Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/1CX3ekEXF20ETb-GOhzoGQotuwI.roa
File: 1CX3ekEXF20ETb-GOhzoGQotuwI.roa (raw, json)
Hash identifier: 2l2bnJCZEqd4pAQOTeVAnzgNfXiNzJP4QrIWKrYH/RM=
Subject key identifier: D4:25:F7:7A:41:17:17:6D:04:4D:BF:86:3A:1C:E8:19:0A:2D:BB:02
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1851
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/1CX3ekEXF20ETb-GOhzoGQotuwI.roa
Signing time: Mon 10 Feb 2025 14:07:49 +0000
ROA not before: Mon 10 Feb 2025 14:07:49 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4780
IP address blocks: 218.210.0.0/15 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Aug 2025 08:54:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6225 (0x1851)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 10 14:07:49 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D425F77A4117176D044DBF863A1CE8190A2DBB02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f4:a0:06:ce:05:93:4f:7b:e4:dc:c7:7b:bb:
fb:6e:c7:1a:be:4f:03:21:dc:5f:e0:48:f1:5b:1a:
c9:e5:1f:db:5b:25:0c:d8:05:99:f0:88:a0:a2:49:
dd:18:01:96:57:9d:45:b4:00:1a:4d:53:89:14:98:
0e:c9:c8:2d:23:70:64:37:f0:58:2d:24:8e:4a:2c:
eb:68:58:75:af:a7:03:eb:08:c2:6c:81:1b:44:0b:
fe:0f:cf:cf:0d:6b:06:b5:fd:0a:f6:bf:99:d5:23:
5b:b2:52:e2:6e:5c:c6:04:09:c2:db:36:39:58:23:
62:d7:cd:b0:38:ac:d8:c9:52:dd:07:31:2c:33:b4:
47:a5:b5:0c:2e:95:a6:a9:90:cf:ca:58:b9:8c:5c:
f4:7d:2a:ab:85:f1:ec:80:4d:cf:e0:a3:b2:80:a7:
df:28:d9:36:12:61:e5:03:cb:6f:08:40:07:35:4f:
2e:9d:92:37:8c:1c:ed:90:b2:f5:fb:dc:25:8d:7f:
e0:9e:9d:6f:da:eb:02:74:04:b7:70:5e:38:9b:89:
8a:d8:cb:3c:a1:bc:27:1a:7d:7d:19:41:04:61:de:
f0:2e:d9:71:3d:33:48:1c:0a:62:29:fe:ac:6d:37:
3c:04:49:91:f6:3e:07:7b:22:5a:14:2a:34:ab:ce:
17:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:25:F7:7A:41:17:17:6D:04:4D:BF:86:3A:1C:E8:19:0A:2D:BB:02
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/1CX3ekEXF20ETb-GOhzoGQotuwI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.210.0.0/15
Signature Algorithm: sha256WithRSAEncryption
39:ad:0a:73:92:4d:ee:59:d8:b1:fe:f5:79:16:7a:90:05:62:
dd:e8:0f:44:e6:11:48:a2:38:f4:63:1b:4f:16:b7:ba:f3:8d:
18:ef:32:e9:d9:cf:8f:e6:0b:d9:cc:9c:df:b6:0f:6f:ef:63:
38:95:3e:0f:c4:d0:23:4a:9c:3e:5c:52:86:c6:23:88:33:23:
e0:a2:7b:c6:2e:40:42:7a:8a:9c:a8:d1:bd:dd:d5:95:56:f7:
9a:f9:86:5b:4b:75:70:1c:a8:8d:a2:9d:06:21:f3:5c:17:68:
a7:be:e0:41:e4:d9:33:50:df:f8:49:7d:74:fc:ac:a0:98:6d:
e2:51:3c:62:78:74:61:6d:06:94:17:8f:06:8b:0e:ca:34:15:
34:2d:67:09:ac:81:40:e1:af:48:ed:3d:3d:97:6f:c2:df:1a:
54:50:1b:10:5c:07:22:76:06:4e:74:f6:d3:d8:e7:0e:c8:a7:
aa:ab:10:22:3e:67:a2:78:c2:45:34:de:3f:14:b8:de:a2:4e:
3a:80:70:24:af:6d:0a:2a:36:2d:45:ce:97:b8:a6:d8:25:a0:
14:82:0f:de:62:97:c1:33:7d:d5:cb:75:a4:fa:bb:82:e8:d1:
1f:64:5a:3c:2f:bc:44:20:33:0f:ec:59:05:ad:b2:9e:76:02:
ad:03:36:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:47:13 2025 by rpki-client