Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/bq5hEWsIe7kL_LpZSHP36Yj3fmc.roa
File: bq5hEWsIe7kL_LpZSHP36Yj3fmc.roa (raw, json)
Hash identifier: JGhxaXBTjejoYnuFS5zUc1+dFUKO0xh+hLy9OlvgnSg=
Subject key identifier: 6E:AE:61:11:6B:08:7B:B9:0B:FC:BA:59:48:73:F7:E9:88:F7:7E:67
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 17BB
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/bq5hEWsIe7kL_LpZSHP36Yj3fmc.roa
Signing time: Mon 10 Feb 2025 14:07:12 +0000
ROA not before: Mon 10 Feb 2025 14:07:12 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9919
IP address blocks: 113.196.128.0/17 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Aug 2025 08:53:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6075 (0x17bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 10 14:07:12 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=6EAE61116B087BB90BFCBA594873F7E988F77E67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ea:39:be:e4:ff:fe:a4:82:c8:a5:79:16:7c:
81:87:b1:7f:1a:f3:1e:29:2d:83:b3:19:64:e3:bb:
6a:f6:90:02:a6:bd:07:a2:75:18:a6:82:50:63:71:
a9:f0:e5:d4:2a:6d:4c:85:b6:f3:c8:11:87:d2:18:
db:72:9b:4e:23:e0:86:ba:ed:0c:d7:82:ea:db:28:
f6:0b:d5:37:5a:49:0f:35:ef:bb:ba:3c:b9:fa:03:
02:33:d3:7a:1f:ac:09:7c:59:5f:af:25:d6:37:73:
14:b6:a0:21:54:21:94:5b:d1:35:d3:9f:6c:cf:f9:
c6:ee:81:89:80:ee:79:73:91:7c:5e:fb:42:ce:20:
10:74:1d:77:e9:53:bf:b8:94:87:5c:04:51:ad:2b:
ff:23:b9:0c:53:19:29:71:bc:2d:3f:8f:75:c6:d5:
9b:ab:96:32:27:b8:9a:6a:d7:11:b3:fb:eb:23:9c:
76:be:0f:c9:50:5d:b6:28:64:dd:26:c6:3b:16:87:
48:20:da:cc:63:1c:e5:c0:d4:cb:be:cd:c6:79:f5:
cf:7b:a3:4a:c1:94:6b:ae:d4:fc:7b:76:79:f0:4e:
23:72:19:9e:01:16:00:46:04:62:f4:04:78:c8:57:
02:98:63:20:4b:7e:37:72:6a:06:d8:bd:c7:10:1a:
0f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:AE:61:11:6B:08:7B:B9:0B:FC:BA:59:48:73:F7:E9:88:F7:7E:67
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/bq5hEWsIe7kL_LpZSHP36Yj3fmc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.196.128.0/17
Signature Algorithm: sha256WithRSAEncryption
47:f9:ab:2f:eb:c7:d0:c9:78:06:93:13:34:86:a6:b8:2b:cb:
dd:2f:0a:e3:e3:e7:f8:84:e9:f7:45:d0:11:33:50:1f:56:81:
f9:fb:31:b0:dc:e5:71:42:30:11:7f:34:af:04:13:67:d7:71:
51:84:73:32:60:91:54:23:14:03:b1:cd:8b:ab:1c:73:be:2c:
38:aa:ce:5b:1a:78:c1:e2:f7:cd:6d:73:8e:b1:ed:ca:d3:59:
6b:d4:f8:af:fa:71:41:e0:a1:7a:7d:f8:01:84:b2:63:5a:c9:
3e:88:02:82:00:df:39:13:39:7d:b2:df:c7:f7:87:e0:41:11:
1b:f2:c6:85:15:3c:de:72:53:66:65:a6:3d:e7:db:7b:aa:e5:
48:f1:4b:da:39:02:4e:55:93:c2:a5:34:f9:cc:3d:08:01:82:
0c:59:44:0a:7a:ff:b0:e9:96:d6:6d:1b:2d:0e:40:94:a1:2f:
40:7b:33:19:80:83:f6:42:74:a4:bc:06:fe:36:59:7e:98:d6:
84:16:57:5f:85:f6:2a:23:da:df:0f:1b:03:c6:71:24:59:31:
eb:ee:5d:a4:02:6d:bc:a0:94:38:6b:35:a7:13:b6:d0:75:bd:
59:d7:21:ae:46:4d:e2:a9:86:c5:f8:5d:75:2b:35:78:60:b7:
8e:23:aa:de
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICF7swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx
NDA3MTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZFQUU2MTExNkIwODdC
QjkwQkZDQkE1OTQ4NzNGN0U5ODhGNzdFNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDO6jm+5P/+pILIpXkWfIGHsX8a8x4pLYOzGWTju2r2kAKmvQei
dRimglBjcanw5dQqbUyFtvPIEYfSGNtym04j4Ia67QzXgurbKPYL1TdaSQ8177u6
PLn6AwIz03ofrAl8WV+vJdY3cxS2oCFUIZRb0TXTn2zP+cbugYmA7nlzkXxe+0LO
IBB0HXfpU7+4lIdcBFGtK/8juQxTGSlxvC0/j3XG1ZurljInuJpq1xGz++sjnHa+
D8lQXbYoZN0mxjsWh0gg2sxjHOXA1Mu+zcZ59c97o0rBlGuu1Px7dnnwTiNyGZ4B
FgBGBGL0BHjIVwKYYyBLfjdyagbYvccQGg8NAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUbq5hEWsIe7kL/LpZSHP36Yj3fmcwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvYnE1aEVXc0llN2tMX0xwWlNIUDM2
WWozZm1jLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB3HEgDAN
BgkqhkiG9w0BAQsFAAOCAQEAR/mrL+vH0Ml4BpMTNIamuCvL3S8K4+Pn+ITp90XQ
ETNQH1aB+fsxsNzlcUIwEX80rwQTZ9dxUYRzMmCRVCMUA7HNi6scc74sOKrOWxp4
weL3zW1zjrHtytNZa9T4r/pxQeChen34AYSyY1rJPogCggDfORM5fbLfx/eH4EER
G/LGhRU83nJTZmWmPefbe6rlSPFL2jkCTlWTwqU0+cw9CAGCDFlECnr/sOmW1m0b
LQ5AlKEvQHszGYCD9kJ0pLwG/jZZfpjWhBZXX4X2KiPa3w8bA8ZxJFkx6+5dpAJt
vKCUOGs1pxO20HW9WdchrkZN4qmGxfhddSs1eGC3jiOq3g==
-----END CERTIFICATE-----
Generated at Sun Aug 24 02:44:34 2025 by rpki-client