Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/H5W1Wt_XIwlNsneps3zSBIjpKsQ.roa
File: H5W1Wt_XIwlNsneps3zSBIjpKsQ.roa (raw, json)
Hash identifier: embkYEO/0O5lpJIv2r/zZZ08t5Tx3f9JHSSqTxa7zkk=
Subject key identifier: 1F:95:B5:5A:DF:D7:23:09:4D:B2:77:A9:B3:7C:D2:04:88:E9:2A:C4
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 17D8
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/H5W1Wt_XIwlNsneps3zSBIjpKsQ.roa
Signing time: Mon 10 Feb 2025 14:07:19 +0000
ROA not before: Mon 10 Feb 2025 14:07:19 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4780
IP address blocks: 42.0.64.0/18 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Aug 2025 08:53:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6104 (0x17d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 10 14:07:19 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=1F95B55ADFD723094DB277A9B37CD20488E92AC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a1:04:f0:a9:56:d9:0d:a0:75:86:b8:29:28:
0e:a1:99:73:18:db:9c:15:41:79:88:fb:fd:ed:13:
0f:8e:76:3a:98:cf:bf:43:e3:03:51:d6:54:e6:92:
43:56:d7:3e:f4:e0:0e:06:8e:f5:83:c4:ff:b9:c3:
ad:1d:92:4b:23:30:4a:7f:a3:5e:31:9c:8a:76:d3:
0e:76:dd:37:07:c6:6b:00:5a:c8:69:96:3e:41:aa:
b5:80:09:d3:16:f5:07:2e:58:8f:b9:df:af:61:8c:
3a:57:0c:c6:e4:24:0b:36:c5:a4:5e:45:e8:c1:56:
b0:c0:a2:1e:48:04:61:ad:0f:ca:d1:ab:58:be:fb:
79:0f:df:30:2f:12:93:cf:21:c1:4e:7c:42:2a:51:
7a:9c:cf:54:39:be:4f:0e:90:04:01:76:84:4e:83:
34:53:f3:15:c8:aa:60:79:7b:8d:e5:d2:9a:e7:ee:
74:dd:69:04:d3:cb:db:b7:4d:f5:ca:95:a8:7d:d8:
36:9b:cc:b7:0f:e1:b3:c5:fd:7a:6d:52:14:20:45:
8e:d6:09:d0:f5:67:5d:c5:19:07:81:10:b8:8d:ab:
23:9b:30:72:ac:89:74:21:83:17:38:10:b6:6e:0c:
86:00:b6:d1:e6:d3:74:42:90:fe:57:4f:95:d7:07:
da:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:95:B5:5A:DF:D7:23:09:4D:B2:77:A9:B3:7C:D2:04:88:E9:2A:C4
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/H5W1Wt_XIwlNsneps3zSBIjpKsQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
42.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
82:f3:00:9b:d9:f0:20:8e:2d:0f:71:78:ee:67:ff:31:2b:79:
64:13:15:38:95:bf:45:cc:52:00:52:1f:ed:73:c3:d1:96:c5:
dc:d7:3c:15:b7:d3:89:66:c1:43:ad:e2:96:e1:a9:ad:cd:76:
3b:67:f0:aa:fd:dd:9d:54:de:94:07:41:24:d9:8d:90:0b:c8:
fb:65:bc:5f:65:5c:b8:cb:c8:9b:73:19:41:48:69:f3:63:a4:
e6:c7:5d:da:38:a5:06:bb:f3:fd:85:48:c3:1e:9c:22:14:ce:
f8:6a:19:8b:2c:cb:03:36:41:a7:bf:68:0c:6f:3f:64:ff:6e:
bd:1a:8e:a0:f4:d6:fa:58:12:e3:00:4b:04:74:3d:0d:5d:cb:
7c:28:7c:b2:58:41:7a:c7:59:f3:39:68:29:4e:87:bd:b5:db:
5e:3e:bf:0d:9d:f3:02:6f:ed:3a:cb:1c:8c:69:86:dc:d9:36:
ef:02:2c:c6:8d:c2:ab:f2:03:e0:1d:c2:c7:2b:5e:20:6d:28:
94:c6:da:ae:5f:65:8c:09:b5:7a:45:fa:4b:f9:73:50:84:7c:
cc:0b:97:5a:c2:56:0d:67:99:d4:42:6b:b9:c8:0d:b2:e3:fb:
f7:c0:4e:1d:3e:48:bd:2e:f8:e0:4c:14:d0:0f:17:2b:2c:4a:
a9:0a:d7:f9
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICF9gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx
NDA3MTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFGOTVCNTVBREZENzIz
MDk0REIyNzdBOUIzN0NEMjA0ODhFOTJBQzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDUoQTwqVbZDaB1hrgpKA6hmXMY25wVQXmI+/3tEw+OdjqYz79D
4wNR1lTmkkNW1z704A4GjvWDxP+5w60dkksjMEp/o14xnIp20w523TcHxmsAWshp
lj5BqrWACdMW9QcuWI+5369hjDpXDMbkJAs2xaReRejBVrDAoh5IBGGtD8rRq1i+
+3kP3zAvEpPPIcFOfEIqUXqcz1Q5vk8OkAQBdoROgzRT8xXIqmB5e43l0prn7nTd
aQTTy9u3TfXKlah92DabzLcP4bPF/XptUhQgRY7WCdD1Z13FGQeBELiNqyObMHKs
iXQhgxc4ELZuDIYAttHm03RCkP5XT5XXB9rBAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUH5W1Wt/XIwlNsneps3zSBIjpKsQwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvSDVXMVd0X1hJd2xOc25lcHMzelNC
SWpwS3NRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBioAQDAN
BgkqhkiG9w0BAQsFAAOCAQEAgvMAm9nwII4tD3F47mf/MSt5ZBMVOJW/RcxSAFIf
7XPD0ZbF3Nc8FbfTiWbBQ63iluGprc12O2fwqv3dnVTelAdBJNmNkAvI+2W8X2Vc
uMvIm3MZQUhp82Ok5sdd2jilBrvz/YVIwx6cIhTO+GoZiyzLAzZBp79oDG8/ZP9u
vRqOoPTW+lgS4wBLBHQ9DV3LfCh8slhBesdZ8zloKU6HvbXbXj6/DZ3zAm/tOssc
jGmG3Nk27wIsxo3Cq/ID4B3CxyteIG0olMbarl9ljAm1ekX6S/lzUIR8zAuXWsJW
DWeZ1EJrucgNsuP798BOHT5IvS744EwU0A8XKyxKqQrX+Q==
-----END CERTIFICATE-----
Generated at Sun Aug 24 02:44:46 2025 by rpki-client