Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/KYqI7yPrm8PFyU3HN-pY7yJHGMI.roa
File: KYqI7yPrm8PFyU3HN-pY7yJHGMI.roa (raw, json)
Hash identifier: QE6fzVvJHrQ72yrb6JeLGzWbLwEwM391J7GSccGhqjc=
Subject key identifier: 29:8A:88:EF:23:EB:9B:C3:C5:C9:4D:C7:37:EA:58:EF:22:47:18:C2
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1635
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/KYqI7yPrm8PFyU3HN-pY7yJHGMI.roa
Signing time: Mon 26 Aug 2024 05:21:54 +0000
ROA not before: Mon 26 Aug 2024 05:21:54 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131627
IP address blocks: 106.105.96.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:07:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5685 (0x1635)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Aug 26 05:21:54 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=298A88EF23EB9BC3C5C94DC737EA58EF224718C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:26:80:88:0c:55:c7:f2:d8:d4:24:59:93:2f:
5d:be:5e:90:1a:2b:e1:5f:ba:a1:f4:ef:1e:ff:80:
12:80:c6:b7:0f:d7:77:b4:15:7e:db:5a:d4:b6:eb:
46:40:e5:5c:74:b5:7e:aa:01:61:2f:c3:b5:7f:73:
0d:d9:08:05:81:c8:65:db:bb:28:c4:3a:8b:83:46:
31:74:89:ee:43:9c:55:77:ba:be:1a:94:75:09:bf:
61:e9:b6:9e:cb:26:7d:c2:a5:63:24:46:63:ad:b5:
34:a0:00:a1:7b:0d:d9:f9:e0:59:8c:29:f3:46:a3:
38:56:e8:a7:d1:e4:e6:9a:ce:9b:b0:ba:33:47:0d:
9e:df:79:eb:56:4c:11:9e:88:38:f9:bc:86:b6:e3:
0f:de:6f:1a:d0:a0:0d:ba:1e:fb:3a:4d:4d:3e:02:
30:7a:01:16:b6:08:76:10:11:df:2e:4d:f2:ed:26:
18:d8:25:d2:98:96:f5:62:f5:69:2b:20:56:0b:0d:
ff:8e:04:3a:f2:6e:09:ad:77:ce:c6:75:1e:a5:61:
01:e1:83:90:e9:24:ee:92:ba:79:1c:20:30:95:fe:
ea:d8:d2:16:a8:3c:78:e9:b4:28:91:27:21:a2:70:
6c:f0:1f:49:6d:1b:5e:37:45:d2:06:92:c5:2e:a5:
70:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8A:88:EF:23:EB:9B:C3:C5:C9:4D:C7:37:EA:58:EF:22:47:18:C2
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/KYqI7yPrm8PFyU3HN-pY7yJHGMI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.96.0/21
Signature Algorithm: sha256WithRSAEncryption
7f:98:c0:f5:ab:be:02:bd:31:0d:ea:73:70:6c:9f:f7:77:c4:
ee:2d:29:75:2a:02:10:3f:30:f8:91:79:73:f5:35:00:7b:7b:
8d:be:28:16:ef:8e:41:ad:4a:78:c2:78:f5:32:c7:26:3d:f9:
31:55:62:4b:56:6c:30:e1:ea:4e:c9:66:e0:67:31:93:85:03:
75:a0:08:23:97:fa:b6:97:c7:46:e6:d6:8c:70:3d:cf:1f:5f:
dc:9a:f6:2a:04:fa:8f:86:30:5d:18:7a:a7:fa:43:38:ae:8f:
9a:2d:1d:83:2d:18:f2:46:27:f6:d9:33:8a:f2:bf:fb:61:07:
0a:99:ff:dd:17:0f:f8:83:1c:ce:b6:2a:d5:ce:b7:66:80:19:
94:2c:0d:a9:b3:f4:8f:19:0c:9d:38:48:eb:bf:73:8b:85:1c:
63:15:fd:6d:06:e2:88:2f:49:a1:fe:b0:71:2b:71:99:8c:07:
13:75:03:2a:53:60:e8:d9:66:9c:4e:f5:82:91:b2:0c:3a:59:
3f:43:41:de:b1:29:61:45:1a:51:75:9f:97:68:a3:7d:15:3d:
e3:83:b4:92:18:45:ca:c9:a0:c9:51:11:1e:c2:c7:a6:ad:ad:
f7:69:77:bf:a1:95:7e:ca:a8:40:2a:c0:cf:20:e7:fc:ee:b0:
19:db:4b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:43:47 2025 by rpki-client