Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/5IJmTYKdOwT3hn6nQ8lC48HLxu4.roa
File: 5IJmTYKdOwT3hn6nQ8lC48HLxu4.roa (raw, json)
Hash identifier: ratgsmj5Bv/osYK+LOkPHHKVXxcsdH7Cc7FnpBZt1FY=
Subject key identifier: E4:82:66:4D:82:9D:3B:04:F7:86:7E:A7:43:C9:42:E3:C1:CB:C6:EE
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1823
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/5IJmTYKdOwT3hn6nQ8lC48HLxu4.roa
Signing time: Mon 10 Feb 2025 14:07:36 +0000
ROA not before: Mon 10 Feb 2025 14:07:36 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4780
IP address blocks: 211.74.128.0/17 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Aug 2025 08:53:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6179 (0x1823)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 10 14:07:36 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E482664D829D3B04F7867EA743C942E3C1CBC6EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cc:64:a6:85:4c:94:82:07:89:75:5a:b5:86:
fb:d9:91:fa:9c:ab:20:fa:62:cb:62:5a:d2:a4:d1:
5c:df:f0:40:a4:35:3d:9a:40:77:7a:8d:4c:e6:7e:
c0:15:1f:69:b6:da:2b:f9:6e:6f:93:bc:48:9e:c5:
67:1b:ed:51:1c:07:b4:f6:75:a9:6a:fc:02:ae:f9:
fc:5b:f8:fd:46:52:4e:90:0a:c2:a1:35:69:18:8f:
43:88:25:63:dc:d3:b2:ef:c7:0d:32:7b:8c:1b:3a:
45:6e:eb:09:2d:aa:a6:2a:b3:0f:f0:87:90:35:74:
86:d9:93:21:d6:12:d1:70:a0:87:35:77:88:b4:1f:
c9:4b:22:72:cc:3b:77:54:4d:30:50:43:79:69:53:
4a:d4:73:d6:cc:89:69:e3:1e:13:0d:0f:d8:d0:08:
4d:42:62:f6:98:85:1b:3d:45:70:ca:44:4c:7b:84:
07:64:21:ea:de:ae:93:89:cb:7b:b0:a7:8a:8a:1b:
ac:ba:21:97:63:0e:20:46:26:8f:ca:2b:1e:ac:7a:
61:e7:d1:2c:db:95:8d:73:7e:fe:93:aa:a3:7a:00:
2e:e1:97:28:5a:d0:58:84:00:31:21:fb:79:d9:92:
1f:71:19:c8:07:7f:07:d3:78:e7:3d:e2:7d:be:f3:
39:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:82:66:4D:82:9D:3B:04:F7:86:7E:A7:43:C9:42:E3:C1:CB:C6:EE
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/5IJmTYKdOwT3hn6nQ8lC48HLxu4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.74.128.0/17
Signature Algorithm: sha256WithRSAEncryption
38:cf:34:f3:bd:2b:3d:fb:24:ac:47:e4:29:4e:57:0f:97:4f:
4c:c3:bc:ed:80:83:39:f8:80:cd:50:7f:af:35:0f:da:39:9a:
6d:a4:a3:d5:ee:9c:a5:d5:6c:ce:c9:34:fa:90:c5:9d:18:37:
e3:9d:6e:67:aa:04:4b:e8:dd:4b:82:1e:57:d8:74:d5:41:de:
52:ae:aa:d9:79:09:db:f2:f8:c7:f4:85:78:00:6d:39:98:d3:
06:b8:a5:8e:17:16:d4:71:36:c8:3a:75:34:53:5f:cc:66:32:
06:58:68:a7:8e:e9:eb:36:94:11:d8:47:f6:21:a0:ec:c3:ff:
33:00:5b:99:67:db:82:9e:6c:ab:3a:a4:6b:f7:cd:15:22:0f:
e5:33:78:c5:a0:00:51:7f:c5:50:70:a9:7a:7d:82:16:47:2f:
87:21:ad:11:d9:14:9d:83:6c:41:77:4c:a7:02:c2:03:f0:fd:
5a:d7:c6:a4:29:0a:ec:da:53:b9:a5:fa:53:0c:5b:94:cd:da:
67:96:78:94:bf:71:f4:25:07:d5:be:0a:4e:50:2f:5e:f3:e6:
ff:4e:0a:49:b6:ab:6e:bd:4c:f0:16:92:96:c8:a5:be:c1:1c:
0d:1e:16:45:b6:d9:f7:cb:d9:4d:26:e7:64:b7:6a:95:f4:87:
7e:ea:6a:20
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICGCMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx
NDA3MzZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEU0ODI2NjREODI5RDNC
MDRGNzg2N0VBNzQzQzk0MkUzQzFDQkM2RUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzzGSmhUyUggeJdVq1hvvZkfqcqyD6YstiWtKk0Vzf8ECkNT2a
QHd6jUzmfsAVH2m22iv5bm+TvEiexWcb7VEcB7T2dalq/AKu+fxb+P1GUk6QCsKh
NWkYj0OIJWPc07Lvxw0ye4wbOkVu6wktqqYqsw/wh5A1dIbZkyHWEtFwoIc1d4i0
H8lLInLMO3dUTTBQQ3lpU0rUc9bMiWnjHhMND9jQCE1CYvaYhRs9RXDKREx7hAdk
IererpOJy3uwp4qKG6y6IZdjDiBGJo/KKx6semHn0SzblY1zfv6TqqN6AC7hlyha
0FiEADEh+3nZkh9xGcgHfwfTeOc94n2+8zlrAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU5IJmTYKdOwT3hn6nQ8lC48HLxu4wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvNUlKbVRZS2RPd1QzaG42blE4bEM0
OEhMeHU0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB9NKgDAN
BgkqhkiG9w0BAQsFAAOCAQEAOM80870rPfskrEfkKU5XD5dPTMO87YCDOfiAzVB/
rzUP2jmabaSj1e6cpdVszsk0+pDFnRg3451uZ6oES+jdS4IeV9h01UHeUq6q2XkJ
2/L4x/SFeABtOZjTBriljhcW1HE2yDp1NFNfzGYyBlhop47p6zaUEdhH9iGg7MP/
MwBbmWfbgp5sqzqka/fNFSIP5TN4xaAAUX/FUHCpen2CFkcvhyGtEdkUnYNsQXdM
pwLCA/D9WtfGpCkK7NpTuaX6UwxblM3aZ5Z4lL9x9CUH1b4KTlAvXvPm/04KSbar
br1M8BaSlsilvsEcDR4WRbbZ98vZTSbnZLdqlfSHfupqIA==
-----END CERTIFICATE-----
Generated at Sun Aug 24 02:44:40 2025 by rpki-client