Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/rWl6NotwtLQOZWCiib3bQHLT8YU.roa
File: rWl6NotwtLQOZWCiib3bQHLT8YU.roa (raw, json)
Hash identifier: qpSXwJy7qdVnk16NTYf9W1UlD4df/FkZXTJc/x32X2Q=
Subject key identifier: AD:69:7A:36:8B:70:B4:B4:0E:65:60:A2:89:BD:DB:40:72:D3:F1:85
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1789
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/rWl6NotwtLQOZWCiib3bQHLT8YU.roa
Signing time: Mon 10 Feb 2025 14:07:00 +0000
ROA not before: Mon 10 Feb 2025 14:07:00 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18049
IP address blocks: 175.183.80.0/20 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Aug 2025 08:53:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6025 (0x1789)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 10 14:07:00 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=AD697A368B70B4B40E6560A289BDDB4072D3F185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c5:84:c1:df:94:0c:e6:f4:82:44:f2:5c:13:
54:ab:05:40:8a:c0:ea:34:86:b1:24:97:a0:cd:35:
ca:e0:59:e9:67:b6:ce:ac:f6:7a:b2:7c:38:d5:3b:
bf:de:e7:fc:ac:4e:21:8e:8f:a6:08:77:af:16:38:
93:a2:0d:6d:0d:11:3f:70:58:70:0d:70:ba:42:2b:
4e:87:67:f2:58:c3:bf:ba:6a:0e:f5:3b:fc:b2:64:
a5:6a:cd:e7:05:f4:09:4a:72:44:2a:8d:3e:dc:c4:
54:48:57:90:49:f1:ba:06:0f:fa:e5:c9:56:93:b3:
26:fe:8d:9a:e1:09:75:6c:e1:f7:8d:49:f1:a5:06:
d9:ea:c3:a3:88:8e:a0:e2:fe:60:10:4f:7c:62:ac:
eb:7b:f9:79:d0:e5:23:f2:e2:9b:47:f8:3e:54:03:
ac:9d:f5:d3:f8:46:82:9f:0f:5a:32:1c:01:45:99:
0f:46:de:8e:9c:76:e9:4e:24:48:c9:a2:22:d1:5a:
9d:5f:53:9e:52:00:1f:ff:8f:d7:d9:f6:66:2a:26:
81:da:d7:ad:97:14:da:46:d5:16:63:bb:1a:98:63:
8d:e6:42:f6:42:bc:0d:8b:9b:68:00:48:e1:8d:7e:
90:b2:36:70:4c:96:fb:f4:48:fe:0b:78:18:7b:68:
3d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:69:7A:36:8B:70:B4:B4:0E:65:60:A2:89:BD:DB:40:72:D3:F1:85
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/rWl6NotwtLQOZWCiib3bQHLT8YU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.183.80.0/20
Signature Algorithm: sha256WithRSAEncryption
c0:53:ec:35:e0:84:34:44:d2:86:b2:40:25:31:a8:22:d2:95:
48:04:37:61:1e:5e:97:ec:88:87:cf:cb:43:4f:32:a1:ea:31:
00:98:bb:27:16:32:9b:2f:86:2e:65:b5:dd:2f:93:52:ed:85:
42:d0:da:92:c3:43:22:b9:e4:76:8c:f2:f7:05:d9:3c:82:e2:
80:07:c0:59:92:98:02:b9:b8:3f:35:7d:79:20:50:db:24:08:
3d:10:48:6e:f0:6e:33:76:ca:6c:34:27:6d:f9:7a:92:15:ad:
7c:af:56:a6:4d:ac:85:93:b4:15:a0:23:80:65:22:e6:1c:7b:
47:4c:80:16:33:b7:1f:79:15:97:64:f7:46:18:09:32:4f:98:
5b:67:34:86:16:2f:89:09:8b:c3:4b:ad:85:8a:63:04:7d:48:
5f:c4:44:81:ea:ca:0e:cd:20:89:d8:7e:b5:b0:55:12:7a:5c:
c6:23:33:42:86:38:1a:96:48:2f:43:46:02:41:8f:6e:28:4d:
77:85:01:20:d4:3b:24:29:26:60:34:5e:9c:20:32:03:f4:6a:
0d:e7:bb:3b:38:2c:c3:92:19:ee:00:53:51:96:6e:ff:41:f2:
02:d7:ae:1b:9c:7a:85:bd:51:a7:1f:03:80:86:db:a0:3b:15:
1e:44:e1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:36:27 2025 by rpki-client