Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/pUpP08L70xTrHK_R3xkQKitSLyk.roa
File: pUpP08L70xTrHK_R3xkQKitSLyk.roa (raw, json)
Hash identifier: xzZVk7b63I1bBKIra90m6ralXzlME26ICQgYE3UDE+4=
Subject key identifier: A5:4A:4F:D3:C2:FB:D3:14:EB:1C:AF:D1:DF:19:10:2A:2B:52:2F:29
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1531
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/pUpP08L70xTrHK_R3xkQKitSLyk.roa
Signing time: Tue 11 Feb 2025 23:44:24 +0000
ROA not before: Tue 11 Feb 2025 23:44:24 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9505
IP address blocks: 220.128.48.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 01:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5425 (0x1531)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 11 23:44:24 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A54A4FD3C2FBD314EB1CAFD1DF19102A2B522F29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bb:ec:6e:2f:5f:91:f5:68:81:7e:08:95:12:
e5:a4:db:d3:aa:a6:9a:9e:52:6d:81:67:e7:48:7c:
0d:42:aa:d8:0a:b1:7e:d2:32:ce:a8:8a:3c:9c:3d:
5b:c1:2e:2d:4e:43:3b:70:ea:eb:0e:37:3b:ad:af:
0b:d4:46:3c:8b:11:40:3d:92:d1:6c:89:29:36:7a:
f2:6f:9d:f2:16:50:c9:71:be:b0:3c:a5:6a:32:48:
94:4c:ac:94:83:64:58:ec:8e:50:47:cc:6d:01:a6:
8c:51:44:89:0f:f6:a4:d2:2e:57:74:c4:48:91:1c:
fb:bf:a9:c2:c9:cb:ca:33:fc:21:2e:f0:24:67:98:
a9:5f:e5:b9:45:a1:c1:d0:98:aa:01:41:8f:ab:8d:
ce:cc:cf:e8:85:34:10:4b:db:60:93:06:50:cf:74:
c2:19:92:e5:ab:1f:e8:85:f9:b8:53:c6:4d:f3:ae:
2b:74:86:7e:5e:d0:07:6c:1e:78:ef:1e:d3:7f:d8:
c3:9d:03:24:3c:40:fe:95:01:bf:7a:71:4a:a3:3b:
47:88:7c:74:32:24:8f:dc:8b:19:49:65:90:e6:04:
bc:4e:d3:ed:59:df:d7:50:e2:1d:c5:e8:16:05:83:
d8:d9:7c:83:b7:e6:0a:58:c0:42:d0:dd:45:ae:43:
e3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:4A:4F:D3:C2:FB:D3:14:EB:1C:AF:D1:DF:19:10:2A:2B:52:2F:29
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/pUpP08L70xTrHK_R3xkQKitSLyk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.128.48.0/21
Signature Algorithm: sha256WithRSAEncryption
ac:f5:82:ce:57:84:f2:72:8f:69:6b:ee:b2:69:09:0c:24:4f:
d5:46:66:41:83:ad:03:4d:04:98:17:46:76:9c:83:aa:35:4f:
bb:29:e5:51:f6:64:7c:e5:e5:fd:0b:0e:d2:33:62:81:e6:fc:
14:74:b3:89:e8:1f:c7:70:d3:6f:5f:9e:5f:df:b6:51:a7:ec:
45:8b:c2:74:d8:17:94:23:fc:39:2d:30:d9:0f:98:e6:fa:9d:
4d:5f:06:00:07:40:3d:2f:ae:d6:c0:b6:e9:3d:e0:56:d0:69:
39:4c:a7:0c:48:1d:ef:76:2e:ea:ff:65:cb:2c:e1:d4:2c:78:
33:df:14:8b:4e:56:b4:50:2f:fd:66:28:dd:25:0d:45:4a:2a:
e8:88:34:2b:eb:de:05:39:f3:31:fa:3e:20:45:d5:3f:7b:3a:
94:47:17:e0:cf:11:7d:1b:76:2d:95:87:5c:58:f9:b1:2e:d4:
0a:81:5a:7e:77:e2:02:b4:c4:d4:5a:4c:31:82:fc:64:3d:e0:
11:38:bc:f5:2b:88:7c:cb:98:e0:cb:e2:67:69:f6:c0:46:74:
d9:36:11:a2:46:64:8f:a6:05:6e:f6:4c:9b:4c:b5:ee:95:4b:
ed:d9:d7:76:f6:bc:0a:38:fb:4c:ac:d7:8c:9a:cc:4f:c6:ae:
fa:c6:41:ce
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICFTEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTEy
MzQ0MjRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEE1NEE0RkQzQzJGQkQz
MTRFQjFDQUZEMURGMTkxMDJBMkI1MjJGMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBu+xuL1+R9WiBfgiVEuWk29OqppqeUm2BZ+dIfA1CqtgKsX7S
Ms6oijycPVvBLi1OQztw6usONzutrwvURjyLEUA9ktFsiSk2evJvnfIWUMlxvrA8
pWoySJRMrJSDZFjsjlBHzG0BpoxRRIkP9qTSLld0xEiRHPu/qcLJy8oz/CEu8CRn
mKlf5blFocHQmKoBQY+rjc7Mz+iFNBBL22CTBlDPdMIZkuWrH+iF+bhTxk3zrit0
hn5e0AdsHnjvHtN/2MOdAyQ8QP6VAb96cUqjO0eIfHQyJI/cixlJZZDmBLxO0+1Z
39dQ4h3F6BYFg9jZfIO35gpYwELQ3UWuQ+PxAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUpUpP08L70xTrHK/R3xkQKitSLykwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9wVXBQMDhMNzB4VHJIS19SM3hr
UUtpdFNMeWsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD3IAw
MA0GCSqGSIb3DQEBCwUAA4IBAQCs9YLOV4Tyco9pa+6yaQkMJE/VRmZBg60DTQSY
F0Z2nIOqNU+7KeVR9mR85eX9Cw7SM2KB5vwUdLOJ6B/HcNNvX55f37ZRp+xFi8J0
2BeUI/w5LTDZD5jm+p1NXwYAB0A9L67WwLbpPeBW0Gk5TKcMSB3vdi7q/2XLLOHU
LHgz3xSLTla0UC/9ZijdJQ1FSiroiDQr694FOfMx+j4gRdU/ezqURxfgzxF9G3Yt
lYdcWPmxLtQKgVp+d+ICtMTUWkwxgvxkPeAROLz1K4h8y5jgy+JnafbARnTZNhGi
RmSPpgVu9kybTLXulUvt2dd29rwKOPtMrNeMmsxPxq76xkHO
-----END CERTIFICATE-----
Generated at Wed Apr 16 12:27:58 2025 by rpki-client