Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/nDswt4go_fe37Gp0zMq1Fmy6iog.roa
File: nDswt4go_fe37Gp0zMq1Fmy6iog.roa (raw, json)
Hash identifier: FnmkWPUVupkfka+/axHN8/R1FuqsDNpeqYkIgmOFm9o=
Subject key identifier: 9C:3B:30:B7:88:28:FD:F7:B7:EC:6A:74:CC:CA:B5:16:6C:BA:8A:88
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 149A
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/nDswt4go_fe37Gp0zMq1Fmy6iog.roa
Signing time: Mon 10 Feb 2025 14:35:05 +0000
ROA not before: Mon 10 Feb 2025 14:35:05 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 36040
IP address blocks: 2001:b032:c0ff:1::/64 maxlen: 64
Validation: Failed, certificate revoked on Tue 11 Feb 2025 23:44:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5274 (0x149a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:35:05 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=9C3B30B78828FDF7B7EC6A74CCCAB5166CBA8A88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c3:ea:b1:98:e4:84:d3:c7:8c:a8:81:d2:50:
ea:bc:ab:ad:ab:08:38:e4:c6:5f:83:ae:c0:c4:0d:
38:bb:04:e0:59:f3:08:a0:ca:a7:b1:b7:b2:28:60:
b1:25:d6:b6:b4:6e:a6:0b:9e:1b:d2:d5:7e:2f:2e:
b2:2e:20:aa:c1:7e:5d:b3:7c:3f:26:2b:40:56:e0:
52:36:15:a8:a1:22:9b:37:4e:5a:80:30:a5:0c:49:
81:9f:1c:7e:24:27:96:d8:9e:03:7e:38:0d:3a:5d:
3a:20:d1:29:13:49:c8:d3:2f:1d:f3:9c:a1:54:42:
b4:51:85:f9:bf:a4:d6:2e:9d:61:b1:85:88:2c:c4:
5f:be:61:cd:2c:db:a8:f9:a4:71:b5:ec:95:3e:e2:
fe:d5:1c:8a:8b:7b:30:63:b9:f5:3a:2c:4f:87:91:
79:87:50:b9:bd:4a:26:52:7b:6d:67:c6:44:36:94:
60:2a:29:86:92:be:34:9c:1e:f9:1c:df:0e:f2:14:
41:ac:d1:11:b4:c0:28:99:15:15:94:ad:d1:e8:4d:
9e:9f:f3:ed:0b:d5:f0:f0:60:c2:de:45:2f:55:d2:
41:39:10:99:68:9c:37:9f:f9:cf:11:8d:fb:a2:5c:
e9:f4:10:18:a3:82:08:65:eb:13:b9:2d:3b:23:4b:
00:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3B:30:B7:88:28:FD:F7:B7:EC:6A:74:CC:CA:B5:16:6C:BA:8A:88
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/nDswt4go_fe37Gp0zMq1Fmy6iog.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:b032:c0ff:1::/64
Signature Algorithm: sha256WithRSAEncryption
70:6d:0e:02:ba:a3:5f:ee:f2:f9:13:8b:73:03:fb:be:a2:39:
db:03:de:25:99:8a:f7:d9:c4:f8:18:ff:69:9b:70:95:fd:9b:
86:e5:cb:74:c1:b4:9c:cd:e1:28:6a:2a:9b:66:b9:87:2a:91:
67:2c:35:87:70:b8:04:9a:91:f1:6a:69:2a:1d:97:61:2b:da:
d3:f5:35:b4:fc:f4:4e:5a:74:2c:97:59:e1:bc:1a:9c:29:57:
8b:0a:6e:d5:57:6d:fa:65:a9:17:28:73:66:09:b0:be:18:a8:
e2:4d:7d:52:c8:13:be:e8:de:0a:fb:26:0d:9e:fc:26:27:a9:
c3:39:ab:56:46:c4:7f:05:52:79:a6:23:b5:89:60:90:e2:8f:
dd:44:88:0c:57:90:c0:7e:d7:84:7f:08:33:88:e5:16:ac:a1:
69:40:c5:7e:0e:df:40:a7:19:6e:ba:5a:54:9c:69:db:42:a3:
23:67:c0:fc:73:21:9b:c8:f4:8d:49:b3:ec:cf:ea:10:98:5a:
db:a5:97:37:b8:87:4a:07:bd:a6:7d:0c:33:39:a0:ab:01:7c:
02:ea:43:5b:99:7a:23:73:c3:65:0f:a3:bc:c0:43:96:6b:86:
81:a8:4a:79:99:ff:1b:69:7d:ba:3b:29:67:6a:18:c5:48:11:
25:a1:3e:5a
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICFJowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTAx
NDM1MDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlDM0IzMEI3ODgyOEZE
RjdCN0VDNkE3NENDQ0FCNTE2NkNCQThBODgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDlw+qxmOSE08eMqIHSUOq8q62rCDjkxl+DrsDEDTi7BOBZ8wig
yqext7IoYLEl1ra0bqYLnhvS1X4vLrIuIKrBfl2zfD8mK0BW4FI2FaihIps3TlqA
MKUMSYGfHH4kJ5bYngN+OA06XTog0SkTScjTLx3znKFUQrRRhfm/pNYunWGxhYgs
xF++Yc0s26j5pHG17JU+4v7VHIqLezBjufU6LE+HkXmHULm9SiZSe21nxkQ2lGAq
KYaSvjScHvkc3w7yFEGs0RG0wCiZFRWUrdHoTZ6f8+0L1fDwYMLeRS9V0kE5EJlo
nDef+c8RjfuiXOn0EBijgghl6xO5LTsjSwCxAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUnDswt4go/fe37Gp0zMq1Fmy6iogwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9uRHN3dDRnb19mZTM3R3Awek1x
MUZteTZpb2cucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAGw
MsD/AAEwDQYJKoZIhvcNAQELBQADggEBAHBtDgK6o1/u8vkTi3MD+76iOdsD3iWZ
ivfZxPgY/2mbcJX9m4bly3TBtJzN4ShqKptmuYcqkWcsNYdwuASakfFqaSodl2Er
2tP1NbT89E5adCyXWeG8GpwpV4sKbtVXbfplqRcoc2YJsL4YqOJNfVLIE77o3gr7
Jg2e/CYnqcM5q1ZGxH8FUnmmI7WJYJDij91EiAxXkMB+14R/CDOI5RasoWlAxX4O
30CnGW66WlScadtCoyNnwPxzIZvI9I1Js+zP6hCYWtullze4h0oHvaZ9DDM5oKsB
fALqQ1uZeiNzw2UPo7zAQ5ZrhoGoSnmZ/xtpfbo7KWdqGMVIESWhPlo=
-----END CERTIFICATE-----
Generated at Wed Apr 16 17:21:53 2025 by rpki-client