Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/D5QpPHJR7AS6MFVvaaVXUsCitUc.roa
File: D5QpPHJR7AS6MFVvaaVXUsCitUc.roa (raw, json)
Hash identifier: 5f78PIi4slwxCaoAsqKKSgl/GVl9jDjCaLoiVVZPYrw=
Subject key identifier: 0F:94:29:3C:72:51:EC:04:BA:30:55:6F:69:A5:57:52:C0:A2:B5:47
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 1062
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/D5QpPHJR7AS6MFVvaaVXUsCitUc.roa
Signing time: Mon 26 Aug 2024 05:16:22 +0000
ROA not before: Mon 26 Aug 2024 05:16:22 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17709
IP address blocks: 210.63.216.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:27:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4194 (0x1062)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Aug 26 05:16:22 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=0F94293C7251EC04BA30556F69A55752C0A2B547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ad:b4:df:ed:de:9d:06:22:98:12:5c:09:d2:
be:a1:2d:c1:34:de:ab:45:7c:99:96:b0:5a:87:46:
14:df:45:38:76:21:1f:86:e2:b2:64:11:ee:e0:67:
52:41:53:56:a6:c9:a6:31:04:e7:aa:d9:10:c8:79:
96:84:58:ee:0f:eb:be:b6:4f:27:ac:ff:2a:28:b7:
85:b8:bc:62:ea:7a:8f:d3:54:47:13:fa:10:30:c2:
e0:96:a9:fb:27:1f:78:5f:5a:c1:6c:dd:41:da:2d:
ab:ed:5c:27:6c:cf:f9:08:a1:5a:4b:42:1e:24:26:
ff:d1:22:2e:03:96:cd:3e:b0:34:f9:4b:f5:18:74:
1f:d6:28:0e:46:61:03:f0:36:8b:c5:25:ce:a3:32:
a7:3a:6c:9d:f4:bb:3c:46:df:b3:52:14:13:64:1f:
0d:d2:75:0d:45:c4:d2:8d:f3:85:ee:30:ef:57:89:
17:56:9f:f0:b6:bb:30:71:c5:21:0c:55:c3:fe:94:
93:d1:e3:0a:f4:06:91:a3:03:7c:4c:48:66:2e:05:
d6:6f:92:02:98:5e:f3:e6:7c:bf:fe:13:b0:6d:6c:
97:26:ee:d5:fa:45:0e:ad:a7:81:02:95:0b:65:6a:
93:b7:80:31:18:2b:b3:51:64:cb:e0:00:f9:ff:93:
f5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:94:29:3C:72:51:EC:04:BA:30:55:6F:69:A5:57:52:C0:A2:B5:47
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/D5QpPHJR7AS6MFVvaaVXUsCitUc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.216.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:f2:77:b9:54:7d:3b:48:ea:ef:4f:3c:56:29:f0:76:1a:bc:
34:2f:80:0c:13:88:a9:82:ea:b4:3c:37:0c:6e:a5:35:83:7f:
02:54:f9:98:a9:86:28:07:7f:30:72:36:49:f3:15:94:91:36:
a3:bc:c4:93:5b:8d:8e:47:6f:73:fa:e4:8b:ba:a3:34:39:ae:
c9:4b:a1:0a:1d:39:ec:da:b7:29:f3:2a:27:ce:2b:f4:02:dd:
cc:07:14:90:0c:b0:04:50:a4:d4:b2:7e:38:28:79:2c:f0:3d:
d8:62:8d:52:6a:a7:7c:28:c0:9e:61:1a:d6:23:d9:cb:93:08:
d9:af:30:19:00:cc:0e:85:74:c5:b9:10:bf:48:22:b9:c1:17:
08:ce:94:e7:27:9d:b9:9e:d1:7d:01:d1:09:f7:4b:03:0a:0e:
84:7e:42:86:d6:3e:0c:08:37:f4:9a:7b:23:6e:0f:18:9a:ac:
31:ab:88:3c:31:11:ea:e0:0a:c2:8d:99:6b:99:d6:6c:29:e2:
7a:b3:14:45:a3:d7:e7:48:56:ba:0f:ce:73:6f:3e:74:ae:7c:
5f:6e:5f:ec:6e:0b:1e:ce:4a:ec:08:ce:ad:85:e7:4c:d2:63:
fc:1a:c7:10:26:dc:e9:1e:ad:38:9b:0e:19:b4:7f:b3:47:3c:
e6:74:24:d8
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICEGIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2
M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw
NTE2MjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBGOTQyOTNDNzI1MUVD
MDRCQTMwNTU2RjY5QTU1NzUyQzBBMkI1NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9rbTf7d6dBiKYElwJ0r6hLcE03qtFfJmWsFqHRhTfRTh2IR+G
4rJkEe7gZ1JBU1amyaYxBOeq2RDIeZaEWO4P6762Tyes/yoot4W4vGLqeo/TVEcT
+hAwwuCWqfsnH3hfWsFs3UHaLavtXCdsz/kIoVpLQh4kJv/RIi4Dls0+sDT5S/UY
dB/WKA5GYQPwNovFJc6jMqc6bJ30uzxG37NSFBNkHw3SdQ1FxNKN84XuMO9XiRdW
n/C2uzBxxSEMVcP+lJPR4wr0BpGjA3xMSGYuBdZvkgKYXvPmfL/+E7BtbJcm7tX6
RQ6tp4EClQtlapO3gDEYK7NRZMvgAPn/k/WbAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUD5QpPHJR7AS6MFVvaaVXUsCitUcwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D
T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt
T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0Q1UXBQSEpSN0FTNk1GVnZhYVZYVXND
aXRVYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALSP9gwDQYJ
KoZIhvcNAQELBQADggEBAE7yd7lUfTtI6u9PPFYp8HYavDQvgAwTiKmC6rQ8Nwxu
pTWDfwJU+ZiphigHfzByNknzFZSRNqO8xJNbjY5Hb3P65Iu6ozQ5rslLoQodOeza
tynzKifOK/QC3cwHFJAMsARQpNSyfjgoeSzwPdhijVJqp3wowJ5hGtYj2cuTCNmv
MBkAzA6FdMW5EL9IIrnBFwjOlOcnnbme0X0B0Qn3SwMKDoR+QobWPgwIN/SaeyNu
DxiarDGriDwxEergCsKNmWuZ1mwp4nqzFEWj1+dIVroPznNvPnSufF9uX+xuCx7O
SuwIzq2F50zSY/waxxAm3OkerTibDhm0f7NHPOZ0JNg=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:52:13 2025 by rpki-client