Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/mPHxSNMx_LfIwiEH3zHzTaFOQxw.roa
File: mPHxSNMx_LfIwiEH3zHzTaFOQxw.roa (raw, json)
Hash identifier: kOTVJWAMlbpj6dA+fMzm751KfP11tUlnw31TECc6zBk=
Subject key identifier: 98:F1:F1:48:D3:31:FC:B7:C8:C2:21:07:DF:31:F3:4D:A1:4E:43:1C
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 14C9
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/mPHxSNMx_LfIwiEH3zHzTaFOQxw.roa
Signing time: Mon 10 Feb 2025 14:35:17 +0000
ROA not before: Mon 10 Feb 2025 14:35:17 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 15133
IP address blocks: 2001:b032:c101::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 11 Feb 2025 23:44:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5321 (0x14c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:35:17 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=98F1F148D331FCB7C8C22107DF31F34DA14E431C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:62:d3:99:be:0d:38:54:74:d5:9a:40:4a:bf:
0d:7c:ec:88:e8:01:c3:d8:29:50:94:ad:e4:c6:b1:
af:eb:55:34:f2:8f:f3:b8:ec:3a:0d:fa:c7:7b:59:
d1:13:44:cd:69:3b:ab:f0:28:e4:24:c9:1e:8b:fd:
34:86:9b:31:e9:a4:5e:c9:17:88:c6:c2:35:6f:5d:
4c:59:18:f3:ae:c5:53:74:c7:72:b7:d2:e8:9d:db:
8a:ef:6c:be:6b:9c:72:13:23:f3:a2:39:19:95:0f:
e3:82:a7:bb:4a:4a:e7:ae:88:06:24:90:73:fb:ff:
81:ac:59:f1:83:b8:f1:46:84:d0:d1:94:53:70:6b:
c7:3d:17:0a:52:9d:b3:e5:6e:a6:ac:13:09:cb:c9:
ae:70:3e:a1:fa:f8:eb:cf:db:f6:56:99:09:ff:3a:
27:4c:51:a1:ad:5e:35:74:c6:42:9d:a1:24:13:b3:
06:5a:65:c9:e2:47:0c:5a:f8:61:87:69:ab:85:62:
0d:d8:4f:45:16:30:83:9e:c8:03:85:eb:11:df:d0:
70:74:1b:54:89:d1:e1:ae:90:a0:f0:2d:0a:c4:87:
0b:b9:dc:94:cc:c3:1d:0b:dd:d5:04:7a:f0:97:d0:
f5:e1:e7:8b:71:8b:f2:e6:d3:fd:ee:c3:83:24:90:
bb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F1:F1:48:D3:31:FC:B7:C8:C2:21:07:DF:31:F3:4D:A1:4E:43:1C
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/mPHxSNMx_LfIwiEH3zHzTaFOQxw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:b032:c101::/48
Signature Algorithm: sha256WithRSAEncryption
94:3c:28:1a:46:66:5b:c6:52:72:9c:26:76:f8:44:61:2f:19:
5a:76:04:e3:c8:2a:8e:24:4e:57:65:89:69:95:fc:4f:1c:38:
bd:90:65:7b:c7:26:93:c6:e3:5d:45:fb:90:d9:e2:c1:2e:20:
6c:63:9c:b2:0e:25:11:79:d4:00:62:ad:fc:d9:16:1a:ca:62:
11:dd:ae:30:0c:a4:b6:c0:67:41:ef:9a:7f:25:3f:96:9b:65:
84:01:fa:5e:51:d3:6d:02:8d:db:d0:1f:39:92:96:1d:46:21:
8f:72:ad:b5:2c:3a:60:d1:20:f7:17:95:3a:70:40:78:70:b8:
6e:c0:71:4d:c7:52:46:b0:a2:f7:b3:88:d7:5d:2b:4f:4d:3d:
1e:ac:66:ab:ca:5b:1c:fc:55:8f:27:db:46:79:18:74:90:d7:
48:6a:fd:ba:07:f5:45:59:de:d4:a6:63:3a:5a:7e:c8:1c:5d:
df:d2:fa:91:74:ef:19:f2:ad:a8:56:2a:6e:63:5c:3f:8b:fd:
29:cf:87:e9:63:f1:2d:f9:a7:55:f4:12:9f:02:b9:33:00:55:
ec:d0:0a:53:d6:51:36:96:93:a5:7f:41:af:d9:bd:80:b3:10:
15:e7:e1:6a:01:70:46:ed:1b:f3:58:29:4c:1c:34:cf:7b:b2:
49:81:d2:85
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICFMkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTAx
NDM1MTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk4RjFGMTQ4RDMzMUZD
QjdDOEMyMjEwN0RGMzFGMzREQTE0RTQzMUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDeYtOZvg04VHTVmkBKvw187IjoAcPYKVCUreTGsa/rVTTyj/O4
7DoN+sd7WdETRM1pO6vwKOQkyR6L/TSGmzHppF7JF4jGwjVvXUxZGPOuxVN0x3K3
0uid24rvbL5rnHITI/OiORmVD+OCp7tKSueuiAYkkHP7/4GsWfGDuPFGhNDRlFNw
a8c9FwpSnbPlbqasEwnLya5wPqH6+OvP2/ZWmQn/OidMUaGtXjV0xkKdoSQTswZa
ZcniRwxa+GGHaauFYg3YT0UWMIOeyAOF6xHf0HB0G1SJ0eGukKDwLQrEhwu53JTM
wx0L3dUEevCX0PXh54txi/Lm0/3uw4MkkLszAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUmPHxSNMx/LfIwiEH3zHzTaFOQxwwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9tUEh4U05NeF9MZkl3aUVIM3pI
elRhRk9ReHcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAGw
MsEBMA0GCSqGSIb3DQEBCwUAA4IBAQCUPCgaRmZbxlJynCZ2+ERhLxladgTjyCqO
JE5XZYlplfxPHDi9kGV7xyaTxuNdRfuQ2eLBLiBsY5yyDiURedQAYq382RYaymIR
3a4wDKS2wGdB75p/JT+Wm2WEAfpeUdNtAo3b0B85kpYdRiGPcq21LDpg0SD3F5U6
cEB4cLhuwHFNx1JGsKL3s4jXXStPTT0erGarylsc/FWPJ9tGeRh0kNdIav26B/VF
Wd7UpmM6Wn7IHF3f0vqRdO8Z8q2oVipuY1w/i/0pz4fpY/Et+adV9BKfArkzAFXs
0ApT1lE2lpOlf0Gv2b2AsxAV5+FqAXBG7RvzWClMHDTPe7JJgdKF
-----END CERTIFICATE-----
Generated at Wed Apr 16 12:32:43 2025 by rpki-client