Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/WhpzycRFiMhmel1TUysVfwN3Vaw.roa
File: WhpzycRFiMhmel1TUysVfwN3Vaw.roa (raw, json)
Hash identifier: JDlmPadjbHgWNhBGLugG0yqLjsNCwm5SpkdpYlnIzdk=
Subject key identifier: 5A:1A:73:C9:C4:45:88:C8:66:7A:5D:53:53:2B:15:7F:03:77:55:AC
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1456
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/WhpzycRFiMhmel1TUysVfwN3Vaw.roa
Signing time: Mon 10 Feb 2025 14:34:49 +0000
ROA not before: Mon 10 Feb 2025 14:34:49 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 114.24.0.0/14 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 23:44:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5206 (0x1456)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:34:49 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5A1A73C9C44588C8667A5D53532B157F037755AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:60:ff:98:fc:61:f0:7d:9a:f9:e5:4e:2b:9a:
6d:30:49:62:2f:9d:e1:43:50:66:77:c3:33:58:aa:
bc:27:bc:d7:da:6d:a5:d3:40:52:bf:0a:b5:f0:4d:
b4:04:ca:e0:3c:e7:fd:0b:98:08:37:70:fe:0d:43:
92:f2:0e:90:0f:83:00:5e:23:3c:7c:7e:16:b2:0d:
2d:ef:1b:a3:b0:ec:2f:d1:23:de:80:27:ac:a6:73:
cc:ad:26:08:43:68:ba:d7:b7:d2:c3:98:67:16:be:
c0:c8:51:73:8c:56:1b:24:36:14:32:55:ac:2a:d3:
27:a0:dd:42:1e:78:29:db:2a:e6:f2:34:4b:f0:12:
9e:eb:41:ef:40:f3:5e:26:d8:00:56:f2:c3:f3:b7:
78:4a:7a:08:60:19:c6:be:04:95:bc:6c:cc:1f:f9:
9d:0d:fb:c8:6f:67:72:4f:91:17:ed:0a:0f:c6:80:
c2:0e:d8:39:60:f9:1f:40:57:1f:09:64:e8:39:a4:
7f:ff:ed:de:65:aa:1e:38:cc:cf:de:bd:98:63:66:
0f:25:ac:cb:93:36:7f:65:81:4c:94:1b:c8:e8:61:
b9:28:1c:42:c6:df:14:d9:bb:13:dd:a4:14:dc:fa:
86:c6:1f:b9:1b:c6:9c:2e:bd:c0:94:6e:0f:ef:fd:
6e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1A:73:C9:C4:45:88:C8:66:7A:5D:53:53:2B:15:7F:03:77:55:AC
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/WhpzycRFiMhmel1TUysVfwN3Vaw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.24.0.0/14
Signature Algorithm: sha256WithRSAEncryption
67:80:49:62:0e:02:a8:fc:39:a2:c5:8e:24:5e:92:08:49:c8:
3b:43:ab:de:7f:83:54:c2:6a:14:b3:97:e8:b3:d2:86:c9:b8:
ae:8a:0d:d5:9e:dd:a1:90:92:15:12:36:4d:f1:b0:db:09:c7:
80:35:a3:df:b1:38:87:82:f0:48:41:c7:66:e0:50:a7:95:96:
02:17:bf:2d:98:0e:eb:1f:f3:59:31:d2:4a:0b:11:da:0a:a6:
3b:22:60:ee:56:7e:81:7f:92:87:a8:f2:99:3b:32:1e:9b:1a:
99:f0:6f:44:30:89:cb:47:eb:e8:41:9e:4b:bd:67:16:88:4a:
19:25:8c:3a:1d:00:ac:2f:69:ff:fc:66:2b:76:17:54:6e:d9:
91:bd:2d:c5:24:84:09:ae:0b:04:7e:72:5d:4b:41:6d:6c:76:
3c:a7:7c:b9:78:10:3d:79:35:f1:a5:92:3e:f7:c6:c4:97:af:
ec:a8:4b:18:e3:25:41:fd:fc:ec:73:73:91:83:6a:24:34:a6:
72:40:e0:50:73:e3:17:15:2d:9e:41:42:22:c0:5e:e6:62:04:
5a:18:2e:9c:7b:f9:bc:d8:8c:c8:3c:ee:63:c5:75:9b:3f:a6:
42:90:73:41:d2:8e:e5:f7:ef:1a:8c:0d:26:c4:c6:8b:3e:72:
83:21:b6:20
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICFFYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTAx
NDM0NDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVBMUE3M0M5QzQ0NTg4
Qzg2NjdBNUQ1MzUzMkIxNTdGMDM3NzU1QUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJYP+Y/GHwfZr55U4rmm0wSWIvneFDUGZ3wzNYqrwnvNfabaXT
QFK/CrXwTbQEyuA85/0LmAg3cP4NQ5LyDpAPgwBeIzx8fhayDS3vG6Ow7C/RI96A
J6ymc8ytJghDaLrXt9LDmGcWvsDIUXOMVhskNhQyVawq0yeg3UIeeCnbKubyNEvw
Ep7rQe9A814m2ABW8sPzt3hKeghgGca+BJW8bMwf+Z0N+8hvZ3JPkRftCg/GgMIO
2Dlg+R9AVx8JZOg5pH//7d5lqh44zM/evZhjZg8lrMuTNn9lgUyUG8joYbkoHELG
3xTZuxPdpBTc+obGH7kbxpwuvcCUbg/v/W4NAgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQUWhpzycRFiMhmel1TUysVfwN3VawwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9XaHB6eWNSRmlNaG1lbDFUVXlz
VmZ3TjNWYXcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCchgw
DQYJKoZIhvcNAQELBQADggEBAGeASWIOAqj8OaLFjiRekghJyDtDq95/g1TCahSz
l+iz0obJuK6KDdWe3aGQkhUSNk3xsNsJx4A1o9+xOIeC8EhBx2bgUKeVlgIXvy2Y
Dusf81kx0koLEdoKpjsiYO5WfoF/koeo8pk7Mh6bGpnwb0QwictH6+hBnku9ZxaI
ShkljDodAKwvaf/8Zit2F1Ru2ZG9LcUkhAmuCwR+cl1LQW1sdjynfLl4ED15NfGl
kj73xsSXr+yoSxjjJUH9/Oxzc5GDaiQ0pnJA4FBz4xcVLZ5BQiLAXuZiBFoYLpx7
+bzYjMg87mPFdZs/pkKQc0HSjuX37xqMDSbExos+coMhtiA=
-----END CERTIFICATE-----
Generated at Wed Apr 16 12:31:36 2025 by rpki-client