Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/gddqcKMUezgSVRk0HR4L2c9hNfo.roa
File: gddqcKMUezgSVRk0HR4L2c9hNfo.roa (raw, json)
Hash identifier: +OuW/4YlcuElcDlKD22iI3BjbBr+VRyOa5dl8L/vvbY=
Subject key identifier: 81:D7:6A:70:A3:14:7B:38:12:55:19:34:1D:1E:0B:D9:CF:61:35:FA
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 14F9
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/gddqcKMUezgSVRk0HR4L2c9hNfo.roa
Signing time: Tue 11 Feb 2025 23:44:12 +0000
ROA not before: Tue 11 Feb 2025 23:44:12 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 210.59.138.128/27 maxlen: 27
Validation: Failed, certificate revoked on Wed 12 Feb 2025 01:22:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5369 (0x14f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 11 23:44:12 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=81D76A70A3147B38125519341D1E0BD9CF6135FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:95:52:06:48:24:06:84:ab:eb:cb:b1:ce:54:
61:5e:57:4b:ca:13:7d:ce:b2:64:73:47:96:e2:e7:
69:97:eb:e1:a3:8d:c4:4d:38:1f:80:33:42:c8:a2:
d9:af:50:a2:c9:6a:31:8a:86:c2:f2:7d:cf:ad:56:
98:cc:88:b7:13:92:4d:80:bf:cc:00:7f:fc:99:a0:
bb:00:ed:ff:08:cb:73:3b:25:92:12:7e:ef:ca:38:
b6:f1:2a:0f:12:67:c4:f6:d4:6f:11:b1:92:6b:75:
0c:cc:bb:1e:2b:14:9f:18:47:41:23:e4:44:4a:72:
3c:83:b9:b2:79:60:09:cd:7f:63:a6:3a:a7:1a:41:
95:fa:87:1d:9a:a3:a2:bf:4b:f4:6c:b7:db:35:28:
96:ff:1c:9d:9f:3b:80:76:55:de:ca:bf:83:34:e3:
12:af:3d:70:28:fa:ff:48:a5:ef:3b:de:cf:db:08:
48:ed:a9:9d:5b:a6:77:ac:b2:5c:88:a2:f1:88:1f:
47:03:98:12:b9:11:e6:eb:8f:07:51:fd:7a:52:68:
4c:8b:5e:5b:ed:98:ca:55:a0:27:ac:ac:70:db:ff:
4d:42:fa:cc:6d:a2:a8:ad:68:e2:bd:fd:71:ba:ba:
d8:1c:97:cc:c6:2e:13:bf:5d:5f:1e:82:8b:ee:c7:
ad:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D7:6A:70:A3:14:7B:38:12:55:19:34:1D:1E:0B:D9:CF:61:35:FA
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/gddqcKMUezgSVRk0HR4L2c9hNfo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.59.138.128/27
Signature Algorithm: sha256WithRSAEncryption
88:80:3a:23:8c:a2:a6:71:02:19:5f:bd:11:0a:68:62:61:37:
8e:8a:76:67:af:e1:0a:da:ce:47:8f:ff:e4:13:b7:f3:35:26:
2b:34:76:64:47:ee:08:52:c2:2e:d4:62:c2:31:7d:67:a2:69:
e4:21:8b:c0:40:51:a1:80:5f:22:7e:d3:fa:5d:b3:4e:7e:53:
8c:2a:0c:95:9b:70:a5:0c:f0:a6:e9:8f:f0:3b:be:26:29:83:
47:02:68:db:c9:18:5e:50:94:62:94:aa:84:2f:61:a9:88:45:
ac:cd:4a:97:64:ef:44:41:06:df:67:7c:fe:45:ea:ba:ef:b8:
5f:99:ea:b3:60:31:ac:bd:fe:5b:77:86:a7:eb:97:5e:00:1b:
f6:31:01:4d:f9:fa:35:f0:d3:3e:f1:5c:5f:f5:35:b0:fb:df:
da:81:af:81:19:3c:8d:a9:e2:92:4e:50:3a:bd:39:f2:48:18:
11:b5:58:71:a3:f0:fd:81:bc:a4:6e:f5:af:c9:c5:3c:3a:44:
f6:74:9b:0c:fc:b4:1e:56:be:72:3b:7e:bd:3d:60:71:bc:c6:
23:04:15:3d:c8:4a:ee:75:57:5a:ec:0b:48:cc:cf:54:a0:43:
e1:8e:5b:8b:61:28:b5:76:95:58:f0:cc:2b:72:0b:d3:f2:1f:
d5:1c:4f:b6
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICFPkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTEy
MzQ0MTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDgxRDc2QTcwQTMxNDdC
MzgxMjU1MTkzNDFEMUUwQkQ5Q0Y2MTM1RkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBlVIGSCQGhKvry7HOVGFeV0vKE33OsmRzR5bi52mX6+GjjcRN
OB+AM0LIotmvUKLJajGKhsLyfc+tVpjMiLcTkk2Av8wAf/yZoLsA7f8Iy3M7JZIS
fu/KOLbxKg8SZ8T21G8RsZJrdQzMux4rFJ8YR0Ej5ERKcjyDubJ5YAnNf2OmOqca
QZX6hx2ao6K/S/Rst9s1KJb/HJ2fO4B2Vd7Kv4M04xKvPXAo+v9Ipe873s/bCEjt
qZ1bpnesslyIovGIH0cDmBK5EebrjwdR/XpSaEyLXlvtmMpVoCesrHDb/01C+sxt
oqitaOK9/XG6utgcl8zGLhO/XV8egovux60LAgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQUgddqcKMUezgSVRk0HR4L2c9hNfowHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9nZGRxY0tNVWV6Z1NWUmswSFI0
TDJjOWhOZm8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUF0juK
gDANBgkqhkiG9w0BAQsFAAOCAQEAiIA6I4yipnECGV+9EQpoYmE3jop2Z6/hCtrO
R4//5BO38zUmKzR2ZEfuCFLCLtRiwjF9Z6Jp5CGLwEBRoYBfIn7T+l2zTn5TjCoM
lZtwpQzwpumP8Du+JimDRwJo28kYXlCUYpSqhC9hqYhFrM1Kl2TvREEG32d8/kXq
uu+4X5nqs2AxrL3+W3eGp+uXXgAb9jEBTfn6NfDTPvFcX/U1sPvf2oGvgRk8jani
kk5QOr058kgYEbVYcaPw/YG8pG71r8nFPDpE9nSbDPy0Hla+cjt+vT1gcbzGIwQV
PchK7nVXWuwLSMzPVKBD4Y5bi2EotXaVWPDMK3IL0/If1RxPtg==
-----END CERTIFICATE-----
Generated at Wed Apr 16 17:21:51 2025 by rpki-client