Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/-nKQa1f24_Qd0gGE73auDVJVYjs.roa
File: -nKQa1f24_Qd0gGE73auDVJVYjs.roa (raw, json)
Hash identifier: xibNUTv9d4oNW1blpuDQcA7im9EBW/JXEJcrSS1Wg8Y=
Subject key identifier: FA:72:90:6B:57:F6:E3:F4:1D:D2:01:84:EF:76:AE:0D:52:55:62:3B
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 17D5
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/-nKQa1f24_Qd0gGE73auDVJVYjs.roa
Signing time: Mon 10 Feb 2025 14:07:18 +0000
ROA not before: Mon 10 Feb 2025 14:07:18 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9919
IP address blocks: 218.210.0.0/19 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Aug 2025 08:53:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6101 (0x17d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 10 14:07:18 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=FA72906B57F6E3F41DD20184EF76AE0D5255623B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e1:23:29:79:db:e3:0a:cf:02:e9:10:b3:c3:
74:91:1f:03:27:8d:ba:58:73:aa:33:69:20:70:ed:
20:65:cc:c9:ec:3b:b3:af:9e:48:6e:5d:fa:e2:2c:
e3:7f:1d:63:00:44:71:69:3d:ad:98:45:fc:0b:01:
89:c3:23:49:b5:ca:6a:49:c2:bb:fe:b8:e5:21:60:
41:fc:14:5c:7b:e1:4f:3b:4b:6c:26:97:cf:37:05:
d3:22:a2:ff:82:25:d7:ac:87:ba:31:1a:3c:08:90:
88:ee:e3:c7:bf:94:6e:5e:7e:97:7e:4e:66:b9:81:
01:85:ec:2b:41:72:8c:ce:5b:61:2d:07:80:0f:76:
b7:5a:62:2b:30:8f:57:9c:4d:5d:aa:28:a8:8f:04:
52:82:07:6a:ea:08:7f:1e:3d:e7:c6:db:e2:1a:71:
71:7e:fd:33:32:32:71:3b:56:cd:23:35:00:73:c9:
33:50:33:11:c5:53:3e:ce:87:50:72:8b:a2:1c:05:
50:a8:18:ca:4d:59:e8:28:7b:ad:8f:94:3e:cb:08:
55:ee:2d:f2:dd:a1:36:63:4e:40:e9:ff:70:8d:38:
36:6f:2e:ea:39:63:e3:19:21:91:44:38:3a:b0:95:
c4:ef:97:fd:35:a4:d2:fd:6c:ad:b2:f1:cf:22:32:
42:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:72:90:6B:57:F6:E3:F4:1D:D2:01:84:EF:76:AE:0D:52:55:62:3B
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/-nKQa1f24_Qd0gGE73auDVJVYjs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.210.0.0/19
Signature Algorithm: sha256WithRSAEncryption
31:b5:35:ae:58:18:27:3e:0b:4e:e7:fa:81:14:57:14:91:e3:
4e:cc:58:82:33:38:09:e5:ec:00:69:cf:24:c1:51:3c:a4:17:
c2:3b:00:f4:a0:dc:06:07:38:0f:03:de:34:cf:ab:6e:6b:d5:
2a:e4:e9:a3:5a:6b:d9:63:c0:b2:4f:03:55:6a:c3:54:98:12:
53:26:c7:29:b3:5c:37:9d:7d:76:21:62:d9:07:4e:f3:ba:f6:
fa:9b:c8:51:6f:eb:3b:d6:57:58:0b:b3:8a:8c:73:53:a5:20:
3f:ad:33:d8:b2:0e:41:a6:25:33:25:6d:5e:55:61:45:36:7e:
1f:81:00:4e:96:2b:42:3f:41:fa:48:18:cb:d6:0a:89:3f:86:
a4:98:55:95:33:08:9a:13:c0:30:9a:c6:52:ca:76:27:78:2e:
0b:e1:5a:fc:c3:05:7e:61:64:d9:d8:2c:3e:58:fb:da:02:d6:
eb:01:4b:f7:4d:4a:ed:ab:60:d9:38:3a:68:b2:e3:8c:96:81:
d1:da:de:4f:ac:e0:98:e2:f6:d9:60:f2:5b:6f:e2:e5:e1:31:
2d:28:6a:28:c7:e1:a3:64:76:81:0d:28:f9:f1:05:6c:3e:a2:
a7:7c:0a:68:49:36:63:eb:fb:7b:d4:3b:5b:21:4f:18:c0:61:
85:36:4f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:04:06 2025 by rpki-client