Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/zHshaF1NEk3QIiHHVe19bEIDjac.roa
File: zHshaF1NEk3QIiHHVe19bEIDjac.roa (raw, json)
Hash identifier: 19ynQ7S5mNzIVpOSOwqxoj4BdnW1eqLk2NVZHiezKl0=
Subject key identifier: CC:7B:21:68:5D:4D:12:4D:D0:22:21:C7:55:ED:7D:6C:42:03:8D:A7
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1901
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/zHshaF1NEk3QIiHHVe19bEIDjac.roa
Signing time: Thu 20 Mar 2025 02:54:26 +0000
ROA not before: Thu 20 Mar 2025 02:54:26 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 140079
IP address blocks: 220.229.65.224/28 maxlen: 28
Validation: Failed, certificate revoked on Fri 22 Aug 2025 08:53:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6401 (0x1901)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Mar 20 02:54:26 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=CC7B21685D4D124DD02221C755ED7D6C42038DA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:68:54:c1:7f:03:b2:ce:4d:16:62:44:8a:3c:
92:12:5c:75:12:fa:05:57:8f:c1:5e:78:14:c6:09:
11:68:3a:0e:a1:ef:4d:d9:3d:08:e7:a0:e4:52:d6:
14:78:a9:ee:98:57:a1:40:91:61:e5:27:f5:aa:ef:
3c:44:ce:15:2b:15:f6:f1:5e:40:09:22:b2:5c:83:
e9:0a:05:5d:9a:c5:5a:65:23:14:18:49:68:ad:ee:
8b:ab:64:c1:96:29:90:1b:7c:f5:ef:10:c8:95:46:
4e:41:9a:b9:8a:af:ee:03:f7:dc:a1:ab:12:d6:39:
64:9f:3b:e6:58:38:f3:71:22:8a:e7:80:c7:d2:8c:
e8:ce:97:c5:7a:45:85:4a:8f:c6:c4:06:78:9a:d1:
8e:3e:af:91:63:23:cf:4e:3a:01:70:e9:b7:8b:13:
e4:e0:70:19:8e:8a:b4:55:75:f7:2a:94:fc:c9:ab:
ee:26:e5:ea:a8:91:68:c0:33:6b:b0:4f:37:92:00:
03:2f:ad:d9:f4:e3:b2:04:39:27:94:1f:e1:e5:b9:
17:19:0d:15:9b:ab:c6:ae:f0:8f:ef:4d:09:02:fc:
54:43:66:3f:0f:39:31:ad:33:08:60:c5:8b:ff:df:
83:22:4e:c9:04:92:d1:85:3a:36:55:9e:0e:a6:6c:
00:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7B:21:68:5D:4D:12:4D:D0:22:21:C7:55:ED:7D:6C:42:03:8D:A7
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/zHshaF1NEk3QIiHHVe19bEIDjac.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.229.65.224/28
Signature Algorithm: sha256WithRSAEncryption
5d:ee:20:c2:5f:35:29:f2:0b:6d:2f:7c:6b:49:3a:fd:89:21:
49:2c:0f:8d:01:7d:3c:a1:5a:5a:6d:a6:08:36:11:aa:14:de:
ee:31:c7:f5:29:49:0b:5d:59:d2:21:e2:18:5e:14:36:e8:04:
db:43:5c:97:25:47:57:60:3b:69:27:4c:a0:2c:12:bd:5f:11:
23:7a:c1:cb:9c:14:57:f8:d2:6a:45:11:65:90:0f:d7:f7:4b:
1a:49:22:44:8f:3f:ae:78:59:70:c0:ef:a9:ae:d0:91:70:21:
49:4a:b1:51:0f:ce:45:1f:d3:45:6d:ee:6d:f4:1c:d3:76:b6:
1b:ad:46:6f:00:e4:75:a2:19:65:d5:9c:4e:aa:de:3c:7b:f7:
ff:a4:b7:cb:dc:16:83:da:7d:39:1b:88:96:95:32:c4:0e:08:
56:3a:78:0f:69:bb:7b:e0:88:96:43:f0:57:31:a2:5b:1f:46:
bb:99:61:ec:94:f8:ed:6a:e0:cd:dc:ff:aa:9a:2b:cc:75:d7:
5c:1d:eb:33:8f:01:c4:4b:1e:a0:ec:98:37:d5:14:32:d2:1b:
76:f6:6f:0a:20:95:2b:9a:4e:68:01:47:ec:ba:d3:32:1a:bf:
08:1f:df:57:09:0c:df:7e:4e:66:7e:62:19:ab:6d:ea:72:24:
f9:da:14:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:39:31 2025 by rpki-client