Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAELW/bdZqr9bNbyN1GWHZaBMNFiBhFho.roa
File: bdZqr9bNbyN1GWHZaBMNFiBhFho.roa (raw, json)
Hash identifier: mT9vDpTLDrLx6q/n6Z9qgX6Bi5eAnbdszLmZUKhmfS8=
Subject key identifier: 6D:D6:6A:AF:D6:CD:6F:23:75:19:61:D9:68:13:0D:16:20:61:16:1A
Certificate issuer: /CN=43EBD39FB518B55DA00742AEEC7B0DA6AABA61F7
Certificate serial: 03
Authority key identifier: 43:EB:D3:9F:B5:18:B5:5D:A0:07:42:AE:EC:7B:0D:A6:AA:BA:61:F7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Q-vTn7UYtV2gB0Ku7HsNpqq6Yfc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAELW/bdZqr9bNbyN1GWHZaBMNFiBhFho.roa
Signing time: Wed 12 Jun 2024 06:28:46 +0000
ROA not before: Wed 12 Jun 2024 06:28:46 +0000
ROA not after: Wed 14 May 2025 15:30:25 +0000
asID: 152610
IP address blocks: 160.19.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:19:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43EBD39FB518B55DA00742AEEC7B0DA6AABA61F7
Validity
Not Before: Jun 12 06:28:46 2024 GMT
Not After : May 14 15:30:25 2025 GMT
Subject: CN=6DD66AAFD6CD6F23751961D968130D162061161A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:83:3f:f7:6b:de:a9:00:0e:16:e0:63:76:7b:
86:c8:d7:11:fe:d2:5f:84:3d:1f:db:04:46:01:de:
33:3d:20:8a:5d:ff:b4:e7:32:2a:69:99:69:75:89:
4e:e4:23:bb:1f:be:4d:a9:76:7e:d2:cf:c2:73:e5:
f8:63:bd:82:e4:63:1c:af:6b:55:07:3b:10:c3:c0:
73:f0:5f:a3:2e:6d:80:04:d5:d0:27:8e:97:32:d8:
df:78:0c:bc:6c:aa:3b:65:c8:a7:cc:3b:ce:b5:52:
25:ab:a3:59:f6:3d:75:46:f1:52:6f:d1:43:34:3b:
0f:9b:56:a4:f5:9f:13:28:c5:2c:ae:36:85:50:c2:
80:8f:48:15:59:a0:83:3d:b2:ea:f9:8c:11:cc:00:
78:2a:0b:b8:4f:bd:63:f1:d4:de:1e:b0:c7:ac:c5:
98:a6:b6:70:c9:d3:91:fe:da:ff:cf:fa:3c:04:3d:
5b:e9:7e:78:54:e1:41:e0:00:e3:ec:49:13:6a:ec:
24:c8:c8:57:7d:7f:ec:dd:12:a0:6b:8d:fd:c4:78:
d4:ad:51:82:35:b7:3e:fd:55:6c:f2:93:5a:76:41:
1d:be:66:ab:45:7d:07:49:d0:e2:b8:10:01:14:49:
1d:be:7f:d2:c3:37:15:43:c4:80:80:b2:9f:c5:4c:
6b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D6:6A:AF:D6:CD:6F:23:75:19:61:D9:68:13:0D:16:20:61:16:1A
X509v3 Authority Key Identifier:
keyid:43:EB:D3:9F:B5:18:B5:5D:A0:07:42:AE:EC:7B:0D:A6:AA:BA:61:F7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAELW/Q-vTn7UYtV2gB0Ku7HsNpqq6Yfc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Q-vTn7UYtV2gB0Ku7HsNpqq6Yfc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAELW/bdZqr9bNbyN1GWHZaBMNFiBhFho.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
160.19.90.0/24
Signature Algorithm: sha256WithRSAEncryption
