Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/gb8tNgCk3zDFulnM3IXuvaQJVDo.roa
File: gb8tNgCk3zDFulnM3IXuvaQJVDo.roa (raw, json)
Hash identifier: uslgMPQ5WYBpeGPqSJr2gbrK88UhD0jsyswolLAFNyo=
Subject key identifier: 81:BF:2D:36:00:A4:DF:30:C5:BA:59:CC:DC:85:EE:BD:A4:09:54:3A
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 16EC
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/gb8tNgCk3zDFulnM3IXuvaQJVDo.roa
Signing time: Mon 26 Aug 2024 05:22:47 +0000
ROA not before: Mon 26 Aug 2024 05:22:47 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18049
IP address blocks: 106.107.192.0/20 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5868 (0x16ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Aug 26 05:22:47 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=81BF2D3600A4DF30C5BA59CCDC85EEBDA409543A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bc:4e:31:53:d5:08:d9:47:eb:f4:bc:de:aa:
41:0d:68:61:1c:c9:f8:0a:a2:a9:58:50:cc:ff:d0:
64:35:0c:51:9b:23:dd:ac:33:ee:5e:4e:1c:da:8e:
52:64:76:9a:72:01:84:91:95:09:32:31:b5:c9:87:
26:9d:bb:eb:0b:5c:c0:49:6f:03:bf:1c:13:ef:ac:
48:c5:4a:f4:f6:bb:57:cb:73:d6:81:33:77:e9:4f:
39:bd:b8:80:b6:c2:33:7c:b4:32:51:55:9e:37:b6:
bb:61:06:8c:e0:5a:79:6e:7a:fa:a9:e1:2b:fb:f2:
f3:67:00:12:69:c6:ff:da:22:7a:57:00:1d:78:f5:
19:b0:b2:21:a9:11:5e:67:a8:2e:b3:4a:ab:3a:51:
d7:34:02:81:63:8d:f0:42:b3:17:b9:bd:e0:3c:bd:
b2:73:b9:09:d3:3d:87:53:a4:8d:94:f3:80:98:3b:
19:52:82:a6:e4:d4:7a:23:62:f3:ce:e0:16:97:82:
82:45:cb:86:60:bb:be:e0:b3:84:04:cb:48:82:78:
7b:9a:7e:7e:53:c9:2a:a0:1a:db:8b:9f:2a:9f:97:
05:1d:7d:a6:c7:20:a2:da:20:a3:ac:e4:27:5d:9a:
de:70:72:b8:f8:b7:1f:c9:d3:80:00:4d:11:7d:84:
de:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:BF:2D:36:00:A4:DF:30:C5:BA:59:CC:DC:85:EE:BD:A4:09:54:3A
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/gb8tNgCk3zDFulnM3IXuvaQJVDo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.107.192.0/20
Signature Algorithm: sha256WithRSAEncryption
9e:fd:37:1b:28:e0:24:e7:7c:34:f1:dc:07:85:06:2e:c1:e0:
85:1f:4d:a1:0b:53:e6:7e:34:f5:9e:20:8c:d6:91:42:7b:7e:
23:29:6c:95:78:fc:0d:3a:72:b2:48:96:89:5c:a6:48:79:99:
9c:b2:c0:fa:88:e5:b9:f6:fb:4a:be:2a:1a:32:cd:11:e6:8c:
f0:63:cb:a2:a3:44:80:e6:a8:22:12:6a:29:41:26:41:f3:2b:
9a:2e:b4:53:83:91:5e:8d:2b:ea:40:eb:11:21:60:dc:f6:a8:
92:6b:28:b7:34:0a:e6:2e:69:ec:7f:ec:4e:89:a6:cb:99:ee:
c9:cc:64:d4:d9:5e:6c:32:42:69:fb:38:06:6d:cd:bd:3a:f9:
7e:e1:49:c7:68:a2:e1:d7:39:75:47:b2:14:1c:f7:89:71:83:
7d:4f:c6:af:16:5e:6a:11:df:4e:02:6c:86:36:79:65:fb:31:
e7:54:e7:9b:f5:20:7d:e6:fc:5c:63:ce:e3:0f:b3:f3:00:0f:
59:73:63:e0:34:c1:6a:31:9b:92:f2:eb:f3:a3:fb:b4:07:1f:
92:11:00:87:a3:da:73:73:61:cd:8c:1b:ba:dd:15:6e:71:47:
3b:b0:f4:04:86:2e:bf:ec:cf:46:df:c5:30:31:b3:0d:ec:1d:
2f:42:de:bc
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICFuwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNDA4MjYw
NTIyNDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDgxQkYyRDM2MDBBNERG
MzBDNUJBNTlDQ0RDODVFRUJEQTQwOTU0M0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4vE4xU9UI2Ufr9LzeqkENaGEcyfgKoqlYUMz/0GQ1DFGbI92s
M+5eThzajlJkdppyAYSRlQkyMbXJhyadu+sLXMBJbwO/HBPvrEjFSvT2u1fLc9aB
M3fpTzm9uIC2wjN8tDJRVZ43trthBozgWnluevqp4Sv78vNnABJpxv/aInpXAB14
9RmwsiGpEV5nqC6zSqs6Udc0AoFjjfBCsxe5veA8vbJzuQnTPYdTpI2U84CYOxlS
gqbk1HojYvPO4BaXgoJFy4Zgu77gs4QEy0iCeHuafn5TySqgGtuLnyqflwUdfabH
IKLaIKOs5Cddmt5wcrj4tx/J04AATRF9hN6/AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUgb8tNgCk3zDFulnM3IXuvaQJVDowHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvZ2I4dE5nQ2szekRGdWxuTTNJWHV2
YVFKVkRvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBGprwDAN
BgkqhkiG9w0BAQsFAAOCAQEAnv03GyjgJOd8NPHcB4UGLsHghR9NoQtT5n409Z4g
jNaRQnt+IylslXj8DTpyskiWiVymSHmZnLLA+ojlufb7Sr4qGjLNEeaM8GPLoqNE
gOaoIhJqKUEmQfMrmi60U4ORXo0r6kDrESFg3PaokmsotzQK5i5p7H/sTommy5nu
ycxk1NlebDJCafs4Bm3NvTr5fuFJx2ii4dc5dUeyFBz3iXGDfU/GrxZeahHfTgJs
hjZ5Zfsx51Tnm/Ugfeb8XGPO4w+z8wAPWXNj4DTBajGbkvLr86P7tAcfkhEAh6Pa
c3NhzYwbut0VbnFHO7D0BIYuv+zPRt/FMDGzDewdL0LevA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:04:23 2025 by rpki-client