Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/QtmYMwyXBt6yjsI7aJMUvoMFFX4.roa
File: QtmYMwyXBt6yjsI7aJMUvoMFFX4.roa (raw, json)
Hash identifier: qG9Kti8KVt66Q8B0FiXVTa0jqxrsvmB+lxH0mZzJsL8=
Subject key identifier: 42:D9:98:33:0C:97:06:DE:B2:8E:C2:3B:68:93:14:BE:83:05:15:7E
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 160D
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/QtmYMwyXBt6yjsI7aJMUvoMFFX4.roa
Signing time: Mon 26 Aug 2024 05:21:43 +0000
ROA not before: Mon 26 Aug 2024 05:21:43 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131586
IP address blocks: 106.106.0.0/17 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:07:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5645 (0x160d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Aug 26 05:21:43 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=42D998330C9706DEB28EC23B689314BE8305157E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:77:8b:c2:24:74:4c:7d:86:a1:bb:72:c7:1b:
ac:eb:82:e8:95:bd:eb:4e:da:22:16:3d:82:74:1f:
65:54:e6:33:13:df:20:00:57:eb:a2:e9:c7:0d:0b:
af:b7:ac:50:29:85:d0:7d:81:e8:74:a1:ea:62:74:
f6:c1:b6:4b:0e:40:35:5a:0b:d8:34:48:c4:ac:51:
62:c3:e2:ea:da:02:44:b6:aa:0f:14:48:e2:5a:20:
45:8a:2d:96:2a:14:46:34:38:56:b2:28:fb:e6:07:
b3:8d:9f:12:97:be:47:1c:b9:fd:24:cf:6a:e2:54:
49:95:15:65:5b:dd:b3:39:86:77:ef:c1:0b:f4:43:
ad:8d:45:24:34:70:71:91:d1:cc:7f:bf:8b:00:8c:
18:c7:23:ac:cc:4c:96:a3:89:44:03:3c:4d:b0:30:
c8:35:2d:3d:b9:2a:17:12:4e:8b:75:ee:35:41:37:
16:9f:ab:ee:76:1e:7b:a4:ce:d2:8b:76:c7:1f:59:
69:93:cb:4b:06:66:73:75:5d:25:73:5e:45:34:a0:
8a:02:36:cd:a6:3a:b0:b8:c0:2c:ea:38:58:b2:8d:
7b:e6:2a:8c:13:0c:32:0c:27:61:b9:35:a6:71:8d:
29:2d:e2:88:be:c8:af:d3:61:ff:ae:91:60:65:f1:
5c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D9:98:33:0C:97:06:DE:B2:8E:C2:3B:68:93:14:BE:83:05:15:7E
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/QtmYMwyXBt6yjsI7aJMUvoMFFX4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.106.0.0/17
Signature Algorithm: sha256WithRSAEncryption
22:59:3b:6d:30:7f:8e:97:28:a6:bb:c6:20:63:af:a5:a5:a1:
a1:06:1e:74:cf:bb:16:76:30:30:cd:ac:3e:af:87:7b:a0:bb:
7c:5c:a6:19:5c:11:57:6d:03:1b:cd:40:2b:d7:6f:7f:25:9b:
98:8e:f8:3e:b2:c9:59:12:08:29:5c:ad:28:c9:d9:41:11:8c:
24:4e:18:e2:c1:cd:9c:71:ca:0f:e6:01:f1:0d:94:25:20:a1:
dc:c3:77:5f:43:18:28:5b:10:fc:37:54:38:14:81:26:53:64:
fa:c8:b5:f4:f2:d8:f9:df:b4:4b:17:f9:b6:51:4e:cd:77:fc:
f5:73:69:b1:e8:c9:b6:63:f0:3d:6c:56:ba:8f:17:8a:a5:ae:
b7:78:bf:b0:d5:b7:00:d1:10:69:39:e2:79:49:bb:65:dd:95:
94:ee:52:4a:29:db:07:1d:df:3c:da:8c:04:f5:30:95:b0:de:
55:08:05:08:f4:f9:02:3a:34:5d:59:55:c7:d2:57:c5:3a:5f:
47:7e:c5:40:9d:b6:41:4d:7b:24:50:97:89:d3:8e:ae:b6:25:
b0:3f:50:49:35:0a:29:75:5e:2b:92:84:1a:3c:95:69:92:00:
6f:b8:26:56:0d:98:81:a0:a5:05:2f:08:23:1f:a9:65:07:e4:
2c:48:39:60
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICFg0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNDA4MjYw
NTIxNDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQyRDk5ODMzMEM5NzA2
REVCMjhFQzIzQjY4OTMxNEJFODMwNTE1N0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKd4vCJHRMfYahu3LHG6zrguiVvetO2iIWPYJ0H2VU5jMT3yAA
V+ui6ccNC6+3rFAphdB9geh0oepidPbBtksOQDVaC9g0SMSsUWLD4uraAkS2qg8U
SOJaIEWKLZYqFEY0OFayKPvmB7ONnxKXvkccuf0kz2riVEmVFWVb3bM5hnfvwQv0
Q62NRSQ0cHGR0cx/v4sAjBjHI6zMTJajiUQDPE2wMMg1LT25KhcSTot17jVBNxaf
q+52HnukztKLdscfWWmTy0sGZnN1XSVzXkU0oIoCNs2mOrC4wCzqOFiyjXvmKowT
DDIMJ2G5NaZxjSkt4oi+yK/TYf+ukWBl8VxBAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUQtmYMwyXBt6yjsI7aJMUvoMFFX4wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvUXRtWU13eVhCdDZ5anNJN2FKTVV2
b01GRlg0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB2pqADAN
BgkqhkiG9w0BAQsFAAOCAQEAIlk7bTB/jpcoprvGIGOvpaWhoQYedM+7FnYwMM2s
Pq+He6C7fFymGVwRV20DG81AK9dvfyWbmI74PrLJWRIIKVytKMnZQRGMJE4Y4sHN
nHHKD+YB8Q2UJSCh3MN3X0MYKFsQ/DdUOBSBJlNk+si19PLY+d+0Sxf5tlFOzXf8
9XNpsejJtmPwPWxWuo8XiqWut3i/sNW3ANEQaTnieUm7Zd2VlO5SSinbBx3fPNqM
BPUwlbDeVQgFCPT5Ajo0XVlVx9JXxTpfR37FQJ22QU17JFCXidOOrrYlsD9QSTUK
KXVeK5KEGjyVaZIAb7gmVg2YgaClBS8IIx+pZQfkLEg5YA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:52:00 2025 by rpki-client