92:0a:32:78:ea:5b:10:30:58:90:37:db:41:dc:43:09:58:67:
1d:2f:b0:9b:32:39:50:ed:f5:17:05:72:d7:26:36:87:ae:34:
94:3c:1a:e3:bf:e6:1e:b7:4a:75:99:fa:f6:4a:34:21:ce:e0:
73:6d:58:64:96:8e:14:67:03:57:ea:87:de:27:3c:ff:1e:9d:
f1:ca:ac:6e:26:59:d6:49:b2:54:b3:d9:dd:14:ba:b9:c4:ab:
b2:13:32:68:95:5b:3f:9e:26:35:42:4a:5a:96:ba:29:c5:1f:
91:2b:8e:38:c6:b7:44:7c:51:3a:2a:8b:f3:cd:4b:52:ff:66:
01:7d:78:46:9c:4f:34:e5:8f:dd:98:a1:52:71:c4:3f:f1:e6:
d0:22:02:03:cd:62:ca:41:68:6b:63:1e:4a:66:da:39:45:1f:
65:a8:22:75:0f:26:45:be:70:01:33:e5:02:2d:ba:86:fb:e9:
c0:35:6b:32:14:45:7b:5e:0e:73:ac:fe:d9:9a:11:8f:e6:76:
9f:c8:3a:8e:b2:33:5c:e3:cb:5d:10:c9:04:36:2d:08:91:47:
ca:20:97:f0:70:7b:49:0d:f0:ff:9c:e3:04:68:e2:68:a6:38:
51:b3:f9:67:30:0e:92:3c:13:5e:9d:18:cb:e7:cf:7a:08:a9:
1b:10:e2:8c
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0M0VC
RDM5RkI1MThCNTVEQTAwNzQyQUVFQzdCMERBNkFBQkE2MUY3MB4XDTI0MDYxMjA2
Mjg0NloXDTI1MDUxNDE1MzAyNVowMzExMC8GA1UEAxMoNkRENjZBQUZENkNENkYy
Mzc1MTk2MUQ5NjgxMzBEMTYyMDYxMTYxQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKeDP/dr3qkADhbgY3Z7hsjXEf7SX4Q9H9sERgHeMz0gil3/tOcy
KmmZaXWJTuQjux++Tal2ftLPwnPl+GO9guRjHK9rVQc7EMPAc/Bfoy5tgATV0CeO
lzLY33gMvGyqO2XIp8w7zrVSJaujWfY9dUbxUm/RQzQ7D5tWpPWfEyjFLK42hVDC
gI9IFVmggz2y6vmMEcwAeCoLuE+9Y/HU3h6wx6zFmKa2cMnTkf7a/8/6PAQ9W+l+
eFThQeAA4+xJE2rsJMjIV31/7N0SoGuN/cR41K1RgjW3Pv1VbPKTWnZBHb5mq0V9
B0nQ4rgQARRJHb5/0sM3FUPEgICyn8VMa/0CAwEAAaOCAewwggHoMB0GA1UdDgQW
BBRt1mqv1s1vI3UZYdloEw0WIGEWGjAfBgNVHSMEGDAWgBRD69OftRi1XaAHQq7s
ew2mqrph9zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGA1UdHwRUMFIwUKBO
oEyGSnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TQUVMVy9R
LXZUbjdVWXRWMmdCMEt1N0hzTnBxcTZZZmMuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L1EtdlRuN1VZdFYyZ0IwS3U3SHNOcHFxNllmYy5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGbBggrBgEFBQcBCwSBjjCBizBWBggrBgEFBQcwC4ZKcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL1NBRUxXL2JkWnFyOWJOYnlOMUdXSFphQk1O
RmlCaEZoby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9y
cmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACgE1ow
DQYJKoZIhvcNAQELBQADggEBAJIKMnjqWxAwWJA320HcQwlYZx0vsJsyOVDt9RcF
ctcmNoeuNJQ8GuO/5h63SnWZ+vZKNCHO4HNtWGSWjhRnA1fqh94nPP8enfHKrG4m
WdZJslSz2d0UurnEq7ITMmiVWz+eJjVCSlqWuinFH5ErjjjGt0R8UToqi/PNS1L/
ZgF9eEacTzTlj92YoVJxxD/x5tAiAgPNYspBaGtjHkpm2jlFH2WoInUPJkW+cAEz
5QItuob76cA1azIURXteDnOs/tmaEY/mdp/IOo6yM1zjy10QyQQ2LQiRR8ogl/Bw
e0kN8P+c4wRo4mimOFGz+WcwDpI8E16dGMvnz3oIqRsQ4ow=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:13:52 2025 by rpki-client