Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/NYvWCTwT3nhcXC6zID9QloCMa84.roa
File: NYvWCTwT3nhcXC6zID9QloCMa84.roa (raw, json)
Hash identifier: qAkU8P2Y6TMRz046hl5lPc5IArQTmun/ItyZzaQa9sE=
Subject key identifier: 35:8B:D6:09:3C:13:DE:78:5C:5C:2E:B3:20:3F:50:96:80:8C:6B:CE
Certificate issuer: /CN=2C20881A0EFD0664A591AF3095D29935EF9BC361
Certificate serial: 036F
Authority key identifier: 2C:20:88:1A:0E:FD:06:64:A5:91:AF:30:95:D2:99:35:EF:9B:C3:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LCCIGg79BmSlka8wldKZNe-bw2E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/NYvWCTwT3nhcXC6zID9QloCMa84.roa
Signing time: Mon 10 Feb 2025 14:00:26 +0000
ROA not before: Mon 10 Feb 2025 14:00:26 +0000
ROA not after: Thu 28 Aug 2025 15:30:19 +0000
asID: 396982
IP address blocks: 2401:bf60:4ff5::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 22 Aug 2025 08:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 879 (0x36f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C20881A0EFD0664A591AF3095D29935EF9BC361
Validity
Not Before: Feb 10 14:00:26 2025 GMT
Not After : Aug 28 15:30:19 2025 GMT
Subject: CN=358BD6093C13DE785C5C2EB3203F5096808C6BCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bf:ee:0a:40:e6:fa:0e:11:9d:80:6f:ae:14:
d1:05:b0:34:1e:1c:b7:22:a9:0d:17:ac:1e:e0:65:
f8:01:5a:f8:39:9e:cc:22:8b:4e:84:d4:1c:9c:2f:
04:9d:ef:c0:f2:1d:08:8c:8b:d5:99:03:9f:81:d9:
4f:30:52:75:7c:d2:a9:a6:75:1c:66:2b:1d:8b:e2:
02:43:69:e3:9c:72:61:a3:7e:05:ae:28:3b:ed:8a:
6c:33:9f:f9:d2:59:fd:a6:0a:39:b0:96:ba:ac:dd:
d1:cb:5d:1a:cb:84:69:b3:05:fd:90:c0:03:c1:12:
9a:9e:83:7c:ab:49:02:92:69:bf:1a:b5:12:49:3a:
32:56:c1:55:5b:a2:5e:98:c5:ee:5f:68:d5:fd:3e:
b6:89:22:58:d3:5d:a3:b1:2c:89:2e:25:55:9f:cf:
df:83:b5:9c:c0:b4:cb:ef:17:7d:4e:69:09:4a:08:
ce:fe:3c:1c:7c:f4:c8:10:66:80:07:f3:26:99:03:
e3:e4:bc:9f:9f:18:6d:1f:40:a2:32:33:e2:93:99:
82:41:3c:c1:4f:3f:06:01:42:9a:51:4f:08:ef:97:
aa:09:7d:25:e0:19:d3:a9:ca:2f:0b:54:58:06:f1:
a7:db:1d:12:c9:51:49:71:21:eb:4f:3a:f3:9d:d0:
6c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8B:D6:09:3C:13:DE:78:5C:5C:2E:B3:20:3F:50:96:80:8C:6B:CE
X509v3 Authority Key Identifier:
keyid:2C:20:88:1A:0E:FD:06:64:A5:91:AF:30:95:D2:99:35:EF:9B:C3:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/LCCIGg79BmSlka8wldKZNe-bw2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LCCIGg79BmSlka8wldKZNe-bw2E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/NYvWCTwT3nhcXC6zID9QloCMa84.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:bf60:4ff5::/48
Signature Algorithm: sha256WithRSAEncryption
84:50:a5:13:b2:71:53:d6:7b:bd:57:30:f3:e1:15:1f:09:50:
03:44:4d:74:01:cd:f6:ef:da:cc:b0:b4:b1:92:cc:bf:aa:1e:
11:7e:b1:81:22:e1:12:14:d0:b9:f4:a2:f3:02:d1:5b:f7:bf:
79:2e:f8:ef:d9:8c:7d:a4:55:25:65:59:43:af:2a:97:d5:9d:
2e:44:b5:5c:b5:50:d9:b8:98:46:a9:ab:f9:e8:19:c8:b4:bc:
d1:c1:6e:ab:c0:da:96:0e:8b:29:61:8d:b2:0f:fe:f1:22:0d:
56:56:9f:ce:a2:cf:fe:ef:04:aa:01:90:e8:ea:48:89:ff:7b:
28:27:63:01:ed:f9:ed:f1:be:40:95:c2:cd:8b:5b:29:08:5d:
af:66:e8:01:b8:a7:3c:c5:cf:b8:8f:b9:ef:5c:c8:08:a3:f0:
20:40:31:03:a8:5a:45:72:8f:1d:91:69:4e:4b:c1:97:cc:cb:
ea:07:6c:15:a2:b9:b4:04:3d:17:2d:d8:68:cc:9e:3a:8b:2a:
66:8f:f3:f6:05:5a:da:4f:e9:d9:d3:31:34:58:39:f9:a1:f1:
c3:7d:eb:fb:b0:90:f1:aa:e7:62:ee:99:c6:72:7f:53:75:95:
d5:c7:c9:b0:fd:94:ff:29:4d:b6:de:79:b0:59:23:77:1d:e0:
6a:9c:eb:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:14:48 2025 by rpki-client