Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/ntuUDU6BaKvugldFotASBMK72_s.roa
File: ntuUDU6BaKvugldFotASBMK72_s.roa (raw, json)
Hash identifier: F+2aLD4QysTYUpII075/9/iY1RmoLBBW9I6UlH/Aejw=
Subject key identifier: 9E:DB:94:0D:4E:81:68:AB:EE:82:57:45:A2:D0:12:04:C2:BB:DB:FB
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1678
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ntuUDU6BaKvugldFotASBMK72_s.roa
Signing time: Mon 26 Aug 2024 05:22:14 +0000
ROA not before: Mon 26 Aug 2024 05:22:14 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4780
IP address blocks: 45.64.228.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:07:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5752 (0x1678)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Aug 26 05:22:14 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=9EDB940D4E8168ABEE825745A2D01204C2BBDBFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f7:c5:15:c9:64:dc:ff:6b:9a:54:aa:c8:0b:
ea:25:d4:2d:a4:0f:90:08:fd:4a:80:4e:82:30:70:
37:d3:07:56:26:60:0c:6e:af:0e:52:1f:15:02:e8:
29:4c:75:9c:5c:a8:26:34:0a:6a:ee:4e:56:0a:7f:
13:5a:77:93:ba:7b:b2:18:29:48:f2:a7:46:e2:43:
f8:c2:53:3a:24:14:bf:b8:19:97:8d:f9:2c:e2:48:
25:50:4f:08:06:d7:f2:2a:14:09:9e:27:31:8c:34:
30:d9:28:fa:71:6b:2c:2e:2d:31:66:ea:20:c4:69:
ef:da:c0:44:7c:12:a3:85:23:e1:bc:38:27:8c:da:
94:c1:ed:af:3d:81:07:c2:42:0b:47:43:0e:64:31:
a7:37:3a:5a:68:08:6e:f6:be:44:e5:8c:24:78:03:
ea:6a:b3:d1:ab:be:e3:c6:d3:f8:7d:83:3e:9d:a7:
13:40:5e:42:25:29:56:a6:74:12:e6:0a:fc:de:01:
7e:63:e5:ad:60:3f:ea:8e:e9:4d:61:84:be:90:70:
89:0d:ca:3c:b9:0d:4e:f8:a1:13:bc:c2:fb:11:1a:
cf:4e:e9:70:e5:2c:ab:85:00:cf:96:ad:3f:7e:e4:
41:7f:04:f5:37:d1:94:7f:71:be:6c:0e:79:6b:d4:
70:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DB:94:0D:4E:81:68:AB:EE:82:57:45:A2:D0:12:04:C2:BB:DB:FB
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ntuUDU6BaKvugldFotASBMK72_s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.64.228.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:78:8c:d4:97:ed:6a:5d:54:3e:8d:c1:fd:cb:3d:26:cd:f9:
fc:52:ab:9c:e3:25:a1:b2:ab:a2:e6:ac:90:77:33:36:d8:a1:
80:59:98:de:e0:a8:f8:3f:71:78:6c:4a:4a:99:1f:e9:93:1f:
82:db:45:9d:d1:a7:1c:97:ce:04:56:60:79:93:2d:93:11:02:
c2:56:91:fc:38:f9:bf:52:2c:8e:2e:10:6e:a4:5d:a8:24:5a:
e5:03:33:3e:11:54:26:d8:3d:83:14:9e:29:b3:eb:97:26:cd:
96:66:02:22:7b:ee:d1:31:37:dc:13:f5:4e:7e:b1:66:1d:85:
78:2d:50:1b:0b:c5:fe:59:cf:21:7c:93:11:0c:13:af:51:4a:
ad:7a:ba:91:b0:93:4f:dd:5d:e8:02:46:ec:a9:5e:42:28:14:
d1:fe:26:94:ae:4b:50:17:df:4b:e7:d9:90:5a:db:5c:86:17:
a5:3f:07:0f:28:62:28:24:14:1c:51:f0:ec:f6:b3:17:65:34:
64:15:2d:18:c7:df:f7:f6:4b:d1:03:cf:a1:39:bb:fe:83:ab:
ac:79:67:cd:d5:1f:50:40:2d:92:a6:4a:b9:9a:62:32:97:83:
10:bb:5c:be:6a:68:50:84:6d:af:37:fa:d3:7b:fd:5e:ab:da:
45:4e:6f:ba
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICFngwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNDA4MjYw
NTIyMTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlFREI5NDBENEU4MTY4
QUJFRTgyNTc0NUEyRDAxMjA0QzJCQkRCRkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDD98UVyWTc/2uaVKrIC+ol1C2kD5AI/UqAToIwcDfTB1YmYAxu
rw5SHxUC6ClMdZxcqCY0CmruTlYKfxNad5O6e7IYKUjyp0biQ/jCUzokFL+4GZeN
+SziSCVQTwgG1/IqFAmeJzGMNDDZKPpxaywuLTFm6iDEae/awER8EqOFI+G8OCeM
2pTB7a89gQfCQgtHQw5kMac3OlpoCG72vkTljCR4A+pqs9GrvuPG0/h9gz6dpxNA
XkIlKVamdBLmCvzeAX5j5a1gP+qO6U1hhL6QcIkNyjy5DU74oRO8wvsRGs9O6XDl
LKuFAM+WrT9+5EF/BPU30ZR/cb5sDnlr1HDFAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUntuUDU6BaKvugldFotASBMK72/swHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvbnR1VURVNkJhS3Z1Z2xkRm90QVNC
TUs3Ml9zLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi1A5DAN
BgkqhkiG9w0BAQsFAAOCAQEAi3iM1Jftal1UPo3B/cs9Js35/FKrnOMlobKrouas
kHczNtihgFmY3uCo+D9xeGxKSpkf6ZMfgttFndGnHJfOBFZgeZMtkxECwlaR/Dj5
v1Isji4QbqRdqCRa5QMzPhFUJtg9gxSeKbPrlybNlmYCInvu0TE33BP1Tn6xZh2F
eC1QGwvF/lnPIXyTEQwTr1FKrXq6kbCTT91d6AJG7KleQigU0f4mlK5LUBffS+fZ
kFrbXIYXpT8HDyhiKCQUHFHw7PazF2U0ZBUtGMff9/ZL0QPPoTm7/oOrrHlnzdUf
UEAtkqZKuZpiMpeDELtcvmpoUIRtrzf603v9XqvaRU5vug==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:59:06 2025 by rpki-client