Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/7jTbbKtPKpRLpboAPsTWOv38j3E.roa
File: 7jTbbKtPKpRLpboAPsTWOv38j3E.roa (raw, json)
Hash identifier: gxFvEH6fBy/U1KAgZL+rOHVjG2I5rsUyqscw6OqXQJs=
Subject key identifier: EE:34:DB:6C:AB:4F:2A:94:4B:A5:BA:00:3E:C4:D6:3A:FD:FC:8F:71
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1445
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/7jTbbKtPKpRLpboAPsTWOv38j3E.roa
Signing time: Mon 10 Feb 2025 14:34:45 +0000
ROA not before: Mon 10 Feb 2025 14:34:45 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 211.22.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 23:44:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5189 (0x1445)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:34:45 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=EE34DB6CAB4F2A944BA5BA003EC4D63AFDFC8F71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d3:48:ab:ad:7d:b8:4a:1e:c8:02:b9:13:0f:
30:90:88:a8:9f:75:f2:14:bf:30:bf:7e:82:6c:42:
f7:29:48:49:c9:f7:b4:0a:66:d4:a3:12:80:f4:f5:
cf:6b:2f:93:8b:39:fb:7d:78:9b:74:1a:4e:b8:3a:
34:65:09:86:65:28:56:9e:6e:ff:37:11:2b:3d:75:
1f:e1:c3:9b:ee:92:50:db:68:0c:4e:14:1d:22:a4:
80:5f:d5:49:81:0a:d3:75:fb:d4:50:04:4b:d3:b6:
64:31:e9:57:50:d2:d5:45:12:77:a4:08:24:2e:bc:
3e:34:6b:30:c9:e9:99:d1:6f:45:5d:87:96:e7:f4:
d5:1a:ba:79:64:94:fe:f0:e7:60:25:ad:ae:fd:5d:
8b:8e:59:32:04:09:01:01:c8:e2:34:b2:f0:13:e6:
22:be:31:af:ef:e4:bc:0a:17:9e:4b:15:b3:67:c9:
d0:0c:8f:df:9c:52:13:fb:2d:0e:73:87:67:fc:38:
2f:d3:62:27:b0:57:7e:0e:f8:96:5c:5c:02:31:38:
d8:fb:66:c3:d5:60:d3:1f:41:eb:76:bc:d3:9f:58:
4f:87:9a:f8:38:07:e4:14:f3:0f:3b:34:62:a4:e4:
3b:e0:14:ec:8f:d2:78:0a:bd:f0:00:dc:02:4b:52:
cf:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:34:DB:6C:AB:4F:2A:94:4B:A5:BA:00:3E:C4:D6:3A:FD:FC:8F:71
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/7jTbbKtPKpRLpboAPsTWOv38j3E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.22.0.0/16
Signature Algorithm: sha256WithRSAEncryption
25:0b:73:95:57:3f:23:6b:1d:1e:fd:7a:09:7b:a6:52:d2:b0:
bc:6e:15:d9:c2:37:78:a6:4c:df:29:60:86:b6:8a:d5:5c:c2:
65:73:31:4b:fe:fb:c2:6a:af:bd:43:1c:f2:3d:b9:9e:d4:d2:
71:b2:a9:06:53:83:c7:20:06:84:34:ec:ce:9e:fe:98:2b:84:
f0:a7:31:ba:93:e8:41:75:19:29:0d:3f:90:5e:7b:5d:12:ef:
41:2d:f8:b0:65:7b:75:bc:9c:9b:6b:00:fa:d9:2d:38:63:c6:
06:f1:d5:63:71:25:79:dc:5b:c9:d5:ed:4e:92:47:67:c9:b1:
45:8a:6f:c4:74:c3:70:04:52:bf:9d:23:b7:23:83:3a:64:92:
46:61:e7:85:eb:e3:c2:a1:43:ad:d3:2b:a5:20:41:27:9a:2a:
9e:05:94:d4:0b:c4:4b:e6:c0:93:1b:ce:f5:11:52:70:71:60:
8a:56:fe:16:40:36:c1:99:3c:e1:ec:27:43:07:39:da:02:11:
c3:59:5a:7f:49:8b:4a:4a:70:e1:ad:71:82:f3:65:19:61:07:
33:6e:20:6c:a0:fe:fd:18:8c:a5:7e:bb:e2:5d:10:e4:47:6e:
f4:ed:c4:8b:5f:4e:8e:86:c4:24:74:1f:fa:b1:62:e2:c8:a3:
37:3e:bd:6e
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICFEUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTAx
NDM0NDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEVFMzREQjZDQUI0RjJB
OTQ0QkE1QkEwMDNFQzRENjNBRkRGQzhGNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC700irrX24Sh7IArkTDzCQiKifdfIUvzC/foJsQvcpSEnJ97QK
ZtSjEoD09c9rL5OLOft9eJt0Gk64OjRlCYZlKFaebv83ESs9dR/hw5vuklDbaAxO
FB0ipIBf1UmBCtN1+9RQBEvTtmQx6VdQ0tVFEnekCCQuvD40azDJ6ZnRb0Vdh5bn
9NUaunlklP7w52Alra79XYuOWTIECQEByOI0svAT5iK+Ma/v5LwKF55LFbNnydAM
j9+cUhP7LQ5zh2f8OC/TYiewV34O+JZcXAIxONj7ZsPVYNMfQet2vNOfWE+Hmvg4
B+QU8w87NGKk5DvgFOyP0ngKvfAA3AJLUs/nAgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQU7jTbbKtPKpRLpboAPsTWOv38j3EwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC83alRiYkt0UEtwUkxwYm9BUHNU
V092MzhqM0Uucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0xYw
DQYJKoZIhvcNAQELBQADggEBACULc5VXPyNrHR79egl7plLSsLxuFdnCN3imTN8p
YIa2itVcwmVzMUv++8Jqr71DHPI9uZ7U0nGyqQZTg8cgBoQ07M6e/pgrhPCnMbqT
6EF1GSkNP5Bee10S70Et+LBle3W8nJtrAPrZLThjxgbx1WNxJXncW8nV7U6SR2fJ
sUWKb8R0w3AEUr+dI7cjgzpkkkZh54Xr48KhQ63TK6UgQSeaKp4FlNQLxEvmwJMb
zvURUnBxYIpW/hZANsGZPOHsJ0MHOdoCEcNZWn9Ji0pKcOGtcYLzZRlhBzNuIGyg
/v0YjKV+u+JdEORHbvTtxItfTo6GxCR0H/qxYuLIozc+vW4=
-----END CERTIFICATE-----
Generated at Wed Apr 16 12:26:04 2025 by rpki-client