Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/xxeX1JCK6r5T5ZiotndmmJRT6eI.roa
File: xxeX1JCK6r5T5ZiotndmmJRT6eI.roa (raw, json)
Hash identifier: YxSq205eBtHhcVo3VFzZSKcnWke9Bd4zi0ZMNkd32jo=
Subject key identifier: C7:17:97:D4:90:8A:EA:BE:53:E5:98:A8:B6:77:66:98:94:53:E9:E2
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 11E7
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/xxeX1JCK6r5T5ZiotndmmJRT6eI.roa
Signing time: Mon 10 Feb 2025 14:27:52 +0000
ROA not before: Mon 10 Feb 2025 14:27:52 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131627
IP address blocks: 219.91.68.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Aug 2025 08:59:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4583 (0x11e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Feb 10 14:27:52 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C71797D4908AEABE53E598A8B67766989453E9E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:89:1f:f4:d3:c7:ca:57:68:e0:8e:7b:a4:2c:
03:2c:97:74:32:4f:09:27:89:24:96:f5:35:e5:50:
eb:54:a1:1e:ef:35:50:1d:25:b8:03:7f:54:ce:65:
3e:08:88:42:9c:87:8a:48:3d:a9:f9:86:9f:67:f2:
26:c8:dd:45:db:66:6a:d4:24:00:57:c9:25:ba:37:
9d:31:b1:33:1a:f7:4d:2d:c0:0b:88:d4:b9:20:e9:
1a:5c:62:c6:66:5d:43:48:cf:81:5a:7a:a7:51:1d:
3c:a1:1f:e5:82:55:54:6b:8b:13:d4:57:9a:31:d7:
e2:fa:2e:61:2f:d8:73:1a:75:d6:68:82:02:51:2f:
58:43:38:e3:11:63:41:2a:2a:47:4f:79:e9:f4:c8:
bf:17:a9:a9:03:37:95:19:87:1d:97:79:7d:0a:f3:
9e:40:6c:a6:bc:95:82:3d:24:62:81:3d:26:53:a9:
2d:87:4c:d6:40:1a:38:fd:47:5b:d2:dd:b0:81:f1:
b8:6a:c6:8c:46:c7:e7:f9:ca:1f:30:a6:80:50:76:
16:1f:b4:c2:b3:3c:3b:1e:c7:94:e0:32:41:71:15:
e2:b5:54:e5:8f:8c:6b:8a:33:06:1c:29:8c:10:16:
ad:41:54:52:50:fa:e0:03:62:6b:92:28:33:fc:d3:
98:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:17:97:D4:90:8A:EA:BE:53:E5:98:A8:B6:77:66:98:94:53:E9:E2
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/xxeX1JCK6r5T5ZiotndmmJRT6eI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.91.68.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:f1:32:b7:50:4f:24:b2:f0:e0:77:16:8c:c8:8e:d0:b5:8e:
d4:27:c7:00:2b:04:03:b5:60:f4:65:eb:94:eb:1c:37:c4:55:
23:dd:98:87:08:ce:48:34:0e:ac:85:80:f5:2f:1e:b8:3d:89:
84:9f:cb:8e:5d:36:4f:c8:d2:f3:25:76:5f:4e:1f:50:10:a9:
cc:74:87:b4:ed:03:28:1e:9a:c1:07:31:c9:30:39:b0:4d:e7:
dc:8d:73:7d:22:6b:91:7e:4f:b2:b0:73:39:a6:62:3e:e3:46:
46:1b:73:b3:7d:53:0e:df:86:60:a6:10:80:a2:c7:b8:cd:33:
77:92:55:57:f7:93:b1:92:50:64:94:34:7d:c6:24:fb:a4:52:
7d:9d:68:e6:02:e1:87:8f:44:5b:f1:01:d2:a1:3d:27:29:19:
cb:52:1a:d2:af:6f:0c:b4:7d:9e:c4:05:cf:fa:94:73:b1:f9:
38:bd:b3:2e:be:2d:6e:86:b5:2d:70:39:08:00:d6:c7:a2:32:
e1:98:0e:fd:a1:14:14:b3:76:97:8a:3a:72:13:18:23:81:23:
eb:77:b1:c0:ce:74:5b:79:d5:98:d8:a0:6d:67:ce:fc:e4:4d:
c0:2c:2a:fc:72:8b:04:7b:cc:5d:30:4f:59:8b:fa:72:63:96:
05:95:0d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:45:22 2025 by rpki-client