Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/49k_FvVYF0Pbh1WKvjbuJ2s6yOk.roa
File: 49k_FvVYF0Pbh1WKvjbuJ2s6yOk.roa (raw, json)
Hash identifier: qIUCgogPAIUQzxuPbiaVHek/rYUhAQuaBSMkiAsdxYk=
Subject key identifier: E3:D9:3F:16:F5:58:17:43:DB:87:55:8A:BE:36:EE:27:6B:3A:C8:E9
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 14B5
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/49k_FvVYF0Pbh1WKvjbuJ2s6yOk.roa
Signing time: Mon 10 Feb 2025 14:35:12 +0000
ROA not before: Mon 10 Feb 2025 14:35:12 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 800
IP address blocks: 175.111.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 23:44:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5301 (0x14b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:35:12 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E3D93F16F5581743DB87558ABE36EE276B3AC8E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:82:0c:ee:57:c1:99:a5:f7:d1:f1:f8:10:aa:
80:d7:17:cd:ac:8b:33:b8:8e:f5:f9:2d:56:d7:d3:
1c:c1:ad:79:e3:86:b1:db:51:fd:d5:5b:17:de:e2:
e7:c9:1a:c1:9f:30:b2:75:29:2e:2a:80:7a:7b:2a:
fb:8a:92:4b:c7:b2:6e:b4:29:5a:4e:99:56:f5:0a:
2a:a5:0f:76:35:09:07:81:59:24:31:71:7b:5f:c0:
5b:8e:3b:8d:16:01:05:a1:e0:f0:af:8d:cf:4a:54:
44:84:d9:e5:f6:31:a0:4a:47:c5:53:1b:a7:56:89:
a6:0b:c6:8e:3e:0d:14:61:17:17:0d:7f:6c:ac:64:
b1:8b:c6:7c:2b:e1:f4:3d:82:e4:32:21:c3:75:45:
1e:b0:62:e0:a9:36:f8:e0:53:32:ef:f7:b7:19:f8:
f1:6e:66:73:6c:53:95:c4:e4:40:01:b0:13:2f:51:
7e:64:9f:19:a3:46:4e:9a:2d:6f:42:49:90:ec:dc:
d3:3a:f8:22:47:a5:e5:7a:2a:cc:34:ab:08:75:f1:
5e:65:21:18:4a:f8:4c:aa:1c:28:15:71:e0:07:d0:
2f:96:92:81:a4:d1:df:7a:11:e3:4e:e9:a6:18:d9:
86:e2:69:9d:ef:99:9f:52:1c:5c:cc:f7:46:28:35:
42:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D9:3F:16:F5:58:17:43:DB:87:55:8A:BE:36:EE:27:6B:3A:C8:E9
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/49k_FvVYF0Pbh1WKvjbuJ2s6yOk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.111.239.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:b1:8a:44:46:f2:3f:f7:86:a3:a0:77:e3:b0:44:ef:73:b8:
1a:d0:9e:76:e6:8d:6e:f7:11:48:8d:9f:98:53:b4:2b:47:20:
df:63:b1:61:29:ac:83:41:b2:5e:3e:0b:24:61:ed:1f:1e:a8:
53:bf:7b:2c:ad:2f:ca:d9:6c:33:66:39:87:33:53:07:bb:45:
c4:18:df:4c:56:12:a2:be:43:bb:30:69:71:fe:1a:f0:24:03:
a9:ff:76:dd:d9:41:92:e1:2c:e1:80:86:e4:a9:90:1c:0e:c3:
88:96:d1:11:5f:86:76:08:0a:0e:07:53:27:91:54:3d:82:78:
4b:f9:55:50:69:9c:4c:69:3d:c5:b3:7d:64:eb:1b:2b:02:f4:
13:3d:09:08:47:87:0c:1d:5b:86:58:e0:fe:91:21:50:9f:65:
6e:36:d8:99:a5:2d:7a:cc:e0:88:c0:ab:d3:58:7f:96:7f:9d:
6b:07:b6:4f:9f:ff:33:77:d2:cc:40:3e:1b:6e:27:ef:5a:ec:
d8:25:af:15:38:97:1f:17:75:dc:a6:07:98:9f:32:33:78:42:
35:2f:42:63:16:48:c6:fb:41:99:2f:b7:3d:f5:24:00:cb:a5:
a6:be:21:29:b3:5f:02:6d:5b:7d:94:ac:b1:39:9f:28:51:6f:
b3:b8:08:08
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICFLUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTAx
NDM1MTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEUzRDkzRjE2RjU1ODE3
NDNEQjg3NTU4QUJFMzZFRTI3NkIzQUM4RTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCrggzuV8GZpffR8fgQqoDXF82sizO4jvX5LVbX0xzBrXnjhrHb
Uf3VWxfe4ufJGsGfMLJ1KS4qgHp7KvuKkkvHsm60KVpOmVb1CiqlD3Y1CQeBWSQx
cXtfwFuOO40WAQWh4PCvjc9KVESE2eX2MaBKR8VTG6dWiaYLxo4+DRRhFxcNf2ys
ZLGLxnwr4fQ9guQyIcN1RR6wYuCpNvjgUzLv97cZ+PFuZnNsU5XE5EABsBMvUX5k
nxmjRk6aLW9CSZDs3NM6+CJHpeV6Ksw0qwh18V5lIRhK+EyqHCgVceAH0C+WkoGk
0d96EeNO6aYY2YbiaZ3vmZ9SHFzM90YoNUI1AgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQU49k/FvVYF0Pbh1WKvjbuJ2s6yOkwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC80OWtfRnZWWUYwUGJoMVdLdmpi
dUoyczZ5T2sucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAr2/v
MA0GCSqGSIb3DQEBCwUAA4IBAQBusYpERvI/94ajoHfjsETvc7ga0J525o1u9xFI
jZ+YU7QrRyDfY7FhKayDQbJePgskYe0fHqhTv3ssrS/K2WwzZjmHM1MHu0XEGN9M
VhKivkO7MGlx/hrwJAOp/3bd2UGS4SzhgIbkqZAcDsOIltERX4Z2CAoOB1MnkVQ9
gnhL+VVQaZxMaT3Fs31k6xsrAvQTPQkIR4cMHVuGWOD+kSFQn2VuNtiZpS16zOCI
wKvTWH+Wf51rB7ZPn/8zd9LMQD4bbifvWuzYJa8VOJcfF3XcpgeYnzIzeEI1L0Jj
FkjG+0GZL7c99SQAy6WmviEps18CbVt9lKyxOZ8oUW+zuAgI
-----END CERTIFICATE-----
Generated at Sun Apr 27 00:30:29 2025 by rpki-client