Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/UHKBky3lAiDUjmBR57f2wnq396M.roa
File: UHKBky3lAiDUjmBR57f2wnq396M.roa (raw, json)
Hash identifier: nhpwld2ctJeCq4UIiNuR2gUH8IELLTIsi033v31L9nU=
Subject key identifier: 50:72:81:93:2D:E5:02:20:D4:8E:60:51:E7:B7:F6:C2:7A:B7:F7:A3
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1613
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/UHKBky3lAiDUjmBR57f2wnq396M.roa
Signing time: Mon 26 Aug 2024 05:21:45 +0000
ROA not before: Mon 26 Aug 2024 05:21:45 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18049
IP address blocks: 175.183.0.0/19 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:07:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5651 (0x1613)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Aug 26 05:21:45 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=507281932DE50220D48E6051E7B7F6C27AB7F7A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e5:20:c8:46:85:15:47:47:01:6e:f7:8a:92:
26:a2:a1:3f:ab:84:be:58:2d:50:32:47:bd:00:aa:
d7:f9:57:ed:59:2a:69:9d:fd:cf:5f:4f:ae:8a:4b:
ad:03:ac:7b:ae:c7:1c:9e:4f:60:9b:af:60:6c:5e:
a4:fc:f9:3e:68:06:b4:4a:e4:e3:2e:76:f0:b9:74:
1a:30:c3:c3:66:0f:ff:77:c8:ea:e2:38:14:8c:ae:
7a:f9:23:69:fe:08:f9:69:4a:76:be:f5:4a:3c:8d:
9d:13:1e:ee:a0:1e:fb:60:5b:5e:4a:c5:4c:b8:4b:
25:26:40:a2:7b:28:56:59:d6:30:35:68:ef:e3:e2:
58:4d:66:c3:99:f2:42:f6:0a:09:71:f7:cd:ca:18:
15:fa:c0:f4:99:6a:7b:df:9d:4c:fb:00:fb:c9:21:
88:ca:c3:8d:e3:aa:e4:7b:e1:76:ab:92:76:d5:2c:
18:b2:e8:96:da:e6:c4:42:66:79:3a:0d:bb:9c:f7:
c9:d9:2a:78:36:f8:97:fd:e7:84:7b:f9:2f:27:94:
8d:dd:97:96:e4:92:bb:59:b0:c3:0f:31:21:53:27:
f5:df:84:76:1f:00:48:72:1a:6d:b1:c8:e5:cf:a8:
70:33:d4:2d:3e:f1:5e:38:16:3d:0f:b2:24:dd:2a:
68:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:72:81:93:2D:E5:02:20:D4:8E:60:51:E7:B7:F6:C2:7A:B7:F7:A3
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/UHKBky3lAiDUjmBR57f2wnq396M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.183.0.0/19
Signature Algorithm: sha256WithRSAEncryption
6c:ff:1c:24:54:2e:50:a3:d0:72:7a:f6:8b:94:19:d3:d2:5f:
1c:e0:6f:e3:be:3f:75:48:6e:0d:8b:06:55:1b:0f:61:83:54:
5b:34:42:2a:45:45:9b:18:34:e3:c5:a4:44:c2:ae:7c:62:e2:
20:d5:ab:33:a5:da:d4:6f:42:69:69:71:44:37:98:b5:46:13:
61:15:c9:d0:13:0b:f7:c6:1b:c6:f8:42:e5:1e:7f:20:28:b8:
80:ba:df:a8:9c:cd:6f:78:7e:b8:b1:07:2b:24:16:88:a7:6b:
76:a1:e7:90:53:30:27:1b:6d:f7:dd:fb:15:7b:d2:36:5b:37:
21:0e:c3:ea:4b:aa:01:99:27:83:d1:3f:b9:a4:c3:b9:7c:ba:
57:a9:f7:58:82:87:a7:4d:be:fa:63:2e:b0:12:28:b3:79:4b:
2d:91:59:2b:13:ba:74:de:3f:d2:32:7d:9b:2b:f4:ed:f2:38:
20:75:55:92:c8:13:6d:d4:c0:69:33:bc:00:2f:c9:9a:0d:7e:
dd:57:fe:2b:d5:73:df:05:ec:e2:07:e3:e2:a5:b2:e3:cb:49:
dd:56:34:3d:d1:8c:13:d8:68:00:f6:82:97:f1:b6:24:e4:16:
db:81:cf:d1:40:41:16:6c:37:08:38:da:bb:11:65:7d:73:02:
0b:d5:ef:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:39:31 2025 by rpki-client