Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SYSNET/6W4Ttdsr2z9T9X1XQgDbOPHFIFE.roa
File: 6W4Ttdsr2z9T9X1XQgDbOPHFIFE.roa (raw, json)
Hash identifier: owy4AoSck8njKOQzJpKmrBBglpYlI2U/k4tAanSVF6s=
Subject key identifier: E9:6E:13:B5:DB:2B:DB:3F:53:F5:7D:57:42:00:DB:38:F1:C5:20:51
Certificate issuer: /CN=96BB94B457F9D82A29B5B2FD9F3A4418899E71EC
Certificate serial: 0CCD
Authority key identifier: 96:BB:94:B4:57:F9:D8:2A:29:B5:B2:FD:9F:3A:44:18:89:9E:71:EC
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/6W4Ttdsr2z9T9X1XQgDbOPHFIFE.roa
Signing time: Mon 10 Feb 2025 14:08:32 +0000
ROA not before: Mon 10 Feb 2025 14:08:32 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4783
IP address blocks: 210.67.128.0/20 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 May 2025 07:40:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3277 (0xccd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96BB94B457F9D82A29B5B2FD9F3A4418899E71EC
Validity
Not Before: Feb 10 14:08:32 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E96E13B5DB2BDB3F53F57D574200DB38F1C52051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e0:67:13:93:bd:b6:04:a5:56:92:81:eb:62:
33:b5:37:63:f9:d7:cb:99:47:44:c1:9d:ff:75:d3:
79:dc:b7:04:41:e7:a0:07:aa:1f:a1:a2:27:fe:64:
51:8b:19:97:49:e4:f4:76:98:d9:6f:27:81:7d:43:
b0:ae:15:24:bb:d3:76:d8:18:6a:c9:f0:d3:9e:08:
0a:fe:bc:a5:af:1c:eb:06:d9:01:92:c7:da:11:a2:
0d:14:66:be:bb:42:f7:48:51:7f:64:bb:51:d8:f4:
cc:f3:a6:93:ca:b7:21:15:76:89:48:ec:9a:d7:61:
46:10:e8:2f:7d:f1:9d:1c:8e:0c:f7:31:2c:5b:32:
fe:32:cd:dc:59:81:60:c8:ed:4c:1d:67:19:52:22:
10:50:7c:4e:96:fb:5f:7a:8b:2d:14:aa:87:e9:d8:
fa:d8:9b:6f:07:c4:9a:5b:f3:1f:4a:a4:ac:2b:d7:
8b:4a:b7:9c:25:eb:ee:66:d3:be:14:24:56:cd:29:
8a:a2:b7:e2:af:4b:cb:61:39:be:94:2c:d5:c4:43:
49:56:84:f7:87:9d:ad:7a:a7:a0:1c:c4:60:b0:51:
b7:1b:c7:58:29:a5:37:b4:f0:bc:08:85:1b:e8:ed:
eb:23:29:96:72:27:7f:8c:39:36:76:5b:90:a8:fb:
a4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:6E:13:B5:DB:2B:DB:3F:53:F5:7D:57:42:00:DB:38:F1:C5:20:51
X509v3 Authority Key Identifier:
keyid:96:BB:94:B4:57:F9:D8:2A:29:B5:B2:FD:9F:3A:44:18:89:9E:71:EC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/lruUtFf52CoptbL9nzpEGImecew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/6W4Ttdsr2z9T9X1XQgDbOPHFIFE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.67.128.0/20
Signature Algorithm: sha256WithRSAEncryption
16:b7:0d:d2:b8:94:25:b8:66:20:1f:49:d1:03:8d:f4:55:e6:
28:e9:72:d7:f2:f5:21:75:2b:f9:20:d5:f7:b9:51:de:36:1c:
0a:69:89:bd:6f:ef:ad:41:89:10:32:78:5e:99:ac:08:ac:d8:
2a:f8:13:4c:69:2a:02:d4:b4:3d:ab:31:fc:12:90:2d:f1:38:
40:cc:26:29:04:c0:fc:79:cb:9f:84:ea:5d:14:9d:be:78:cb:
b0:5e:83:0d:0d:7b:76:3a:d6:c7:2d:cd:31:35:d9:c6:39:68:
3d:c1:8b:dd:b5:8e:8f:7a:96:9d:3b:98:6f:5c:9c:64:31:ad:
67:b9:d6:ac:dd:61:a5:a6:c0:a3:84:d3:46:a5:6c:0d:5b:8d:
81:4b:f3:c5:9c:8d:87:33:e0:43:4b:8c:ee:56:b0:e5:0c:d3:
a8:d6:12:49:e3:5a:4e:8b:59:90:28:e0:49:a6:25:28:83:0b:
a9:fe:02:d7:8c:58:b7:64:c4:ec:b4:f0:26:aa:a3:83:2d:b8:
26:f5:9f:a6:fa:e6:b6:0d:b5:47:3c:96:5b:42:dc:7c:f9:a0:
c1:30:be:4f:56:a0:7a:f0:b6:8a:d2:56:3a:1a:e7:f0:ec:c1:
6c:fb:b6:97:5d:aa:5d:d6:a4:0c:76:67:38:e9:f9:17:0f:8c:
f2:af:78:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:04:27 2025 by rpki-client