![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/80M5OVVWCdwhhN_2C18taCTpEiU.roa
File: 80M5OVVWCdwhhN_2C18taCTpEiU.roa (raw, json)
Hash identifier: fX76oP0PZqYj+jiKJ/wC8uffrFrZUfLcPUIlHaVmbsk=
Subject key identifier: F3:43:39:39:55:56:09:DC:21:84:DF:F6:0B:5F:2D:68:24:E9:12:25
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 11D7
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/80M5OVVWCdwhhN_2C18taCTpEiU.roa
Signing time: Mon 26 Aug 2024 05:24:26 +0000
ROA not before: Mon 26 Aug 2024 05:24:26 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 202.132.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:08:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4567 (0x11d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Aug 26 05:24:26 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F3433939555609DC2184DFF60B5F2D6824E91225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:47:91:d7:31:d5:1d:b2:f0:eb:a5:e1:a8:12:
ee:36:81:3c:db:d9:60:73:25:cc:f4:30:b4:90:e9:
4b:36:8a:29:3f:ac:88:19:c5:57:08:4a:32:4e:7c:
e1:c6:9f:5c:50:23:e3:a9:94:e1:0e:b5:c8:f8:ff:
0e:d3:90:9a:f5:7e:48:5b:d9:ec:69:ab:b5:66:84:
60:92:70:3d:b2:77:b6:7c:1f:f0:5b:c8:10:f0:9f:
cf:ed:3a:58:94:94:8e:fc:e0:03:03:44:03:2b:21:
82:19:ce:6f:2e:65:7b:9f:66:6d:3b:60:ed:7d:33:
79:43:06:a7:60:36:31:f2:b3:1a:23:bd:0d:0e:cf:
0c:94:48:de:6d:43:07:bb:b8:49:d6:93:f9:8d:fc:
93:59:75:4a:7f:8b:a3:49:da:05:8e:db:87:d8:18:
db:2c:fc:0c:71:1a:b9:0a:c1:cb:2f:d9:1e:e1:6a:
32:d3:c2:bc:c2:69:df:a5:f1:7d:3f:62:cd:c2:4e:
f2:54:53:00:64:3e:c0:85:68:c9:67:d7:d2:21:69:
08:a5:72:b7:56:7a:20:74:85:4e:a7:89:15:bb:fd:
37:fc:db:0b:f4:01:66:d6:e8:a0:54:e3:cf:f4:6b:
e2:19:b9:14:9c:09:de:c4:28:ec:bf:42:6f:68:49:
cb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:43:39:39:55:56:09:DC:21:84:DF:F6:0B:5F:2D:68:24:E9:12:25
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/80M5OVVWCdwhhN_2C18taCTpEiU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.132.0.0/16
Signature Algorithm: sha256WithRSAEncryption
22:27:6f:96:ab:ff:08:fb:bc:b3:fa:46:25:1b:61:f6:41:77:
a0:bd:a0:43:12:45:a8:2b:67:31:55:e0:49:54:2d:84:6d:86:
7b:0f:e0:73:c9:ab:8d:1b:51:49:e5:03:9e:91:a6:5c:5b:2a:
8b:c8:4c:25:31:b6:ba:78:78:e8:87:72:de:68:c7:75:16:e9:
fa:38:69:53:b4:dd:d4:90:c5:00:65:55:83:d5:fd:dd:61:9e:
dd:c6:a9:f5:01:05:52:0b:43:c7:97:ec:41:79:15:e4:37:ee:
27:9d:47:29:5c:22:38:d6:f6:f8:5a:4e:e0:70:f9:55:27:fc:
56:1d:e3:67:c7:e4:cb:67:7f:0f:75:84:c1:e7:18:da:ed:0f:
ab:09:ba:ae:32:75:4c:a2:c4:2f:52:78:61:0c:8d:26:44:cb:
17:e2:2a:c8:aa:1f:0e:85:bd:3c:2c:ce:c0:2d:d8:1a:89:a4:
ff:ce:6f:96:1d:00:e0:10:71:a0:f0:a7:66:d7:68:36:dc:a9:
78:b9:ef:35:e0:f5:85:84:11:df:62:01:d7:e8:df:c5:1d:dc:
c2:1e:ed:bd:b9:2e:eb:56:f0:0b:bc:a8:9c:7f:39:70:d4:f9:
a5:3d:20:aa:de:c4:60:31:0c:de:82:bb:20:31:83:4e:4a:d2:
d8:09:a1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:20:59 2025 by rpki-client