e9:24:3c:8e:7c:60:d8:a0:c2:08:c0:31:f5:b7:5a:
e6:a6:4c:40:6f:7b:ba:e6:06:f5:d2:55:6e:dd:72:a7:5b:b5:
35:7f:d1:f5:97:6b:7b:c9:17:51:24:86:91:66:19:ab:c6:10:
30:47:e6:12:dd:65:cc:8d:3c:e1:37:d6:ac:0d:21:2c:97:32:
8e:4d:01:a1:da:52:68:8d:80:3b:21:1e:16:8d:3b:86:5f:53:
89:6a:0a:a5:1f:33:49:7f:c9:e2:56:28:86:a6:a7:f3:b7:04:
c5:7e:ef:01
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGMzhB
NUU2QkY2NDNCODE4QkUzQ0FFMTQzMkU2MzJCQjFEMTc2M0ZBMB4XDTI0MTIxMzA0
MTgxMVoXDTI1MTEyNzE1MzAzOFowMzExMC8GA1UEAxMoNUJENkZENUI4MkNCM0RC
NzFDQ0E3QjM2OEUzQzExRDk1MjRFQjcxMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK1026xk+3Bq2ADDzLtr3kBJLk8WNnaprICbaWS3VmviwIIoTBuW
3E891MG9rIGRpyqDri8PmHCaVVbOrap6SUJb2v2GpzH+GEpCi/A0nq9QZMknFTxx
mtGRk2+dbryQvQuGNGpA6cVz3OoohwYRaFdT+9Eiml+4Ou5WEd1EHyZL3KsR2bbU
d/vtLT/33sIJOXrU/TuvyGv+Yc80Epwx2nQLwtCI2G8PjwgHB5hRDd8ZPvNiZaTo
twUFFLpMa8IywuxexbK1xoerE2LJF5mtQkO2hSUKL1foQyr34gSJIwby5dd5VeoV
BQ47RZbjjACTvnXsO+f7O4ssrHI/e8dd3R8CAwEAAaOCAfEwggHtMB0GA1UdDgQW
BBRb1v1bgss9txzKezaOPBHZUk63EjAfBgNVHSMEGDAWgBTzil5r9kO4GL48rhQy
5jK7HRdj+jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ET0RPTFRE
Lzg0cGVhX1pEdUJpLVBLNFVNdVl5dXgwWFlfby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvODRwZWFfWkR1QmktUEs0VU11WXl1eDBYWV9vLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRE9ET0xURC9XOWI5VzRMTFBiY2N5bnMy
amp3UjJWSk90eEkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMu
dHcvcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUA
JAHa4DANBgkqhkiG9w0BAQsFAAOCAQEASOqniOXPcPfsrWx4FEhZd+yGI6I73nbg
A6IEjEKIF1oEpnRaGNKoUBhbNI0HeBlsxRDbQ494bO1g8g1r1nbGuCfAThn9Wc+8
BaAWA9AGjfJ6etpRXlj/EqfQgKQ6np06TkXvzyfoqlrFHHwW3Bi7OtnY/aqg/UHt
xiink1j+3k5E3ZEsCw2EMMtm8+N6ScvNptFQ6SQ8jnxg2KDCCMAx9bda5qZMQG97
uuYG9dJVbt1yp1u1NX/R9Zdre8kXUSSGkWYZq8YQMEfmEt1lzI084TfWrA0hLJcy
jk0BodpSaI2AOyEeFo07hl9TiWoKpR8zSX/J4lYohqan87cExX7vAQ==
-----END CERTIFICATE-----
Generated at Wed Apr 16 06:54:58 2025 by rpki-client