Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/8aoEMiuJkCqd5AjtMQZaOb8uZzg.roa
File: 8aoEMiuJkCqd5AjtMQZaOb8uZzg.roa (raw, json)
Hash identifier: Q8B/cJdp/QmhJsc02HMmhFFN5D8bY2abri5T5MUsjgA=
Subject key identifier: F1:AA:04:32:2B:89:90:2A:9D:E4:08:ED:31:06:5A:39:BF:2E:67:38
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 147F
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/8aoEMiuJkCqd5AjtMQZaOb8uZzg.roa
Signing time: Mon 10 Feb 2025 14:34:58 +0000
ROA not before: Mon 10 Feb 2025 14:34:58 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 59.124.0.0/14 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 23:44:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5247 (0x147f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:34:58 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F1AA04322B89902A9DE408ED31065A39BF2E6738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:62:84:cc:73:5c:ac:ea:0f:f1:90:73:09:6a:
4b:3d:90:13:fa:73:40:3d:2c:8d:8f:a1:7d:1f:7c:
15:05:bc:e7:d8:38:5c:49:a8:a3:97:e2:2b:51:ae:
ec:f8:d1:d5:1d:ff:50:e2:25:62:2a:58:b4:bc:ab:
e2:07:32:2c:6c:4a:d0:2f:10:80:61:9a:21:44:fa:
ab:17:4e:94:48:9b:db:93:df:8c:8b:ab:a5:da:62:
28:bf:4f:ba:96:da:f5:9d:eb:94:7a:8b:bb:5e:f2:
4e:a9:14:9d:55:05:fe:56:a7:9e:a4:64:95:25:7c:
7f:bb:cd:8a:7e:88:32:b2:02:4e:c0:8a:f0:24:0e:
9f:07:c4:3e:52:62:ab:61:c8:e4:fc:b3:99:21:b7:
51:c7:a3:76:c1:c1:07:c8:0f:cf:2b:20:cd:92:8e:
a1:3b:87:8b:63:0e:51:3e:1d:5b:b6:4e:eb:e3:04:
36:aa:14:c3:ad:06:4e:67:a9:67:e8:0c:f1:4d:b4:
ae:cb:0b:2b:a0:e7:d5:c1:53:f3:41:4a:d4:03:50:
44:b4:4b:bb:23:23:58:b8:7c:41:af:25:57:64:15:
34:42:aa:5b:06:5d:01:51:61:00:5c:7c:29:4d:5b:
9a:73:0a:1b:e0:2f:48:20:75:22:35:c9:da:0e:78:
45:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:AA:04:32:2B:89:90:2A:9D:E4:08:ED:31:06:5A:39:BF:2E:67:38
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/8aoEMiuJkCqd5AjtMQZaOb8uZzg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
59.124.0.0/14
Signature Algorithm: sha256WithRSAEncryption
3f:a0:b5:e2:00:65:1f:52:8d:9c:11:55:50:fc:35:1e:2e:1a:
89:a6:01:75:dd:f4:a5:18:1b:3f:9d:f1:53:31:86:ac:63:c4:
56:c4:de:06:c8:76:d0:4a:32:a7:bb:76:60:9f:b2:a8:15:d3:
9f:33:e5:a0:14:44:87:50:2c:3f:dd:32:83:31:db:33:64:99:
f8:ed:1f:9b:2e:58:bc:2a:80:fd:a1:ef:25:e8:7f:ed:2e:7e:
16:29:bd:19:a6:00:e9:4b:cd:0d:89:2d:38:c1:2a:db:de:0b:
b0:ea:e2:0e:3f:a9:7a:d8:b2:44:86:fd:2d:4a:a5:d5:2f:a6:
ed:db:27:58:47:5a:9e:34:db:0f:ac:0c:4c:79:89:35:fe:87:
5b:f1:90:19:24:d6:67:47:2d:71:76:bd:07:5d:61:c5:24:bf:
a1:42:3e:63:77:91:3d:f2:ad:ba:aa:7c:5f:d2:2c:8e:4d:a0:
39:5c:c8:af:86:1d:be:c4:32:8e:fc:6e:8d:b0:d1:60:88:b8:
5b:3a:72:03:84:e7:1b:f2:24:fe:34:9b:ca:be:2a:79:e3:42:
ec:53:11:be:0d:41:98:95:be:2e:99:1e:b2:3e:e9:2a:ba:0b:
11:88:28:55:17:f0:a9:13:4c:43:ee:f3:37:0c:1a:53:f5:56:
07:dc:3a:d7
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICFH8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTAx
NDM0NThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEYxQUEwNDMyMkI4OTkw
MkE5REU0MDhFRDMxMDY1QTM5QkYyRTY3MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9YoTMc1ys6g/xkHMJaks9kBP6c0A9LI2PoX0ffBUFvOfYOFxJ
qKOX4itRruz40dUd/1DiJWIqWLS8q+IHMixsStAvEIBhmiFE+qsXTpRIm9uT34yL
q6XaYii/T7qW2vWd65R6i7te8k6pFJ1VBf5Wp56kZJUlfH+7zYp+iDKyAk7AivAk
Dp8HxD5SYqthyOT8s5kht1HHo3bBwQfID88rIM2SjqE7h4tjDlE+HVu2TuvjBDaq
FMOtBk5nqWfoDPFNtK7LCyug59XBU/NBStQDUES0S7sjI1i4fEGvJVdkFTRCqlsG
XQFRYQBcfClNW5pzChvgL0ggdSI1ydoOeEWvAgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQU8aoEMiuJkCqd5AjtMQZaOb8uZzgwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC84YW9FTWl1SmtDcWQ1QWp0TVFa
YU9iOHVaemcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCO3ww
DQYJKoZIhvcNAQELBQADggEBAD+gteIAZR9SjZwRVVD8NR4uGommAXXd9KUYGz+d
8VMxhqxjxFbE3gbIdtBKMqe7dmCfsqgV058z5aAURIdQLD/dMoMx2zNkmfjtH5su
WLwqgP2h7yXof+0ufhYpvRmmAOlLzQ2JLTjBKtveC7Dq4g4/qXrYskSG/S1KpdUv
pu3bJ1hHWp402w+sDEx5iTX+h1vxkBkk1mdHLXF2vQddYcUkv6FCPmN3kT3yrbqq
fF/SLI5NoDlcyK+GHb7EMo78bo2w0WCIuFs6cgOE5xvyJP40m8q+KnnjQuxTEb4N
QZiVvi6ZHrI+6Sq6CxGIKFUX8KkTTEPu8zcMGlP1VgfcOtc=
-----END CERTIFICATE-----
Generated at Wed Apr 16 17:22:00 2025 by rpki-client