Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/dNqNx73MybtSrY9yWLr_MAWowpE.roa
File: dNqNx73MybtSrY9yWLr_MAWowpE.roa (raw, json)
Hash identifier: iRMY/XI1v3pvuigJUFSZLyjlxeG6DObXrTaCcAU/22I=
Subject key identifier: 74:DA:8D:C7:BD:CC:C9:BB:52:AD:8F:72:58:BA:FF:30:05:A8:C2:91
Certificate issuer: /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial: 0D79
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/dNqNx73MybtSrY9yWLr_MAWowpE.roa
Signing time: Mon 26 Aug 2024 05:34:59 +0000
ROA not before: Mon 26 Aug 2024 05:34:59 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18424
IP address blocks: 2405:8700:3000::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:22:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3449 (0xd79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Validity
Not Before: Aug 26 05:34:59 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=74DA8DC7BDCCC9BB52AD8F7258BAFF3005A8C291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d9:6e:59:17:4c:ce:bd:77:9a:b7:c6:f5:6d:
46:ea:87:e2:e7:b5:0f:2d:ee:3b:73:d0:c5:59:d4:
ce:4d:0d:60:e6:3e:92:11:58:81:a8:e9:97:02:db:
a6:c4:b6:8b:fe:26:a4:d0:74:c2:ef:cf:ee:b7:1a:
2f:ed:1d:63:1b:70:ff:2d:39:76:3d:82:4d:f0:c6:
fb:49:1f:87:86:b7:5c:20:35:f4:c5:23:64:71:a0:
fc:62:14:61:ee:f8:e3:db:58:13:43:35:0d:a4:1a:
dc:6b:90:a7:3b:e5:35:82:ac:f7:8a:37:e1:8a:ee:
b2:b1:4c:24:44:b5:2f:95:49:df:85:ba:55:ec:ab:
58:2b:dd:b0:73:a5:ff:d7:30:d5:89:3c:5a:3c:cc:
47:c8:fd:69:35:6b:e7:4d:a8:58:5b:8b:51:da:9e:
23:02:7e:ce:ea:dc:19:45:95:df:fa:28:38:4c:28:
bc:a1:db:52:34:a9:19:ba:af:be:14:42:1d:52:14:
e3:64:a1:6c:24:2e:7f:33:97:6c:45:7c:dc:4c:57:
3b:9f:f6:40:ba:23:e5:53:e7:a2:a8:34:a8:4e:1b:
cc:4d:30:19:53:0b:f7:eb:bb:0b:56:c8:f8:d2:a7:
4c:5f:43:1d:c1:ca:60:a6:f7:6d:8c:38:d9:64:84:
42:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DA:8D:C7:BD:CC:C9:BB:52:AD:8F:72:58:BA:FF:30:05:A8:C2:91
X509v3 Authority Key Identifier:
keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/dNqNx73MybtSrY9yWLr_MAWowpE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:8700:3000::/48
Signature Algorithm: sha256WithRSAEncryption
07:cd:d1:65:e4:5a:ec:05:18:11:cb:51:53:0e:1e:56:65:dc:
b7:ad:f9:1d:4b:c5:0d:78:a1:c6:b7:4c:88:50:fe:21:b1:83:
3f:f1:6c:fb:0e:7d:92:4d:b7:c0:74:7c:a7:c6:a0:ea:9a:fb:
1a:29:19:fc:57:67:3a:8e:f1:8d:db:93:77:b7:8b:5b:ca:61:
25:53:63:bc:b9:be:04:5f:be:98:81:dc:e9:b5:99:73:4e:57:
86:62:31:73:cd:7a:a6:a0:6a:fd:d8:f1:b2:aa:74:ed:16:87:
60:be:bb:0d:c8:0a:c0:5b:71:71:88:48:3e:fa:be:94:e4:2d:
d1:0b:33:7b:a1:6a:de:4f:39:b0:c0:8d:8e:ca:f3:a5:e2:ab:
a6:2a:18:6c:64:82:0d:f8:ef:fe:53:7a:48:a5:ca:73:a7:d7:
ea:f3:00:fe:45:e8:6f:cc:82:04:ab:45:ae:f5:2f:89:26:ec:
ae:6d:89:2f:41:c8:bc:46:e6:f4:93:f8:f4:0f:27:06:59:62:
96:fa:f8:65:07:23:bc:05:fe:03:10:3d:1c:65:22:d1:3e:e8:
ff:33:cd:d1:a4:9f:b8:b5:e6:c3:7d:64:49:6b:f4:55:85:d4:
d4:d4:da:f4:1c:df:bd:1d:73:b2:af:e3:d2:f2:57:46:cd:c7:
ef:4b:87:8c
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICDXkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkY3
RUNEQjYyMDJGRkMyQzM0REY3QkNENzFBMUMwODg4NTM4MkZCNzAeFw0yNDA4MjYw
NTM0NTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc0REE4REM3QkRDQ0M5
QkI1MkFEOEY3MjU4QkFGRjMwMDVBOEMyOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDG2W5ZF0zOvXeat8b1bUbqh+LntQ8t7jtz0MVZ1M5NDWDmPpIR
WIGo6ZcC26bEtov+JqTQdMLvz+63Gi/tHWMbcP8tOXY9gk3wxvtJH4eGt1wgNfTF
I2RxoPxiFGHu+OPbWBNDNQ2kGtxrkKc75TWCrPeKN+GK7rKxTCREtS+VSd+FulXs
q1gr3bBzpf/XMNWJPFo8zEfI/Wk1a+dNqFhbi1HaniMCfs7q3BlFld/6KDhMKLyh
21I0qRm6r74UQh1SFONkoWwkLn8zl2xFfNxMVzuf9kC6I+VT56KoNKhOG8xNMBlT
C/fruwtWyPjSp0xfQx3BymCm922MONlkhEKlAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUdNqNx73MybtSrY9yWLr/MAWowpEwHwYDVR0jBBgwFoAU/37NtiAv/Cw033vN
caHAiIU4L7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJ
V0FOL18zN050aUF2X0N3MDMzdk5jYUhBaUlVNEw3Yy5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvXzM3TnRpQXZfQ3cwMzN2TmNhSEFpSVU0TDdjLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJV0FOL2ROcU54NzNNeWJ0
U3JZOXlXTHJfTUFXb3dwRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAkBYcAMAAwDQYJKoZIhvcNAQELBQADggEBAAfN0WXkWuwFGBHLUVMOHlZl
3Let+R1LxQ14oca3TIhQ/iGxgz/xbPsOfZJNt8B0fKfGoOqa+xopGfxXZzqO8Y3b
k3e3i1vKYSVTY7y5vgRfvpiB3Om1mXNOV4ZiMXPNeqagav3Y8bKqdO0Wh2C+uw3I
CsBbcXGISD76vpTkLdELM3uhat5PObDAjY7K86Xiq6YqGGxkgg347/5TekilynOn
1+rzAP5F6G/MggSrRa71L4km7K5tiS9ByLxG5vST+PQPJwZZYpb6+GUHI7wF/gMQ
PRxlItE+6P8zzdGkn7i15sN9ZElr9FWF1NTU2vQc370dc7Kv49LyV0bNx+9Lh4w=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:22:17 2025 by rpki-client