Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/G7ioUVEV7C23rYXKw6_CEPXRB_o.roa
File: G7ioUVEV7C23rYXKw6_CEPXRB_o.roa (raw, json)
Hash identifier: 4bsxg8Wj2fhFlTYW0BFq1jVczwS7MLY9kjWr8p7wU8M=
Subject key identifier: 1B:B8:A8:51:51:15:EC:2D:B7:AD:85:CA:C3:AF:C2:10:F5:D1:07:FA
Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial: 0E06
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/G7ioUVEV7C23rYXKw6_CEPXRB_o.roa
Signing time: Mon 10 Feb 2025 13:59:21 +0000
ROA not before: Mon 10 Feb 2025 13:59:21 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4780
IP address blocks: 211.78.24.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Aug 2025 09:03:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3590 (0xe06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Validity
Not Before: Feb 10 13:59:21 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=1BB8A8515115EC2DB7AD85CAC3AFC210F5D107FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2f:dc:e1:62:65:29:e4:c5:1f:3a:a9:4f:a3:
22:ae:4c:da:80:a8:f9:87:5e:eb:75:ac:6b:f9:56:
6d:43:75:36:d0:34:58:8f:45:07:09:04:32:2d:68:
d3:bd:8b:13:7a:ee:f7:34:59:a2:82:21:cd:cf:36:
73:2b:86:55:0a:f0:32:4d:7c:3e:5d:50:04:34:2a:
82:6d:72:b2:03:e3:9f:1c:89:e0:fb:dd:1d:a2:e2:
0b:64:37:d1:16:78:b2:f3:4a:fd:5a:c3:fa:f5:3a:
26:18:bf:74:ff:fe:fd:ee:31:6f:03:28:18:02:86:
da:29:44:5d:d7:27:bf:df:00:e0:ad:b7:0d:fc:83:
0a:76:ee:d0:13:85:62:74:1f:a6:11:be:df:cf:e0:
18:d3:75:f3:86:2d:e9:36:92:3b:90:00:dd:e8:8b:
59:c9:a7:18:fb:ea:2e:00:03:56:d2:0f:b4:b0:73:
60:60:0b:d2:7f:c9:d2:42:f8:86:2f:5b:66:8d:70:
e5:fb:ab:f8:32:50:78:3a:34:8b:27:df:9d:1c:16:
cc:ab:a0:ea:77:d3:fd:7d:d3:ba:09:9a:3b:0c:c2:
1c:ed:f3:04:b4:ee:66:31:2c:59:7c:0d:92:c3:c2:
61:0f:7b:69:1e:cd:a0:4f:cf:b7:2d:e1:c5:d1:1d:
41:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B8:A8:51:51:15:EC:2D:B7:AD:85:CA:C3:AF:C2:10:F5:D1:07:FA
X509v3 Authority Key Identifier:
keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/G7ioUVEV7C23rYXKw6_CEPXRB_o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.78.24.0/21
Signature Algorithm: sha256WithRSAEncryption
3d:af:60:b4:e9:1f:c8:99:1f:67:13:30:55:54:d1:a8:04:ce:
92:d5:d3:b0:4b:41:6b:18:ad:6a:fc:2a:8d:42:18:13:8b:bf:
ea:b0:52:8a:3b:80:79:81:b0:a0:c5:c3:24:64:ff:35:49:35:
4b:c3:9d:28:2a:11:df:4b:3a:93:a9:2b:da:46:69:50:28:7e:
df:05:ec:c3:5f:76:9e:51:03:d9:84:b6:7e:c4:82:fd:8b:c7:
2a:7f:ee:de:fd:d5:0c:12:36:fe:ed:49:73:10:12:8e:b7:15:
c2:58:2f:09:56:be:84:c3:34:4a:90:b3:e6:e2:74:de:84:87:
2a:2e:2b:c1:c3:b9:9f:f0:ad:55:aa:5c:d5:1a:09:94:b4:11:
b5:fe:35:b2:8b:20:d0:f0:01:47:0e:6b:be:11:24:e2:50:37:
a9:26:26:2c:63:a7:fe:28:6b:f8:2d:82:5c:6e:08:bb:1f:86:
4a:db:59:84:61:71:6c:2e:8c:7e:f6:a2:db:c6:05:bc:89:76:
b3:ab:fa:59:30:ea:1d:6c:65:0f:0a:7e:29:01:a0:32:70:65:
51:c2:33:07:30:40:1f:5e:89:e3:68:39:8b:24:f0:34:06:3a:
b5:44:02:de:73:89:16:60:5a:90:cd:94:f0:f3:3a:dd:ac:8a:
72:06:7d:a2
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICDgYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3
MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yNTAyMTAx
MzU5MjFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFCQjhBODUxNTExNUVD
MkRCN0FEODVDQUMzQUZDMjEwRjVEMTA3RkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDjL9zhYmUp5MUfOqlPoyKuTNqAqPmHXut1rGv5Vm1DdTbQNFiP
RQcJBDItaNO9ixN67vc0WaKCIc3PNnMrhlUK8DJNfD5dUAQ0KoJtcrID458cieD7
3R2i4gtkN9EWeLLzSv1aw/r1OiYYv3T//v3uMW8DKBgChtopRF3XJ7/fAOCttw38
gwp27tAThWJ0H6YRvt/P4BjTdfOGLek2kjuQAN3oi1nJpxj76i4AA1bSD7Swc2Bg
C9J/ydJC+IYvW2aNcOX7q/gyUHg6NIsn350cFsyroOp30/1907oJmjsMwhzt8wS0
7mYxLFl8DZLDwmEPe2kezaBPz7ct4cXRHUEvAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUG7ioUVEV7C23rYXKw6/CEPXRB/owHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL
JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz
TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL0c3aW9VVkVWN0MyM3JZWEt3Nl9DRVBY
UkJfby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPTThgwDQYJ
KoZIhvcNAQELBQADggEBAD2vYLTpH8iZH2cTMFVU0agEzpLV07BLQWsYrWr8Ko1C
GBOLv+qwUoo7gHmBsKDFwyRk/zVJNUvDnSgqEd9LOpOpK9pGaVAoft8F7MNfdp5R
A9mEtn7Egv2Lxyp/7t791QwSNv7tSXMQEo63FcJYLwlWvoTDNEqQs+bidN6Ehyou
K8HDuZ/wrVWqXNUaCZS0EbX+NbKLINDwAUcOa74RJOJQN6kmJixjp/4oa/gtglxu
CLsfhkrbWYRhcWwujH72otvGBbyJdrOr+lkw6h1sZQ8KfikBoDJwZVHCMwcwQB9e
ieNoOYsk8DQGOrVEAt5ziRZgWpDNlPDzOt2sinIGfaI=
-----END CERTIFICATE-----
Generated at Sun Aug 24 07:04:35 2025 by rpki-client