Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Be-zcVTKRKHKrJq5mkAM3nvWyzE.roa
File: Be-zcVTKRKHKrJq5mkAM3nvWyzE.roa (raw, json)
Hash identifier: LOwh9PiqS6KpeseqJYCItUGAfnK1HRqmmiypYUGcMg8=
Subject key identifier: 05:EF:B3:71:54:CA:44:A1:CA:AC:9A:B9:9A:40:0C:DE:7B:D6:CB:31
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 17A0
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Be-zcVTKRKHKrJq5mkAM3nvWyzE.roa
Signing time: Mon 10 Feb 2025 14:07:06 +0000
ROA not before: Mon 10 Feb 2025 14:07:06 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131627
IP address blocks: 106.105.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Aug 2025 08:53:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6048 (0x17a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 10 14:07:06 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=05EFB37154CA44A1CAAC9AB99A400CDE7BD6CB31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:45:10:48:ae:4d:44:bc:29:8e:82:78:98:aa:
c2:ec:33:0d:1a:df:83:d3:c5:c9:d2:87:97:e9:43:
90:0e:29:45:1a:f9:0d:9d:cb:b2:53:d6:62:c2:bb:
83:02:5a:66:2b:b5:a1:2a:e1:00:1a:86:1b:ed:34:
c0:e4:3a:99:ee:80:f1:4a:8f:37:4c:1b:0a:23:3e:
a4:51:7c:7b:12:c4:66:c1:13:69:c6:bc:20:e4:8a:
11:c5:f7:43:44:06:11:cc:44:24:9d:d8:69:0f:f9:
8c:1f:c0:d9:50:f4:65:da:20:65:30:a1:25:09:66:
2b:f6:92:b7:df:e4:ea:2b:46:d4:dd:80:d5:a3:b1:
e6:67:69:af:4d:7b:d7:5d:7d:51:01:37:9d:d8:f7:
2a:94:a2:d1:7e:a4:00:ec:1c:cb:14:00:f1:7d:2d:
e9:dc:e5:a4:9e:90:12:04:6f:37:70:58:a4:d3:4d:
e5:a2:ee:dc:d5:b4:3e:4f:95:d7:5a:61:21:3a:3e:
64:d8:d2:5f:0f:77:7f:b7:9e:91:b5:31:e7:2b:c6:
c0:0b:7f:85:3c:fa:b7:8e:f0:11:b8:c4:58:2f:a7:
6f:df:c6:ac:78:76:aa:4b:08:a2:21:64:ee:40:8d:
18:47:b9:58:b4:a6:06:34:66:f3:15:c5:27:70:41:
89:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:EF:B3:71:54:CA:44:A1:CA:AC:9A:B9:9A:40:0C:DE:7B:D6:CB:31
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Be-zcVTKRKHKrJq5mkAM3nvWyzE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.249.0/24
Signature Algorithm: sha256WithRSAEncryption
35:76:9a:62:01:b7:54:e9:63:a3:7b:0c:39:52:19:c7:99:08:
9d:ea:4b:88:c4:9a:41:b0:56:d4:fe:d1:60:f3:8a:2e:7d:35:
37:ca:6e:ef:b2:ac:56:54:6b:ed:6a:fa:81:c9:88:cb:78:fd:
19:ac:9b:13:1c:2e:4e:95:a8:e5:3d:fe:86:74:46:f9:0a:99:
dc:fa:8c:91:64:d6:a6:8c:59:c5:61:1d:6d:c2:eb:ee:c9:e5:
0b:eb:a0:e6:40:09:ca:14:1a:ec:07:61:e6:a8:43:12:30:7b:
bf:50:2c:29:46:3f:46:87:77:96:0a:b8:0b:37:b5:2c:80:3f:
f2:a2:71:29:2e:fd:31:c4:d1:1c:25:d7:4b:75:bc:ac:7a:68:
20:35:e0:da:80:68:79:46:89:7a:6a:1a:78:ed:ee:a2:b6:9c:
fb:c6:51:f4:1c:72:1f:29:18:49:4e:8e:47:b1:ee:29:7f:d5:
7c:92:b1:ef:a9:4b:cc:61:65:88:ad:3a:5e:35:b6:0f:88:f4:
dd:0e:6a:95:33:bd:a3:2c:5c:85:67:cc:8d:c1:9a:35:59:5e:
92:d7:b6:db:6c:ff:aa:28:8c:d1:18:cb:33:22:3b:dd:fc:19:
ba:94:d8:f5:71:92:c7:99:91:d4:1c:82:68:d2:e3:e9:2f:e3:
4a:15:f3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:41:45 2025 by rpki-client