Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/DV8rCMlgFlrhg8i0q5lU4Iyg9zQ.roa
File: DV8rCMlgFlrhg8i0q5lU4Iyg9zQ.roa (raw, json)
Hash identifier: 9hXs25Zxkq+9cEzjO36Pvy3FDCIA2oraB4XohPANitk=
Subject key identifier: 0D:5F:2B:08:C9:60:16:5A:E1:83:C8:B4:AB:99:54:E0:8C:A0:F7:34
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 1071
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/DV8rCMlgFlrhg8i0q5lU4Iyg9zQ.roa
Signing time: Mon 26 Aug 2024 05:16:25 +0000
ROA not before: Mon 26 Aug 2024 05:16:25 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131142
IP address blocks: 203.79.204.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:27:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4209 (0x1071)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Aug 26 05:16:25 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=0D5F2B08C960165AE183C8B4AB9954E08CA0F734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bf:28:ad:7f:7c:0c:cb:a6:d0:29:fa:db:df:
a9:d0:0b:74:19:a4:9a:68:bd:3b:7b:cf:51:1c:c6:
e9:cc:1f:c6:3a:39:03:29:82:a9:53:d0:5d:f2:1a:
15:f7:b3:f4:58:3c:eb:1f:45:c2:27:b5:95:ae:1b:
bb:bc:5e:c1:93:ef:c4:00:ce:52:26:9b:31:f4:26:
8a:4c:47:da:55:8f:89:bc:4f:fa:90:5e:7e:43:d1:
60:58:74:f9:59:86:f1:fd:29:0b:14:a1:f3:66:5a:
45:9e:db:2f:ab:81:58:bb:b2:17:13:c9:ca:51:dd:
8a:7f:cb:51:4f:6b:4c:93:a0:38:28:53:4e:13:6a:
45:e0:21:d3:3d:78:9c:a1:8c:80:8c:6c:6e:98:7d:
f1:0d:3b:b1:0a:bb:9b:61:0f:9e:e3:96:8c:73:40:
85:e4:36:17:aa:00:78:9d:2b:2f:3b:37:f7:a7:5d:
57:62:06:9e:22:e6:e7:39:74:50:9c:9f:b6:2b:06:
9f:c4:34:82:06:c7:c7:6a:75:61:c6:e8:89:8d:b8:
a5:26:7c:26:dc:83:47:27:60:53:9a:0e:89:f2:9f:
b6:77:7f:86:a0:98:40:54:d8:7d:21:d0:38:7e:ae:
9a:d2:6c:17:ac:88:b1:6e:b1:ae:20:8c:c8:87:0c:
b8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:5F:2B:08:C9:60:16:5A:E1:83:C8:B4:AB:99:54:E0:8C:A0:F7:34
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/DV8rCMlgFlrhg8i0q5lU4Iyg9zQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.79.204.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:02:a1:c0:a3:7a:60:9e:40:d5:60:1f:04:18:77:49:7b:3e:
2c:a1:84:9f:a5:0c:2c:86:f8:40:7a:bd:42:1b:c2:f6:65:de:
3c:75:14:df:32:9b:c4:bd:2c:1c:77:6e:b0:f2:f1:81:b5:d9:
71:ae:db:91:d7:27:d3:7e:d0:c7:fb:5b:a0:38:53:cd:32:50:
27:2f:39:be:50:78:05:c0:dc:e3:60:9b:18:9f:4a:f2:de:7d:
cf:b9:06:05:2b:e3:af:cf:cd:40:bf:46:d3:b8:3e:c3:cc:68:
95:0e:38:cc:cb:38:c6:a0:59:b0:26:e2:a0:52:fe:e3:14:ae:
57:8e:ad:a8:cf:f3:ed:6a:80:b5:26:b4:d1:ac:8b:0c:32:ef:
b7:f9:a0:9b:80:de:c6:fd:ab:b6:af:cf:cd:8f:b8:a2:5c:a2:
b1:f1:69:da:01:2a:0a:44:2a:d0:7a:e9:e8:e9:14:53:46:38:
7f:58:46:07:ea:18:ea:5a:bc:c7:51:5e:11:3d:c5:e4:75:a1:
26:7c:7a:36:81:66:9d:a7:e0:b1:14:c4:53:93:b9:88:af:28:
72:ee:10:c8:1a:43:c5:14:4b:11:81:1e:c4:53:25:72:59:7e:
e7:f8:5f:cc:2e:d8:0c:23:96:64:5e:3a:d9:bc:69:66:dd:4d:
04:88:cf:8b
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICEHEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2
M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw
NTE2MjVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBENUYyQjA4Qzk2MDE2
NUFFMTgzQzhCNEFCOTk1NEUwOENBMEY3MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGvyitf3wMy6bQKfrb36nQC3QZpJpovTt7z1EcxunMH8Y6OQMp
gqlT0F3yGhX3s/RYPOsfRcIntZWuG7u8XsGT78QAzlImmzH0JopMR9pVj4m8T/qQ
Xn5D0WBYdPlZhvH9KQsUofNmWkWe2y+rgVi7shcTycpR3Yp/y1FPa0yToDgoU04T
akXgIdM9eJyhjICMbG6YffENO7EKu5thD57jloxzQIXkNheqAHidKy87N/enXVdi
Bp4i5uc5dFCcn7YrBp/ENIIGx8dqdWHG6ImNuKUmfCbcg0cnYFOaDonyn7Z3f4ag
mEBU2H0h0Dh+rprSbBesiLFusa4gjMiHDLh9AgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUDV8rCMlgFlrhg8i0q5lU4Iyg9zQwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D
T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt
T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0RWOHJDTWxnRmxyaGc4aTBxNWxVNEl5
Zzl6US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHLT8wwDQYJ
KoZIhvcNAQELBQADggEBALUCocCjemCeQNVgHwQYd0l7PiyhhJ+lDCyG+EB6vUIb
wvZl3jx1FN8ym8S9LBx3brDy8YG12XGu25HXJ9N+0Mf7W6A4U80yUCcvOb5QeAXA
3ONgmxifSvLefc+5BgUr46/PzUC/RtO4PsPMaJUOOMzLOMagWbAm4qBS/uMUrleO
rajP8+1qgLUmtNGsiwwy77f5oJuA3sb9q7avz82PuKJcorHxadoBKgpEKtB66ejp
FFNGOH9YRgfqGOpavMdRXhE9xeR1oSZ8ejaBZp2n4LEUxFOTuYivKHLuEMgaQ8UU
SxGBHsRTJXJZfuf4X8wu2AwjlmReOtm8aWbdTQSIz4s=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:43:19 2025 by rpki-client