![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/c4ZdmVmHSJjnCD7IuamH48fEDy0.roa
File: c4ZdmVmHSJjnCD7IuamH48fEDy0.roa (raw, json)
Hash identifier: CxyVC8UfhJVxqdlbS8s+YCBzS68FnxIfrr8xMmZDArI=
Subject key identifier: 73:86:5D:99:59:87:48:98:E7:08:3E:C8:B9:A9:87:E3:C7:C4:0F:2D
Certificate issuer: /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial: 0CD5
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/c4ZdmVmHSJjnCD7IuamH48fEDy0.roa
Signing time: Mon 26 Aug 2024 05:27:02 +0000
ROA not before: Mon 26 Aug 2024 05:27:02 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24158
IP address blocks: 124.29.160.0/19 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:58:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3285 (0xcd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Validity
Not Before: Aug 26 05:27:02 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=73865D9959874898E7083EC8B9A987E3C7C40F2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:17:e5:14:a9:4e:12:a1:e1:26:c5:59:16:f9:
56:3d:c4:41:9b:33:b4:85:95:d6:a8:5e:a8:fd:58:
eb:0e:ff:73:5a:71:5a:ee:2b:82:81:8d:ac:a7:4f:
5a:8d:7a:d8:1b:e1:86:86:b3:b6:5c:18:1b:52:56:
5c:db:38:83:d7:08:5c:c3:d0:da:c2:53:a2:86:80:
d8:1c:c4:3c:e4:97:8c:68:72:d4:22:0e:2f:c0:c3:
02:d8:8c:aa:89:29:67:c5:68:b7:cc:87:8f:c9:cd:
9e:e2:17:47:f1:5f:f7:90:9e:a2:6f:da:3b:57:6d:
80:5c:ce:2f:34:5a:0e:5d:35:cb:76:91:18:79:93:
0a:2c:99:52:31:9b:2e:c2:e5:d9:02:d7:3c:06:16:
89:44:e6:5d:76:9b:c9:5e:ce:3f:d6:dc:0e:ff:b9:
57:5a:6d:d9:0f:20:c6:8c:97:73:3b:db:44:47:4a:
18:03:5f:dc:a4:58:4b:8a:e0:4b:0d:83:28:d8:83:
3e:84:3e:f6:79:ba:4d:ff:7c:56:1e:4a:b1:94:ff:
02:83:16:b8:2f:53:fc:ea:ac:84:6c:de:48:ba:3d:
11:d7:9b:26:bb:38:5c:c8:7b:2a:7b:0a:44:34:17:
dc:45:55:1e:42:80:b4:be:35:13:6c:5e:d7:0c:07:
31:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:86:5D:99:59:87:48:98:E7:08:3E:C8:B9:A9:87:E3:C7:C4:0F:2D
X509v3 Authority Key Identifier:
keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/c4ZdmVmHSJjnCD7IuamH48fEDy0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.29.160.0/19
Signature Algorithm: sha256WithRSAEncryption
79:85:22:28:13:e5:9e:1a:28:be:2c:0c:7b:50:5b:8d:5d:10:
42:2b:9b:7b:4a:38:b5:93:cc:6b:d4:ed:58:b2:aa:59:96:d9:
aa:c6:6e:20:13:f1:40:cc:87:c6:86:e6:79:27:df:ca:a4:76:
14:4a:f2:10:f4:86:f7:28:79:a7:ed:61:1f:03:66:bb:9a:83:
43:4e:14:cb:ea:b6:1e:9f:81:26:58:6d:de:02:50:12:97:74:
49:50:92:01:65:96:f3:fe:f6:de:ea:71:cc:f7:0c:ad:1f:d8:
ab:16:e3:39:3f:8e:83:3c:5c:20:a5:d3:f6:f5:a5:7e:5f:c6:
a3:da:33:ff:ea:1e:3f:1a:25:a8:f1:01:c0:b4:05:bf:29:64:
99:3e:85:a3:b9:0e:fa:bb:eb:7f:0e:5c:6a:72:ca:9b:5e:89:
13:30:51:ec:3c:d5:cf:ba:ae:c6:3a:1c:09:d1:11:a0:2f:81:
45:ff:c1:68:90:51:c6:8a:c2:f8:88:13:4d:8c:2f:67:ad:f3:
6b:bf:1b:62:2b:6c:51:38:cd:7a:13:8a:81:e4:ab:e5:7c:52:
b8:fd:24:56:b2:ce:f7:d5:4b:96:0d:93:e1:c1:a3:6e:dc:70:
65:ec:d5:29:b8:ee:97:4a:34:69:fb:5c:87:0f:ca:70:c1:f0:
14:40:3b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:12:14 2025 by rpki-client