Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/Jzjnd33Ip2k8Vb7kb9diFU9bY0k.roa
File: Jzjnd33Ip2k8Vb7kb9diFU9bY0k.roa (raw, json)
Hash identifier: 5cprL5hpExA8IlejRfoxNl61YHgVKD8UGgH83DtEaUo=
Subject key identifier: 27:38:E7:77:7D:C8:A7:69:3C:55:BE:E4:6F:D7:62:15:4F:5B:63:49
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1543
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Jzjnd33Ip2k8Vb7kb9diFU9bY0k.roa
Signing time: Tue 11 Feb 2025 23:44:29 +0000
ROA not before: Tue 11 Feb 2025 23:44:29 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 198949
IP address blocks: 210.242.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 01:22:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5443 (0x1543)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 11 23:44:29 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=2738E7777DC8A7693C55BEE46FD762154F5B6349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4f:85:b3:f7:17:bf:c8:f8:0e:35:c3:e5:bb:
01:f0:80:0a:fe:c8:7c:13:a1:89:b2:3f:92:5b:42:
ad:f4:d9:58:f7:42:44:fb:74:17:ec:84:91:6a:0f:
3e:db:4c:4d:11:5c:a1:54:8e:ba:d5:57:48:71:4b:
cb:74:08:ff:e8:e9:49:76:0d:c1:51:d1:04:a6:63:
47:4b:ed:16:63:ff:e2:e5:4f:16:89:03:1f:61:1f:
74:e7:d5:3a:a9:e0:c3:0d:73:ac:35:a7:95:2d:fb:
a3:e9:02:86:e7:32:b7:5d:a1:5f:62:72:81:4e:3d:
44:44:3c:0d:ea:6b:e2:88:48:8e:7a:07:ac:c6:ae:
cd:13:2d:b4:7e:92:99:e1:e5:d1:4f:5a:59:66:c6:
7a:44:15:5f:b9:07:d7:d8:6f:f8:f6:5f:a2:e4:e4:
6c:a7:5c:f1:36:1d:c9:47:65:b1:13:5e:0b:80:4a:
98:77:02:df:2c:0a:08:3a:f9:94:58:c5:dc:b5:69:
15:40:40:ab:db:e8:2f:32:f8:3a:21:82:f8:94:31:
a4:6f:48:47:02:27:28:50:b0:60:4b:6e:db:fe:e2:
0b:10:5c:c8:d7:67:47:66:f6:5f:2b:5b:a6:70:0f:
dd:86:29:1e:6f:4d:dd:b9:95:9f:55:e0:17:54:50:
b5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:38:E7:77:7D:C8:A7:69:3C:55:BE:E4:6F:D7:62:15:4F:5B:63:49
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Jzjnd33Ip2k8Vb7kb9diFU9bY0k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.242.83.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:d9:21:0f:aa:ef:16:05:e6:85:49:fb:35:bb:4f:7d:35:f2:
9c:c6:34:fb:47:29:30:e0:bb:cb:71:30:82:f4:dd:85:3c:15:
b1:6c:53:63:f9:05:e6:ab:a8:f6:e5:ea:f4:c0:55:26:5b:80:
37:a2:d8:6d:cb:c8:37:56:2d:b3:4b:7b:5c:98:c0:72:e0:40:
14:67:7a:1a:1d:45:fb:c0:53:79:6a:7f:ac:6a:8a:2a:9f:51:
ca:0c:3a:77:ff:c2:2a:31:06:75:75:a3:18:1d:ca:05:51:12:
ad:55:65:9a:3b:59:32:de:f8:e5:71:99:a0:b2:11:44:07:3c:
52:53:5f:a3:ab:b9:69:a8:d3:73:ba:21:b2:62:b8:7a:eb:12:
a5:95:e7:f3:b6:06:ac:6a:7d:77:80:b6:d4:fa:65:d2:66:23:
d2:b6:c9:dd:6c:6a:0f:3f:68:aa:ef:c6:2e:6e:7b:be:ea:dd:
82:76:23:50:7c:05:50:c5:e5:28:99:1c:97:1d:9d:7e:36:cc:
f1:16:f8:8d:af:a5:3c:d3:3a:b0:7b:a2:f3:e8:63:76:8f:1a:
6f:47:41:df:ff:04:37:86:1d:0d:12:2a:04:41:32:93:df:df:
fb:4b:84:5f:48:df:82:44:91:71:ac:b2:74:21:98:95:c9:d7:
f6:d6:3c:6c
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICFUMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTEy
MzQ0MjlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI3MzhFNzc3N0RDOEE3
NjkzQzU1QkVFNDZGRDc2MjE1NEY1QjYzNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCoT4Wz9xe/yPgONcPluwHwgAr+yHwToYmyP5JbQq302Vj3QkT7
dBfshJFqDz7bTE0RXKFUjrrVV0hxS8t0CP/o6Ul2DcFR0QSmY0dL7RZj/+LlTxaJ
Ax9hH3Tn1Tqp4MMNc6w1p5Ut+6PpAobnMrddoV9icoFOPUREPA3qa+KISI56B6zG
rs0TLbR+kpnh5dFPWllmxnpEFV+5B9fYb/j2X6Lk5GynXPE2HclHZbETXguASph3
At8sCgg6+ZRYxdy1aRVAQKvb6C8y+DohgviUMaRvSEcCJyhQsGBLbtv+4gsQXMjX
Z0dm9l8rW6ZwD92GKR5vTd25lZ9V4BdUULVhAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUJzjnd33Ip2k8Vb7kb9diFU9bY0kwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9KempuZDMzSXAyazhWYjdrYjlk
aUZVOWJZMGsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0vJT
MA0GCSqGSIb3DQEBCwUAA4IBAQCg2SEPqu8WBeaFSfs1u099NfKcxjT7Rykw4LvL
cTCC9N2FPBWxbFNj+QXmq6j25er0wFUmW4A3othty8g3Vi2zS3tcmMBy4EAUZ3oa
HUX7wFN5an+saooqn1HKDDp3/8IqMQZ1daMYHcoFURKtVWWaO1ky3vjlcZmgshFE
BzxSU1+jq7lpqNNzuiGyYrh66xKllefztgasan13gLbU+mXSZiPStsndbGoPP2iq
78Yubnu+6t2CdiNQfAVQxeUomRyXHZ1+NszxFviNr6U80zqwe6Lz6GN2jxpvR0Hf
/wQ3hh0NEioEQTKT39/7S4RfSN+CRJFxrLJ0IZiVydf21jxs
-----END CERTIFICATE-----
Generated at Wed Apr 16 12:26:48 2025 by rpki-client