Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/wj03Sf3Q-r2YPQUZN5te0ZMqhuI.roa
File: wj03Sf3Q-r2YPQUZN5te0ZMqhuI.roa (raw, json)
Hash identifier: xT+VXUdc3ODWofHxL71eddtoaGVDOqgwJ2y/bUC/1iw=
Subject key identifier: C2:3D:37:49:FD:D0:FA:BD:98:3D:05:19:37:9B:5E:D1:93:2A:86:E2
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1692
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/wj03Sf3Q-r2YPQUZN5te0ZMqhuI.roa
Signing time: Mon 26 Aug 2024 05:22:21 +0000
ROA not before: Mon 26 Aug 2024 05:22:21 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18419
IP address blocks: 106.105.184.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:07:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5778 (0x1692)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Aug 26 05:22:21 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C23D3749FDD0FABD983D0519379B5ED1932A86E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c9:1b:10:61:18:f4:45:f1:a1:3f:72:94:c3:
2f:36:8f:95:bc:fa:f2:b5:4b:51:4f:84:41:f6:79:
53:9e:86:37:4a:42:e1:8a:eb:c2:bb:0f:89:96:4b:
1d:7c:95:83:d2:46:74:0a:b1:d2:43:91:a1:66:57:
b2:f0:83:f1:d5:81:ef:09:56:8d:5b:b9:0a:ef:7b:
b2:e6:3b:e0:c5:9c:5a:0f:78:af:46:7d:39:76:bc:
d1:23:0c:35:c4:d7:33:26:5a:ba:51:e3:3f:af:ef:
f2:3a:61:93:92:bc:51:d2:c0:72:30:ec:ae:39:15:
e9:d4:82:3e:2e:b2:56:80:52:16:4b:19:42:0c:e5:
86:1e:db:e6:31:07:25:71:1e:ac:01:36:1a:85:6b:
4f:c4:0c:79:63:b1:95:2d:e8:2e:2d:b6:b8:77:b5:
61:19:25:81:c3:ac:83:4e:4b:a6:46:84:6a:40:bd:
26:60:d3:97:be:42:96:8b:0e:4f:7a:eb:73:b7:8e:
b7:ab:82:a0:48:55:b7:8f:ae:f0:97:47:c6:42:0d:
3d:ad:3b:8f:9b:06:d8:70:4c:a0:bc:35:9b:f2:fd:
74:ec:fd:b9:eb:2b:c7:92:e1:77:8d:27:d5:fd:85:
d7:41:ab:30:a7:2d:3e:05:9b:59:06:b6:f1:a9:78:
64:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3D:37:49:FD:D0:FA:BD:98:3D:05:19:37:9B:5E:D1:93:2A:86:E2
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/wj03Sf3Q-r2YPQUZN5te0ZMqhuI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.184.0/21
Signature Algorithm: sha256WithRSAEncryption
a7:9c:77:96:ff:24:26:7e:a2:77:04:d2:84:8c:af:7f:44:86:
ca:74:f1:2f:0b:e0:f8:81:b7:1c:77:e1:0e:fb:b3:68:c4:e0:
8a:a3:b2:59:47:f7:66:88:b5:69:5b:23:19:d2:0c:e6:57:1d:
4d:38:5d:7e:17:3a:a4:4a:cb:14:70:72:b5:78:b1:47:c3:1e:
4e:66:fd:d4:28:81:26:9d:ad:ce:31:25:e1:4e:75:0d:c7:ef:
6e:0a:50:d6:ad:40:8d:51:f2:b5:02:c4:52:4d:f8:48:20:18:
d8:5e:b0:30:80:20:f6:f1:5f:e5:dc:91:32:68:36:16:fd:ef:
c6:f8:0f:f9:74:3d:89:c8:eb:a8:de:41:47:db:c0:ac:69:63:
fe:1f:fd:98:bf:92:09:c8:82:8b:b0:f5:79:c8:76:ca:b8:e5:
fd:12:00:c5:e2:4d:c1:00:d5:2e:3c:2c:42:91:d4:ad:b7:41:
21:74:ea:e5:fc:05:83:44:ae:9e:80:14:78:1a:52:63:a1:6e:
ee:d2:4f:c6:0a:ca:22:b2:89:4c:15:ab:f9:d0:c8:e3:bb:27:
b3:ad:0d:f3:02:bc:1e:fe:2c:c5:fd:63:6a:10:8f:29:5f:87:
79:5e:49:c7:88:d5:04:63:ad:33:e5:e8:9c:f1:bc:de:2f:ca:
30:a5:c6:39
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICFpIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNDA4MjYw
NTIyMjFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEMyM0QzNzQ5RkREMEZB
QkQ5ODNEMDUxOTM3OUI1RUQxOTMyQTg2RTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCYyRsQYRj0RfGhP3KUwy82j5W8+vK1S1FPhEH2eVOehjdKQuGK
68K7D4mWSx18lYPSRnQKsdJDkaFmV7Lwg/HVge8JVo1buQrve7LmO+DFnFoPeK9G
fTl2vNEjDDXE1zMmWrpR4z+v7/I6YZOSvFHSwHIw7K45FenUgj4uslaAUhZLGUIM
5YYe2+YxByVxHqwBNhqFa0/EDHljsZUt6C4ttrh3tWEZJYHDrINOS6ZGhGpAvSZg
05e+QpaLDk9663O3jrergqBIVbePrvCXR8ZCDT2tO4+bBthwTKC8NZvy/XTs/bnr
K8eS4XeNJ9X9hddBqzCnLT4Fm1kGtvGpeGQfAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUwj03Sf3Q+r2YPQUZN5te0ZMqhuIwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvd2owM1NmM1EtcjJZUFFVWk41dGUw
Wk1xaHVJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA2ppuDAN
BgkqhkiG9w0BAQsFAAOCAQEAp5x3lv8kJn6idwTShIyvf0SGynTxLwvg+IG3HHfh
DvuzaMTgiqOyWUf3Zoi1aVsjGdIM5lcdTThdfhc6pErLFHBytXixR8MeTmb91CiB
Jp2tzjEl4U51DcfvbgpQ1q1AjVHytQLEUk34SCAY2F6wMIAg9vFf5dyRMmg2Fv3v
xvgP+XQ9icjrqN5BR9vArGlj/h/9mL+SCciCi7D1ech2yrjl/RIAxeJNwQDVLjws
QpHUrbdBIXTq5fwFg0SunoAUeBpSY6Fu7tJPxgrKIrKJTBWr+dDI47sns60N8wK8
Hv4sxf1jahCPKV+HeV5Jx4jVBGOtM+XonPG83i/KMKXGOQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:04:48 2025 by rpki-client