![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/k4jG1xJ9Iwx866eKFVxucmZkGns.roa
File: k4jG1xJ9Iwx866eKFVxucmZkGns.roa (raw, json)
Hash identifier: Wz1XVGMzxYKq04Oyi+w8DQpHVyW2jhbgZL8KTrN8SmY=
Subject key identifier: 93:88:C6:D7:12:7D:23:0C:7C:EB:A7:8A:15:5C:6E:72:66:64:1A:7B
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 16AB
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/k4jG1xJ9Iwx866eKFVxucmZkGns.roa
Signing time: Mon 26 Aug 2024 05:22:28 +0000
ROA not before: Mon 26 Aug 2024 05:22:28 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18049
IP address blocks: 175.183.64.0/20 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5803 (0x16ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Aug 26 05:22:28 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=9388C6D7127D230C7CEBA78A155C6E7266641A7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:62:13:f1:be:99:45:bb:6c:d0:68:23:41:a5:
9c:f2:84:2f:41:d3:d9:1d:aa:43:a3:e4:e8:1f:ba:
90:f8:9e:12:36:bd:d2:b7:7e:df:62:a0:11:84:dd:
84:19:68:97:30:8b:8a:0f:8a:f9:85:4a:ac:65:ee:
e9:37:ae:5b:6b:82:80:f5:5c:29:b3:de:a2:f9:a6:
44:85:a4:96:dc:dd:2e:bb:c7:75:fd:94:75:b9:ef:
39:7e:62:38:bb:de:3a:ff:f1:b4:5b:12:33:a3:4c:
55:fd:ba:1d:ed:d4:97:7b:5e:74:30:10:b6:0c:82:
6d:04:e4:53:22:dd:6e:4e:10:65:94:08:d5:36:16:
7a:fa:8b:e8:76:d2:4a:01:d3:a7:38:53:86:71:38:
fc:7e:50:61:77:7f:a6:44:d1:9d:e9:4f:a8:e6:42:
f1:8c:5f:c7:70:56:08:57:1b:2e:0b:5a:48:cd:fb:
ab:19:cf:c6:10:83:a0:63:ea:44:b9:2f:8b:a5:8d:
d2:a2:e1:46:c2:39:8e:20:3f:b4:21:37:15:ae:bf:
df:96:0b:c3:dc:23:61:83:3f:96:78:c5:e2:bb:e0:
f9:90:16:b8:b7:8f:80:12:08:ed:d0:34:cd:4d:a2:
f8:91:7e:cc:56:3a:bd:70:16:88:ea:f1:44:f8:c6:
e7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:88:C6:D7:12:7D:23:0C:7C:EB:A7:8A:15:5C:6E:72:66:64:1A:7B
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/k4jG1xJ9Iwx866eKFVxucmZkGns.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.183.64.0/20
Signature Algorithm: sha256WithRSAEncryption
73:de:1b:ef:09:79:d1:b5:d3:a7:40:a1:6e:68:97:59:9f:9f:
f0:5b:d4:9c:53:9b:55:89:29:f0:1a:41:ab:c9:29:87:1a:5e:
8b:3f:4d:88:d9:f6:65:d9:50:b0:11:b3:89:a4:8a:8e:3c:6b:
ee:7e:54:33:5f:3c:9e:13:75:dd:05:65:b6:ff:e1:70:b4:fa:
f5:b8:d1:79:b6:12:08:c1:88:05:ce:61:cd:f6:5d:ad:e4:56:
54:7f:e6:ae:9f:94:46:43:eb:24:06:05:80:fa:c0:01:e3:d6:
cc:4f:41:8c:14:3d:ac:f7:8f:da:13:b7:0d:a1:cd:e0:68:d8:
9d:c6:6b:05:ce:30:29:41:8f:f2:86:5d:96:10:eb:2b:95:9c:
f3:5c:d9:97:de:23:30:9b:87:4c:4a:a5:05:25:39:c6:49:fd:
c9:b2:7e:54:8c:0c:1f:65:ee:85:0b:9d:1f:c8:3a:04:18:23:
c1:21:39:79:3d:f4:88:3e:ea:d1:b7:e6:4f:5d:55:2e:12:7e:
92:c1:d2:40:65:16:a1:a4:0d:d9:be:b6:30:2a:4b:37:fa:a1:
9f:39:ef:cd:b4:23:a7:66:5a:9f:e2:ce:36:57:26:6d:24:55:
fe:4d:34:84:d4:20:67:f9:d4:f7:1b:d8:0b:2d:2a:a0:04:9f:
98:cb:0d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:55:21 2025 by rpki-client