Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/UQADK2SNh1zoxZKMmai3oP-EUqI.roa
File: UQADK2SNh1zoxZKMmai3oP-EUqI.roa (raw, json)
Hash identifier: SdT3ZvdpGom8rPiYhaGWGXkoiFeSRRwdzyshysCiwcs=
Subject key identifier: 51:00:03:2B:64:8D:87:5C:E8:C5:92:8C:99:A8:B7:A0:FF:84:52:A2
Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial: 0DF6
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/UQADK2SNh1zoxZKMmai3oP-EUqI.roa
Signing time: Mon 26 Aug 2024 05:27:26 +0000
ROA not before: Mon 26 Aug 2024 05:27:26 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38845
IP address blocks: 140.136.160.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3574 (0xdf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Validity
Not Before: Aug 26 05:27:26 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5100032B648D875CE8C5928C99A8B7A0FF8452A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0c:c4:fb:a2:d3:ee:a8:b0:04:9a:86:ba:da:
65:73:d8:e5:f2:a4:fe:b0:f5:6b:79:1b:12:24:61:
bb:7f:0f:c1:12:cd:b3:e5:9e:2b:7c:55:37:97:67:
39:d0:0d:ef:1b:a0:5b:b8:23:41:75:cd:65:af:a3:
3f:77:96:1f:17:8c:bd:fb:4a:d8:14:ee:6b:d1:58:
f1:5c:47:5b:19:44:92:21:92:83:a2:4c:72:11:05:
c9:a7:fd:4e:ad:73:f7:79:f0:27:ce:fb:96:f9:e1:
bb:b1:96:e7:83:0d:46:70:8b:eb:5f:0e:30:cd:28:
70:8b:3e:7d:dc:54:52:ec:b7:14:0b:73:f4:7d:7d:
56:4c:9e:37:04:8e:39:c8:a2:a7:4b:24:61:85:23:
ad:51:ff:21:7e:1f:bf:b6:64:e6:b5:c3:9c:2c:d2:
55:a0:ab:16:03:2a:da:53:49:76:62:fe:df:2c:bf:
55:b0:bb:9c:4c:14:39:d3:2a:28:d1:9b:9a:c1:64:
8f:68:b2:2a:bc:f8:81:a1:1b:8b:59:13:9e:90:07:
59:13:df:21:d8:fd:5d:53:55:76:e8:75:2b:1d:4a:
09:fe:1b:a3:d0:07:a8:ff:97:8b:18:2d:0e:a4:20:
5e:47:e6:ef:06:0c:c7:2a:4e:b9:f5:d7:c2:24:b8:
99:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:00:03:2B:64:8D:87:5C:E8:C5:92:8C:99:A8:B7:A0:FF:84:52:A2
X509v3 Authority Key Identifier:
keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/UQADK2SNh1zoxZKMmai3oP-EUqI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
140.136.160.0/22
Signature Algorithm: sha256WithRSAEncryption
39:48:81:a2:64:88:1f:0a:18:6b:9f:20:5a:fa:a9:08:85:a9:
a9:3e:ac:c6:7a:94:3a:4f:27:df:55:71:02:d9:19:9f:ca:68:
26:3d:8f:b6:f8:05:e2:8d:3b:67:3b:d7:b2:83:74:d1:9b:4b:
12:e2:bc:24:83:d8:04:e8:d2:9e:bf:93:a6:83:21:05:cb:c0:
e2:16:98:34:9b:13:ac:ba:53:7c:da:5c:24:2c:e5:03:61:b8:
fc:59:1f:4b:27:1a:89:60:06:a2:c6:14:98:2a:9d:61:50:ac:
b8:25:c0:f2:55:43:33:1a:27:01:b2:55:ad:ce:49:90:bd:20:
c9:a7:f6:c7:6f:74:fe:74:90:5c:fb:05:8d:53:1d:4d:64:84:
da:fc:3d:e4:88:c3:e7:ed:e0:f5:90:e2:1b:ab:a0:be:3d:33:
e4:f7:c6:e1:b1:f8:18:d8:b7:b9:bd:81:85:a5:e9:7d:a7:0f:
e7:50:18:ea:0f:b9:bc:3f:67:05:cf:ac:64:16:b4:83:ee:f7:
33:cf:1b:cb:fc:f2:12:20:e5:74:26:f5:ce:9b:e5:16:a5:80:
c3:50:ab:aa:4c:4d:13:8b:db:ab:3d:93:c0:99:48:4f:9f:db:
2e:2b:ee:21:f2:69:44:83:7e:91:87:71:8f:2f:95:3e:b3:e2:
d7:6e:83:4f
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICDfYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDU3
QjEwMzcyQTY4NkUzRkY3MzY1NkJFQjVDRDNERUJDOTMyMzcxQTAeFw0yNDA4MjYw
NTI3MjZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDUxMDAwMzJCNjQ4RDg3
NUNFOEM1OTI4Qzk5QThCN0EwRkY4NDUyQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDDMT7otPuqLAEmoa62mVz2OXypP6w9Wt5GxIkYbt/D8ESzbPl
nit8VTeXZznQDe8boFu4I0F1zWWvoz93lh8XjL37StgU7mvRWPFcR1sZRJIhkoOi
THIRBcmn/U6tc/d58CfO+5b54buxlueDDUZwi+tfDjDNKHCLPn3cVFLstxQLc/R9
fVZMnjcEjjnIoqdLJGGFI61R/yF+H7+2ZOa1w5ws0lWgqxYDKtpTSXZi/t8sv1Ww
u5xMFDnTKijRm5rBZI9osiq8+IGhG4tZE56QB1kT3yHY/V1TVXbodSsdSgn+G6PQ
B6j/l4sYLQ6kIF5H5u8GDMcqTrn118IkuJkHAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUUQADK2SNh1zoxZKMmai3oP+EUqIwHwYDVR0jBBgwFoAURXsQNypobj/3Nla+
tc0968kyNxowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
UlhzUU55cG9ial8zTmxhLXRjMDk2OGt5TnhvLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9SWHNRTnlwb2JqXzNObGEtdGMwOTY4a3lOeG8uY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9VUUFESzJTTmgxem94WktNbWFp
M29QLUVVcUkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjIig
MA0GCSqGSIb3DQEBCwUAA4IBAQA5SIGiZIgfChhrnyBa+qkIhampPqzGepQ6Tyff
VXEC2RmfymgmPY+2+AXijTtnO9eyg3TRm0sS4rwkg9gE6NKev5OmgyEFy8DiFpg0
mxOsulN82lwkLOUDYbj8WR9LJxqJYAaixhSYKp1hUKy4JcDyVUMzGicBslWtzkmQ
vSDJp/bHb3T+dJBc+wWNUx1NZITa/D3kiMPn7eD1kOIbq6C+PTPk98bhsfgY2Le5
vYGFpel9pw/nUBjqD7m8P2cFz6xkFrSD7vczzxvL/PISIOV0JvXOm+UWpYDDUKuq
TE0Ti9urPZPAmUhPn9suK+4h8mlEg36Rh3GPL5U+s+LXboNP
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:14:30 2025 by rpki-client