Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIGMA/uEHpqIbPD-Dc5XfD5O5fwX_vaTo.roa
File: uEHpqIbPD-Dc5XfD5O5fwX_vaTo.roa (raw, json)
Hash identifier: 2H3QPDNALaIIogCeybew+JxextLtC0wAMPDDJ98SA68=
Subject key identifier: B8:41:E9:A8:86:CF:0F:E0:DC:E5:77:C3:E4:EE:5F:C1:7F:EF:69:3A
Certificate issuer: /CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Certificate serial: 0CCD
Authority key identifier: 3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/uEHpqIbPD-Dc5XfD5O5fwX_vaTo.roa
Signing time: Mon 26 Aug 2024 05:26:14 +0000
ROA not before: Mon 26 Aug 2024 05:26:14 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4780
IP address blocks: 124.109.112.0/20 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:12:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3277 (0xccd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Validity
Not Before: Aug 26 05:26:14 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=B841E9A886CF0FE0DCE577C3E4EE5FC17FEF693A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b8:3e:7a:6a:ad:dd:32:59:37:fb:66:8a:f6:
0a:32:ee:5d:87:f7:01:a8:ea:2a:ba:ce:eb:e6:53:
94:74:51:f6:c2:3c:ea:fd:57:55:67:cb:d9:ea:b0:
fe:7d:d1:57:c7:e0:40:a8:3d:eb:c1:ee:b3:73:63:
01:62:29:0b:29:d2:0d:6a:69:08:c4:15:d8:c8:72:
3e:a8:03:af:c9:2f:c4:e4:22:88:c5:42:74:0f:f4:
f1:3d:49:d8:10:7c:25:b2:97:28:31:bb:bd:af:90:
13:7c:15:e7:96:60:3b:12:cb:9b:6b:31:b2:6a:84:
8e:ab:87:55:ad:3f:88:12:65:67:75:85:8f:f5:2d:
c6:db:ce:ad:ea:de:5b:0a:63:14:47:f8:e3:51:ca:
91:40:be:6c:a1:ad:18:35:9e:f2:89:1c:1b:7d:d2:
bf:13:78:9e:dd:06:bf:bb:08:7c:3e:3f:a3:fb:bc:
3c:0e:a4:d9:e9:7b:42:4a:dc:91:c6:cd:39:c7:1d:
bb:bf:f1:6e:49:17:c3:27:e2:f7:55:cb:08:e4:2b:
1a:0f:74:a3:7f:f2:17:65:6f:92:58:39:42:78:4b:
8a:c0:f4:27:ed:6f:e9:dd:e3:9b:b8:9b:d9:c4:d1:
05:e8:a0:ec:6c:60:a6:c1:fc:97:78:cc:ef:ec:85:
5d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:41:E9:A8:86:CF:0F:E0:DC:E5:77:C3:E4:EE:5F:C1:7F:EF:69:3A
X509v3 Authority Key Identifier:
keyid:3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/uEHpqIbPD-Dc5XfD5O5fwX_vaTo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.109.112.0/20
Signature Algorithm: sha256WithRSAEncryption
02:83:38:8f:f4:74:d8:77:e1:0e:c8:35:dc:07:52:cf:dd:20:
9f:b1:c9:18:78:d3:cb:b2:5c:4d:fd:12:8d:4e:74:9d:0e:32:
19:21:0b:33:31:43:ed:ec:5f:45:8a:04:80:ab:23:05:34:b9:
27:75:ba:0e:8c:71:62:2c:58:30:a3:58:53:ff:16:b9:9b:5d:
c4:c9:56:30:29:a6:ec:af:90:53:2b:4e:68:b2:a4:a5:ff:05:
8b:b0:db:b4:09:45:9e:a3:3c:9b:ba:9e:b7:b3:b9:44:c8:dd:
88:b8:a7:b6:cd:07:51:13:54:c9:52:79:42:43:32:d8:23:f0:
40:0f:3e:82:61:96:27:17:cb:d6:e1:d9:74:23:93:8f:3c:dc:
c5:e9:52:23:81:25:a9:c8:e0:b1:33:3a:94:16:5b:15:28:11:
8c:9d:c3:64:e2:e7:9b:1d:3a:dc:a0:3b:ad:f7:58:a9:20:74:
cd:a1:c4:fd:6d:6b:e7:08:cc:15:ec:86:ee:5e:76:c9:e3:1d:
76:29:9e:12:c7:94:b4:a9:b7:eb:b2:0c:0e:be:11:12:00:cd:
11:98:bb:c4:6f:c7:98:a7:63:b9:b4:15:d5:e6:12:21:f3:c7:
dd:be:88:60:ee:bd:93:1e:b6:5c:0e:22:cf:4a:fc:85:e1:ef:
2a:99:67:f0
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICDM0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0JF
NkM2NTEzNTBFOEZBMUZDN0QwQTNFQUJDRjk4RjgxQjMxMTlEMzAeFw0yNDA4MjYw
NTI2MTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEI4NDFFOUE4ODZDRjBG
RTBEQ0U1NzdDM0U0RUU1RkMxN0ZFRjY5M0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCuuD56aq3dMlk3+2aK9goy7l2H9wGo6iq6zuvmU5R0UfbCPOr9
V1Vny9nqsP590VfH4ECoPevB7rNzYwFiKQsp0g1qaQjEFdjIcj6oA6/JL8TkIojF
QnQP9PE9SdgQfCWylygxu72vkBN8FeeWYDsSy5trMbJqhI6rh1WtP4gSZWd1hY/1
Lcbbzq3q3lsKYxRH+ONRypFAvmyhrRg1nvKJHBt90r8TeJ7dBr+7CHw+P6P7vDwO
pNnpe0JK3JHGzTnHHbu/8W5JF8Mn4vdVywjkKxoPdKN/8hdlb5JYOUJ4S4rA9Cft
b+nd45u4m9nE0QXooOxsYKbB/Jd4zO/shV37AgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUuEHpqIbPD+Dc5XfD5O5fwX/vaTowHwYDVR0jBBgwFoAUO+bGUTUOj6H8fQo+
q8+Y+BsxGdMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lHTUEv
Ty1iR1VUVU9qNkg4ZlFvLXE4LVktQnN4R2RNLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9PLWJHVVRVT2o2SDhmUW8tcTgtWS1Cc3hHZE0uY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TSUdNQS91RUhwcUliUEQtRGM1WGZENU81
ZndYX3ZhVG8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEfG1w
MA0GCSqGSIb3DQEBCwUAA4IBAQACgziP9HTYd+EOyDXcB1LP3SCfsckYeNPLslxN
/RKNTnSdDjIZIQszMUPt7F9FigSAqyMFNLkndboOjHFiLFgwo1hT/xa5m13EyVYw
Kabsr5BTK05osqSl/wWLsNu0CUWeozybup63s7lEyN2IuKe2zQdRE1TJUnlCQzLY
I/BADz6CYZYnF8vW4dl0I5OPPNzF6VIjgSWpyOCxMzqUFlsVKBGMncNk4uebHTrc
oDut91ipIHTNocT9bWvnCMwV7IbuXnbJ4x12KZ4Sx5S0qbfrsgwOvhESAM0RmLvE
b8eYp2O5tBXV5hIh88fdvohg7r2THrZcDiLPSvyF4e8qmWfw
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:43:04 2025 by rpki-client