Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/KYR_0Je7t_UhsR44FHDrpbRdgY0.roa
File: KYR_0Je7t_UhsR44FHDrpbRdgY0.roa (raw, json)
Hash identifier: R/hTlSyyfP5D1ZZ84Oycx13tLKiifUmNFAqKB3scgpE=
Subject key identifier: 29:84:7F:D0:97:BB:B7:F5:21:B1:1E:38:14:70:EB:A5:B4:5D:81:8D
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1507
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/KYR_0Je7t_UhsR44FHDrpbRdgY0.roa
Signing time: Tue 11 Feb 2025 23:44:15 +0000
ROA not before: Tue 11 Feb 2025 23:44:15 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17421
IP address blocks: 111.80.0.0/14 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 01:22:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5383 (0x1507)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 11 23:44:15 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=29847FD097BBB7F521B11E381470EBA5B45D818D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:86:9f:e0:ce:af:32:e4:37:52:15:f6:79:49:
29:de:0a:8d:5a:fc:98:db:8f:58:0f:fa:a8:49:4d:
05:34:65:9a:4e:7e:c1:c9:3d:67:fe:64:f2:20:e9:
e7:ee:53:ef:94:3b:e7:84:4f:31:02:c0:9b:09:14:
c1:18:52:a2:bf:1e:46:0e:f8:fd:2e:ba:d5:30:87:
e8:39:56:74:c5:5d:67:bc:5f:eb:2e:bd:3d:6f:d9:
a7:82:a8:e6:9a:40:c0:e3:89:95:da:db:ab:e5:06:
cd:e7:fa:db:69:58:32:82:9c:cb:e2:4c:e8:57:fa:
5e:83:e8:3f:12:f7:01:8d:77:2b:35:c9:54:15:e5:
6b:60:bd:75:b7:ae:42:71:ff:49:a6:73:57:c9:f0:
fa:ca:24:4c:68:d8:57:94:c5:7a:0b:dc:7d:0b:6d:
00:e9:b5:94:d5:fc:da:59:af:d0:79:bc:2d:04:ac:
04:b4:41:81:be:b7:dd:1e:5e:a7:23:40:51:33:d7:
5e:e4:c5:5f:b2:d8:46:76:96:56:24:bb:c9:b4:bf:
1e:e7:9f:ad:2a:1b:42:93:aa:e9:3a:16:c4:00:47:
36:0b:96:ae:4b:5b:7c:b6:40:93:65:35:33:6a:a3:
9a:f5:3d:21:7d:ae:40:67:b0:1e:08:28:03:a8:68:
3f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:84:7F:D0:97:BB:B7:F5:21:B1:1E:38:14:70:EB:A5:B4:5D:81:8D
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/KYR_0Je7t_UhsR44FHDrpbRdgY0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
111.80.0.0/14
Signature Algorithm: sha256WithRSAEncryption
a1:86:3a:ba:15:02:17:86:c6:49:13:0f:b5:89:42:66:9d:08:
a6:2c:d2:b0:94:30:b4:bc:7a:7e:b3:66:74:1a:9a:01:ad:0a:
c8:6e:36:c2:19:f7:bd:d5:4a:de:87:1d:4a:e7:2c:a0:48:5b:
94:f7:58:1c:68:db:d9:7d:d3:f7:0e:f8:88:cc:3c:83:d4:bc:
c5:e8:a2:18:8d:a3:a7:86:58:9a:b2:6e:32:16:5d:fc:3d:fa:
c6:4c:8d:b0:29:d6:49:26:a3:40:92:71:f7:b1:ee:d6:a0:8a:
69:fe:6b:65:c6:2a:27:a5:5e:e6:e2:a1:32:58:bf:ac:b5:7d:
c7:63:57:78:01:4e:97:98:0d:50:fc:25:0e:80:99:e3:04:92:
b2:11:4e:60:ca:3c:39:d9:8a:19:18:1a:e7:2e:42:96:97:e4:
65:d2:70:57:53:ff:cf:49:81:dd:97:b4:b8:aa:cf:15:80:f8:
ad:f0:bf:a8:91:85:ef:3b:88:aa:28:e8:77:12:c4:80:58:73:
16:af:87:ef:b4:b1:44:58:78:73:ce:65:fe:a3:13:de:89:da:
fd:97:c8:ca:d2:f5:4d:7a:83:c6:6e:25:63:07:a3:f0:e9:c6:
77:78:63:af:f1:fc:83:89:b2:5b:9e:62:c2:06:05:72:df:e5:
36:bb:67:68
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICFQcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTEy
MzQ0MTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI5ODQ3RkQwOTdCQkI3
RjUyMUIxMUUzODE0NzBFQkE1QjQ1RDgxOEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQhp/gzq8y5DdSFfZ5SSneCo1a/Jjbj1gP+qhJTQU0ZZpOfsHJ
PWf+ZPIg6efuU++UO+eETzECwJsJFMEYUqK/HkYO+P0uutUwh+g5VnTFXWe8X+su
vT1v2aeCqOaaQMDjiZXa26vlBs3n+ttpWDKCnMviTOhX+l6D6D8S9wGNdys1yVQV
5WtgvXW3rkJx/0mmc1fJ8PrKJExo2FeUxXoL3H0LbQDptZTV/NpZr9B5vC0ErAS0
QYG+t90eXqcjQFEz117kxV+y2EZ2llYku8m0vx7nn60qG0KTquk6FsQARzYLlq5L
W3y2QJNlNTNqo5r1PSF9rkBnsB4IKAOoaD/XAgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQUKYR/0Je7t/UhsR44FHDrpbRdgY0wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9LWVJfMEplN3RfVWhzUjQ0RkhE
cnBiUmRnWTAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCb1Aw
DQYJKoZIhvcNAQELBQADggEBAKGGOroVAheGxkkTD7WJQmadCKYs0rCUMLS8en6z
ZnQamgGtCshuNsIZ973VSt6HHUrnLKBIW5T3WBxo29l90/cO+IjMPIPUvMXoohiN
o6eGWJqybjIWXfw9+sZMjbAp1kkmo0CScfex7tagimn+a2XGKielXubioTJYv6y1
fcdjV3gBTpeYDVD8JQ6AmeMEkrIRTmDKPDnZihkYGucuQpaX5GXScFdT/89Jgd2X
tLiqzxWA+K3wv6iRhe87iKoo6HcSxIBYcxavh++0sURYeHPOZf6jE96J2v2XyMrS
9U16g8ZuJWMHo/Dpxnd4Y6/x/IOJslueYsIGBXLf5Ta7Z2g=
-----END CERTIFICATE-----
Generated at Wed Apr 16 12:34:03 2025 by rpki-client