Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/7o5BNIP1m7RgsyyzZeQHFOzQbTo.roa
File: 7o5BNIP1m7RgsyyzZeQHFOzQbTo.roa (raw, json)
Hash identifier: +hAneV2k9frxQcvy3pLSWgFsVHJFWAOLApESAc2wzzQ=
Subject key identifier: EE:8E:41:34:83:F5:9B:B4:60:B3:2C:B3:65:E4:07:14:EC:D0:6D:3A
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 1372
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/7o5BNIP1m7RgsyyzZeQHFOzQbTo.roa
Signing time: Mon 10 Feb 2025 14:09:27 +0000
ROA not before: Mon 10 Feb 2025 14:09:27 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 60.199.140.0/24 maxlen: 32
Validation: Failed, certificate revoked on Fri 22 Aug 2025 08:54:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4978 (0x1372)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Feb 10 14:09:27 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=EE8E413483F59BB460B32CB365E40714ECD06D3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a8:45:3f:49:0e:40:d8:d9:e4:0c:92:bc:1d:
af:4a:f0:5f:c8:89:17:81:05:06:56:47:36:e1:36:
02:76:67:33:a4:02:81:17:f1:3c:6f:7f:46:74:4f:
d6:20:a9:79:ec:e0:97:5b:f5:6e:e6:77:75:00:ea:
6c:85:fe:7f:ba:07:de:8d:a9:8d:2d:fc:f6:cf:e4:
81:35:7f:13:bc:27:1b:28:9b:8d:a4:b0:7c:8f:c4:
7c:8a:ed:7e:d4:64:d7:05:d3:bb:1c:74:de:63:8d:
c3:ef:62:9f:4a:04:b7:7b:2a:91:7b:78:85:03:5c:
97:79:1b:54:06:7c:fe:87:74:86:b8:b2:e9:3e:c7:
fa:f3:42:76:aa:d1:72:a5:e0:62:06:5b:10:fd:52:
d6:7d:c0:33:48:7d:8f:05:09:4c:d6:f5:9c:4d:99:
38:b6:60:14:85:7c:b5:9e:c6:6b:ee:d3:93:1f:06:
b2:13:0b:b9:a8:28:e6:1a:c2:f9:fa:31:44:0e:ec:
aa:4c:8a:20:0a:b4:d9:08:5b:0e:cd:1e:d9:cd:3f:
61:2f:1c:6e:43:66:0a:d2:25:68:64:6f:61:0c:ea:
51:a0:b2:70:00:f5:97:02:19:9e:c8:57:50:d3:eb:
19:bf:93:63:45:02:15:db:2d:c0:b8:56:a6:81:9f:
a8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8E:41:34:83:F5:9B:B4:60:B3:2C:B3:65:E4:07:14:EC:D0:6D:3A
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/7o5BNIP1m7RgsyyzZeQHFOzQbTo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.199.140.0/24
Signature Algorithm: sha256WithRSAEncryption
18:74:d5:03:8f:f6:4b:2f:ae:17:c4:f6:a6:db:18:2c:b4:5f:
05:f8:ae:b5:01:9a:ee:93:82:73:55:84:41:46:ff:09:77:58:
1f:81:4a:b6:46:7c:4f:a8:9c:b7:08:db:3d:06:5f:55:fc:ef:
84:13:88:28:95:40:4e:59:1e:84:a4:c0:02:ee:0a:22:9e:9f:
49:ad:3c:ed:39:52:93:87:8a:5c:23:16:3f:6e:e8:6c:87:66:
2c:e6:2d:97:6b:ce:43:c8:81:76:ed:53:a3:96:0d:fe:37:b5:
88:2a:db:5a:3a:cd:9b:d2:a7:13:3c:f7:12:79:48:3e:4f:40:
ce:db:9e:5b:3a:02:e5:8d:ee:30:3a:50:cb:f3:ca:0e:b7:7d:
ec:f9:de:c1:1c:a4:df:a6:f4:06:59:9e:97:95:2f:da:dd:84:
32:79:0c:4f:3f:e1:33:d7:69:96:40:ed:82:b4:7e:63:46:ef:
bd:e1:23:31:c1:45:b9:43:23:71:fb:09:cb:36:bf:b3:4b:90:
70:43:3c:5b:94:4e:39:3b:c8:3d:ff:07:62:83:90:d0:76:c0:
1e:4f:d3:19:7e:64:e1:68:0b:ff:78:68:3e:d7:75:b7:90:c1:
76:c7:9d:b2:4a:ee:13:f7:06:74:27:7a:05:54:a1:02:1c:1b:
7a:8f:89:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:42:49 2025 by rpki-client