![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/EWBXJdYZa_WAt5vHiSN27-6HiIU.roa
File: EWBXJdYZa_WAt5vHiSN27-6HiIU.roa (raw, json)
Hash identifier: I2bP9BI566Jij35f6Fh3epVu32sKEM5n16xngWXAVDM=
Subject key identifier: 11:60:57:25:D6:19:6B:F5:80:B7:9B:C7:89:23:76:EF:EE:87:88:85
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 11D2
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/EWBXJdYZa_WAt5vHiSN27-6HiIU.roa
Signing time: Mon 26 Aug 2024 05:24:24 +0000
ROA not before: Mon 26 Aug 2024 05:24:24 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131634
IP address blocks: 124.108.140.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:08:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4562 (0x11d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Aug 26 05:24:24 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=11605725D6196BF580B79BC7892376EFEE878885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:09:89:4e:fe:ba:c6:2b:ea:ec:73:69:36:a2:
06:97:9c:64:e3:15:e1:4d:a3:be:b2:69:b3:51:e3:
bb:43:a1:f3:4d:82:bb:b2:a0:59:5e:28:55:8a:2c:
8b:c4:dc:d7:f9:0e:0f:be:1d:b6:41:7c:20:24:06:
d4:50:4c:20:61:9e:db:df:ef:99:c8:44:cf:c3:ec:
54:58:3a:98:74:8f:8a:fc:4a:5d:6f:b1:37:aa:aa:
3a:80:77:11:68:87:8b:5f:a2:e5:69:a8:47:c5:b3:
5b:4e:c2:26:66:ba:a6:d3:af:51:4d:bb:27:23:71:
52:f1:e7:9d:b3:e5:ec:53:ed:24:b8:ce:2d:4a:cd:
f5:15:23:d8:73:a3:88:55:d0:21:d4:88:32:28:05:
68:42:2e:42:a2:53:00:ae:1e:ce:bf:f2:db:cb:dc:
99:49:91:e0:db:fa:54:00:35:e7:75:e7:1f:43:d0:
e1:63:ce:a9:23:24:e7:67:ab:d2:1b:b9:ef:d4:6d:
b5:ba:6e:f0:bc:23:24:81:f1:9e:6b:2e:e0:19:63:
5a:7a:6d:97:9e:9d:ee:61:1b:38:00:e8:de:3d:5a:
2b:72:5f:16:8b:22:2d:7a:30:2a:dc:9b:b0:05:c7:
50:b2:f3:92:7c:4b:1b:40:42:36:88:c6:f8:52:bf:
66:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:60:57:25:D6:19:6B:F5:80:B7:9B:C7:89:23:76:EF:EE:87:88:85
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/EWBXJdYZa_WAt5vHiSN27-6HiIU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.108.140.0/23
Signature Algorithm: sha256WithRSAEncryption
82:5a:97:28:95:46:cc:85:e1:48:8b:d3:df:72:8d:90:e3:3f:
0d:fc:86:a6:6d:0d:77:a4:14:81:78:55:b0:f2:1c:7d:85:1d:
40:a1:b0:64:74:39:ab:e3:40:c8:fb:5d:79:df:6e:ff:48:fb:
12:02:a7:92:5b:35:ba:4e:9f:7a:49:fd:a0:3e:fa:02:e8:f0:
d4:b3:50:42:7e:a6:95:4b:0f:1e:98:ee:ed:0e:66:a3:f0:c3:
73:37:0f:89:73:b4:e3:ec:c8:25:19:02:17:cd:b1:be:fc:e7:
a8:be:6c:26:66:cc:42:7b:a3:40:37:14:fa:49:3d:81:19:6b:
a0:8b:b5:14:e4:da:04:4f:c3:c2:d7:38:6b:5b:8f:4d:48:08:
6c:1f:e9:c0:71:4b:ef:07:ff:e9:7e:a9:27:ae:9d:16:99:fe:
8b:13:65:93:dc:5f:8f:2e:ed:f8:ac:07:5a:52:89:e3:e7:f9:
a6:04:0e:1e:6c:b8:08:15:a2:54:8b:6e:45:b3:6c:7e:c7:4b:
70:b1:f2:82:f7:bc:2a:c6:bc:e2:21:dd:c6:32:54:11:20:13:
05:2d:89:c7:08:dc:54:e1:49:08:c4:7a:4e:83:ae:39:89:ff:
17:d1:65:9e:95:1f:4b:e1:c9:9f:6f:86:0a:d8:5c:0f:42:5f:
67:6b:18:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:10 2025 by rpki-client