Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Xz70WsMUS4Zuv-yvkqbYhz21GoY.roa
File: Xz70WsMUS4Zuv-yvkqbYhz21GoY.roa (raw, json)
Hash identifier: +3pMY1MMAVo6Z2sDP+yWGjPGp4uDSsQ79PpNixoH7b4=
Subject key identifier: 5F:3E:F4:5A:C3:14:4B:86:6E:BF:EC:AF:92:A6:D8:87:3D:B5:1A:86
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 17C7
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Xz70WsMUS4Zuv-yvkqbYhz21GoY.roa
Signing time: Mon 10 Feb 2025 14:07:15 +0000
ROA not before: Mon 10 Feb 2025 14:07:15 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4780
IP address blocks: 122.146.0.0/15 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Aug 2025 08:53:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6087 (0x17c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 10 14:07:15 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5F3EF45AC3144B866EBFECAF92A6D8873DB51A86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c2:30:bc:11:e2:57:28:48:bf:f3:da:c3:ea:
22:13:d2:cc:36:42:85:5c:82:bb:94:2e:f4:e9:20:
8b:ea:44:c4:41:7b:20:48:ca:6b:8c:58:18:d9:45:
07:11:e4:0f:42:c0:80:53:a6:db:51:49:2b:bd:0d:
00:48:52:63:77:ff:08:68:c2:5a:b4:68:0d:80:55:
cc:62:33:7d:6c:a5:1b:fb:c4:86:11:6d:f6:d6:24:
0d:2c:d8:9f:2f:5f:76:5d:46:06:40:9e:49:cf:a0:
e3:59:80:9d:ac:87:81:f4:eb:86:08:b0:45:2a:49:
b3:56:22:12:c8:9d:85:9e:6a:3f:51:07:07:d0:8c:
24:3e:40:09:e9:39:75:5c:07:ac:31:68:ce:75:86:
da:31:da:da:b1:e3:b5:79:74:1c:c7:91:51:78:50:
8c:9e:79:1d:88:7b:99:93:51:ba:c7:82:80:aa:c0:
5a:fb:4f:67:75:08:9d:c3:10:4f:2f:f9:2d:3c:f0:
9c:db:cc:22:8e:96:2d:e3:d4:22:75:96:6c:7f:89:
b7:c9:cb:23:31:a8:5d:83:b5:9f:50:ff:bd:ab:fc:
22:6b:26:d3:de:3b:d1:75:ae:ba:8f:48:5e:fe:6c:
68:92:34:c6:be:9f:11:35:90:98:d9:6c:c0:ae:73:
58:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:3E:F4:5A:C3:14:4B:86:6E:BF:EC:AF:92:A6:D8:87:3D:B5:1A:86
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Xz70WsMUS4Zuv-yvkqbYhz21GoY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.146.0.0/15
Signature Algorithm: sha256WithRSAEncryption
30:59:1f:78:61:c7:43:c6:13:f6:db:c5:2a:49:4e:33:ea:b2:
a0:fe:f2:bc:03:4a:88:8a:3c:29:36:e3:0a:cb:13:32:10:b5:
db:a1:7b:c5:22:f3:2c:75:ec:ed:a9:a7:e6:75:37:a7:c3:b3:
b4:8a:86:db:fb:c3:0b:64:5a:a8:a8:8d:bb:fb:8b:b2:56:43:
1a:e3:e3:a5:4c:e6:49:3d:1b:95:5e:25:fc:2a:ac:91:ba:af:
bb:cb:7c:d9:38:52:43:24:c1:c8:1a:f8:41:d1:bd:f2:0d:08:
da:2a:e6:b4:70:5c:97:d2:a1:d6:ae:79:61:51:cf:1b:60:7c:
d6:9b:3e:65:78:a1:40:d3:2a:04:65:9f:be:c6:a5:73:c7:a1:
ef:10:f4:de:6f:4d:25:ce:6a:5a:97:fa:03:5c:05:56:cb:ff:
df:85:44:06:a2:a0:d4:c6:0f:86:d1:6e:8a:bd:cf:83:0b:22:
c0:6d:e5:ab:48:69:8f:c5:1c:b3:9c:b6:5a:3b:b5:c4:20:a6:
2a:10:5a:45:fa:f7:a8:fa:19:54:23:01:ce:7a:68:41:69:4f:
62:45:8a:49:1b:c7:1e:f2:17:df:9c:23:a1:24:7e:f8:c4:14:
33:e6:f9:64:1b:c8:76:15:77:6e:68:27:22:9f:12:32:0d:82:
23:0a:0e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:47:31 2025 by rpki-client