![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ZNWTbx47wQZs15svLUCtVY9INLQ.roa
File: ZNWTbx47wQZs15svLUCtVY9INLQ.roa (raw, json)
Hash identifier: 031mhD5eFyNDCINBYsA0+lRJ0voJtoUJ58+1WZ6UjZo=
Subject key identifier: 64:D5:93:6F:1E:3B:C1:06:6C:D7:9B:2F:2D:40:AD:55:8F:48:34:B4
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 11E2
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ZNWTbx47wQZs15svLUCtVY9INLQ.roa
Signing time: Mon 26 Aug 2024 05:24:29 +0000
ROA not before: Mon 26 Aug 2024 05:24:29 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 60.199.162.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:09:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4578 (0x11e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Aug 26 05:24:29 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=64D5936F1E3BC1066CD79B2F2D40AD558F4834B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:46:9b:65:fa:f6:db:14:1a:39:b8:c8:a4:00:
1c:e6:5e:c8:a5:63:de:bd:d2:0b:79:7c:85:3f:4b:
6b:af:c5:82:14:22:8a:a6:04:a9:49:9d:f9:b4:aa:
1d:09:c5:f1:77:1d:b6:77:9b:fc:de:30:37:1b:b4:
04:0f:7f:ef:44:1e:b3:58:77:c7:7d:8b:cf:b9:62:
ee:e3:95:03:ef:2b:a7:86:2f:87:85:d4:02:23:e6:
cd:39:d5:3a:d5:0d:fc:04:74:6a:83:05:b6:ed:16:
02:1f:a6:d9:e7:c2:86:f6:40:32:87:65:7f:db:3a:
91:54:33:79:d4:f3:f7:ff:b3:ab:11:81:b9:19:99:
9c:a7:96:c4:ea:21:b4:e9:02:b5:be:54:c8:d1:08:
f0:48:2a:80:48:69:7a:de:26:26:e5:68:18:e5:9d:
89:b1:e2:d0:60:2a:ed:0b:86:24:68:ba:89:a9:ce:
53:9e:1d:69:c2:9e:e3:b2:ba:e5:83:46:90:f4:5e:
0e:04:07:a3:89:ac:bc:36:89:90:a3:10:36:46:10:
75:73:2a:45:5a:1e:88:b6:79:b3:be:6a:f0:09:b6:
7a:4b:6f:8c:90:6a:e6:9f:91:e2:84:09:c8:f7:fd:
2f:7a:f2:a9:c7:91:0e:32:44:32:9a:68:05:d7:3f:
49:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D5:93:6F:1E:3B:C1:06:6C:D7:9B:2F:2D:40:AD:55:8F:48:34:B4
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ZNWTbx47wQZs15svLUCtVY9INLQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.199.162.0/24
Signature Algorithm: sha256WithRSAEncryption
00:8c:a8:02:89:e2:26:b2:5a:2c:de:75:25:2a:ea:17:3f:31:
02:c6:cf:8f:81:fa:49:f6:0a:df:7c:86:f5:a8:35:3d:9a:ad:
25:8b:76:15:c4:15:23:a6:d7:d8:e7:51:1f:4e:ae:30:25:24:
23:a2:76:4c:97:64:86:39:9d:7f:c9:0f:e5:e2:0f:dd:b1:1c:
67:46:c2:e1:6e:f8:03:c4:79:ae:5e:3c:43:eb:6e:6d:bf:d9:
60:58:a4:7c:d9:6c:ba:f1:89:c2:09:ed:b3:52:51:b7:44:8f:
06:22:a5:3a:bb:40:41:77:1d:40:5b:75:cc:f5:68:07:f1:97:
09:37:f6:8c:b2:c2:27:bf:29:d4:9d:3c:2c:ac:fb:1b:e3:01:
09:10:52:be:bf:a6:0b:a5:19:c0:a9:99:12:fa:3f:90:e0:1d:
d6:5c:6d:0c:4d:17:73:bd:25:80:ce:91:b4:ab:13:36:6e:c8:
20:50:00:dd:f2:0d:a4:d6:2f:d1:7e:5f:18:cf:6b:0b:97:8a:
61:8f:00:22:45:10:5d:d6:00:ac:f4:f4:52:af:52:c5:a6:16:
d9:5e:9b:72:eb:1f:34:a5:4f:99:ca:08:28:82:e7:15:47:f6:
f7:6b:91:90:47:66:51:ff:7c:a7:e9:b9:12:95:f0:d4:87:96:
2a:6b:2d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:16:30 2025 by rpki-client