Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/8FA5u5cDFemQ-JBBOtQBcxUEk_k.roa
File: 8FA5u5cDFemQ-JBBOtQBcxUEk_k.roa (raw, json)
Hash identifier: eFuwEvGMGDhddQAJ3oo/vQkb3IpPwutTPZojiDPWrQY=
Subject key identifier: F0:50:39:BB:97:03:15:E9:90:F8:90:41:3A:D4:01:73:15:04:93:F9
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 118A
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/8FA5u5cDFemQ-JBBOtQBcxUEk_k.roa
Signing time: Mon 26 Aug 2024 05:17:39 +0000
ROA not before: Mon 26 Aug 2024 05:17:39 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 60.249.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 20:35:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4490 (0x118a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Aug 26 05:17:39 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F05039BB970315E990F890413AD40173150493F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d0:35:19:04:d4:2e:44:ac:f8:f4:cf:61:95:
6c:e3:fa:ed:f2:b9:22:53:1a:e8:f2:43:0b:d6:65:
ca:92:ba:fc:8c:40:a3:b7:47:01:d2:2f:1b:89:c3:
98:8d:27:c0:71:85:68:fe:9f:76:23:19:6f:23:6c:
89:c3:2c:26:f3:d8:08:51:25:1d:7a:d4:5c:13:26:
52:2b:13:58:13:fd:fd:ee:32:4b:cf:7d:1e:67:59:
41:84:13:e6:b8:93:8f:13:df:41:f8:2c:b7:88:1d:
a2:14:4d:de:e9:32:85:fa:d9:47:bb:a4:37:70:95:
06:cc:3c:8d:19:63:62:60:55:40:20:87:98:f6:4f:
a2:0a:2f:8c:56:ca:c6:49:7c:62:36:02:04:d3:d3:
50:70:11:75:41:7a:f6:00:49:9a:45:07:ff:2c:01:
dc:00:29:3f:89:a8:64:d5:a0:fd:6e:f6:23:2f:9f:
a8:7e:50:06:07:d0:c7:9a:bf:ba:c5:03:7c:32:5a:
8b:d5:2a:65:9f:bf:80:ae:98:b5:54:3f:4d:38:6a:
a3:8d:55:4d:96:84:2f:d2:13:4f:94:06:c0:89:36:
4b:20:2a:5c:d4:a2:7f:6a:08:c0:d4:6d:5c:e1:55:
78:9f:e1:c8:8e:41:1d:78:93:73:49:05:e7:c9:48:
6c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:50:39:BB:97:03:15:E9:90:F8:90:41:3A:D4:01:73:15:04:93:F9
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/8FA5u5cDFemQ-JBBOtQBcxUEk_k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.249.0.0/16
Signature Algorithm: sha256WithRSAEncryption
54:ee:01:e8:9e:63:3f:7c:8e:33:b8:aa:0a:4c:c0:5e:b4:d7:
6f:02:f5:27:02:58:e5:f6:dc:45:72:05:69:cf:fe:b2:17:d7:
5e:49:4b:b7:7f:74:e9:05:5a:c8:9f:2f:3d:81:50:73:f8:88:
11:b4:60:e4:68:40:5b:b0:88:ec:77:ed:e6:08:0e:b7:82:19:
af:e3:25:f7:88:3d:7b:32:45:13:de:ba:b1:5d:94:30:56:9d:
ac:1c:bf:78:8a:7d:4a:0b:5b:e6:99:ce:12:fb:d6:62:6d:4e:
f4:6a:4b:ae:b0:94:e3:ed:7c:96:e9:70:84:04:4d:0b:1a:ea:
a2:2f:40:6c:3d:83:66:61:59:93:d1:e2:6f:4e:a8:f8:a1:fe:
37:27:77:97:db:8c:dd:4e:6e:2c:e9:b0:89:ed:4b:32:43:53:
6a:03:0b:bc:e8:5e:df:a2:55:17:88:67:44:19:4b:a3:fd:7b:
fd:f3:54:e4:43:2e:ad:97:61:91:a0:0b:cc:b9:3a:a4:a1:f7:
e5:b7:73:fa:29:78:60:4a:a2:1c:aa:1e:e4:af:15:8b:53:8e:
71:ba:33:30:43:db:45:40:8b:bc:b3:ff:25:7d:5b:64:2e:98:
85:79:4a:09:9b:ed:45:c9:98:87:74:c9:b3:f8:a5:6c:be:3d:
66:7c:5c:08
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICEYowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw
NTE3MzlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEYwNTAzOUJCOTcwMzE1
RTk5MEY4OTA0MTNBRDQwMTczMTUwNDkzRjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC80DUZBNQuRKz49M9hlWzj+u3yuSJTGujyQwvWZcqSuvyMQKO3
RwHSLxuJw5iNJ8BxhWj+n3YjGW8jbInDLCbz2AhRJR161FwTJlIrE1gT/f3uMkvP
fR5nWUGEE+a4k48T30H4LLeIHaIUTd7pMoX62Ue7pDdwlQbMPI0ZY2JgVUAgh5j2
T6IKL4xWysZJfGI2AgTT01BwEXVBevYASZpFB/8sAdwAKT+JqGTVoP1u9iMvn6h+
UAYH0Meav7rFA3wyWovVKmWfv4CumLVUP004aqONVU2WhC/SE0+UBsCJNksgKlzU
on9qCMDUbVzhVXif4ciOQR14k3NJBefJSGzzAgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQU8FA5u5cDFemQ+JBBOtQBcxUEk/kwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC84RkE1dTVjREZlbVEtSkJCT3RR
QmN4VUVrX2sucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAPPkw
DQYJKoZIhvcNAQELBQADggEBAFTuAeieYz98jjO4qgpMwF60128C9ScCWOX23EVy
BWnP/rIX115JS7d/dOkFWsifLz2BUHP4iBG0YORoQFuwiOx37eYIDreCGa/jJfeI
PXsyRRPeurFdlDBWnawcv3iKfUoLW+aZzhL71mJtTvRqS66wlOPtfJbpcIQETQsa
6qIvQGw9g2ZhWZPR4m9OqPih/jcnd5fbjN1ObizpsIntSzJDU2oDC7zoXt+iVReI
Z0QZS6P9e/3zVORDLq2XYZGgC8y5OqSh9+W3c/opeGBKohyqHuSvFYtTjnG6MzBD
20VAi7yz/yV9W2QumIV5Sgmb7UXJmId0ybP4pWy+PWZ8XAg=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:38:08 2025 by rpki-client