Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/FpuYl-dbIGd3uyGuXx9L3QPW6fE.roa
File: FpuYl-dbIGd3uyGuXx9L3QPW6fE.roa (raw, json)
Hash identifier: s5oRME3PxvfueSW95auBmob01nLd+i8JM2pjSXSQGrs=
Subject key identifier: 16:9B:98:97:E7:5B:20:67:77:BB:21:AE:5F:1F:4B:DD:03:D6:E9:F1
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 156D
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/FpuYl-dbIGd3uyGuXx9L3QPW6fE.roa
Signing time: Tue 11 Feb 2025 23:44:38 +0000
ROA not before: Tue 11 Feb 2025 23:44:38 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 54994
IP address blocks: 203.74.117.128/27 maxlen: 27
Validation: Failed, certificate revoked on Wed 12 Feb 2025 01:22:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5485 (0x156d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 11 23:44:38 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=169B9897E75B206777BB21AE5F1F4BDD03D6E9F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:08:94:fe:1e:58:79:49:87:26:ae:34:18:9e:
17:46:31:05:4f:8e:78:ef:8d:a4:cd:8a:05:ff:32:
42:8d:6e:a0:98:93:51:78:14:31:30:00:52:5a:58:
1e:69:2b:8e:69:7a:7a:2b:03:5a:e4:51:5b:e5:71:
b9:a5:da:ea:d7:74:96:ca:f7:d6:d4:ae:4e:c4:7c:
09:1e:7e:f6:c3:84:d8:49:b2:e4:db:a1:e2:ce:14:
4e:b5:12:bc:ad:46:7a:88:6e:cd:3c:39:0f:6b:58:
9c:53:46:c8:a7:25:01:58:fe:f7:e7:51:5e:ce:4e:
eb:ef:aa:3c:5e:70:05:1e:59:30:08:b3:13:e9:a3:
4e:66:fa:35:48:9a:9b:7d:45:08:30:16:1c:ec:d4:
cb:ed:20:2c:bb:8a:c7:0d:36:2a:1f:4e:cc:d4:66:
cc:b1:ac:e4:c2:a4:1a:b0:59:1c:ed:df:00:dd:f1:
9d:3c:10:86:22:4a:32:fd:04:f2:76:f5:29:11:e1:
c6:78:3b:0d:bd:12:a8:75:ca:be:c3:87:6a:fe:4d:
0d:42:28:b3:a7:40:1d:16:9c:2f:16:fc:76:42:13:
96:59:c4:fd:97:f2:77:eb:08:90:c5:5e:86:74:13:
df:a2:f9:67:01:e3:a5:34:30:cb:7b:aa:56:3a:2b:
b6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:9B:98:97:E7:5B:20:67:77:BB:21:AE:5F:1F:4B:DD:03:D6:E9:F1
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/FpuYl-dbIGd3uyGuXx9L3QPW6fE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.74.117.128/27
Signature Algorithm: sha256WithRSAEncryption
72:c3:83:14:87:1f:ce:e8:18:34:87:af:1a:f0:32:0f:77:4a:
33:ec:3c:b1:67:97:06:f4:c7:38:92:ac:ee:2d:9c:f3:e8:c2:
94:5a:66:d9:fa:a9:4b:73:95:0d:10:1d:7d:d9:08:09:a1:9d:
3c:ca:e4:f6:1e:a5:88:b6:25:b5:f2:2a:65:5c:f3:ab:c5:4a:
ff:e1:d5:d3:19:3a:16:cf:56:49:0f:cf:29:06:56:a7:d4:83:
a3:ce:99:c3:28:58:3b:c8:77:33:67:a4:47:1b:71:6c:25:5b:
41:24:7b:f5:01:ef:29:42:b3:de:ad:89:c4:20:b0:c0:ca:0d:
ed:3b:52:08:b9:76:2a:c7:40:cc:18:15:06:6b:d8:d5:d3:bc:
86:c5:fd:ef:72:c3:2a:9f:b3:86:59:06:72:18:94:f0:8d:10:
7f:ed:5c:f2:fb:df:6e:db:6a:6e:f8:1b:b3:d4:d7:51:03:d4:
cb:d7:d6:4c:56:f5:b1:1a:83:d1:99:43:eb:29:60:32:57:11:
be:af:19:cf:d7:4e:4d:08:fb:75:c2:02:1a:f1:0d:8d:fc:00:
0c:93:b9:0a:ae:24:4f:e8:e4:6a:b8:76:67:57:09:85:a3:c0:
6f:88:6b:c9:c6:eb:ae:38:06:5c:f3:c1:ad:90:a5:d2:b6:d4:
d4:fe:d3:c8
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICFW0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTEy
MzQ0MzhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE2OUI5ODk3RTc1QjIw
Njc3N0JCMjFBRTVGMUY0QkREMDNENkU5RjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKCJT+Hlh5SYcmrjQYnhdGMQVPjnjvjaTNigX/MkKNbqCYk1F4
FDEwAFJaWB5pK45penorA1rkUVvlcbml2urXdJbK99bUrk7EfAkefvbDhNhJsuTb
oeLOFE61ErytRnqIbs08OQ9rWJxTRsinJQFY/vfnUV7OTuvvqjxecAUeWTAIsxPp
o05m+jVImpt9RQgwFhzs1MvtICy7iscNNiofTszUZsyxrOTCpBqwWRzt3wDd8Z08
EIYiSjL9BPJ29SkR4cZ4Ow29Eqh1yr7Dh2r+TQ1CKLOnQB0WnC8W/HZCE5ZZxP2X
8nfrCJDFXoZ0E9+i+WcB46U0MMt7qlY6K7YpAgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQUFpuYl+dbIGd3uyGuXx9L3QPW6fEwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9GcHVZbC1kYklHZDN1eUd1WHg5
TDNRUFc2ZkUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFy0p1
gDANBgkqhkiG9w0BAQsFAAOCAQEAcsODFIcfzugYNIevGvAyD3dKM+w8sWeXBvTH
OJKs7i2c8+jClFpm2fqpS3OVDRAdfdkICaGdPMrk9h6liLYltfIqZVzzq8VK/+HV
0xk6Fs9WSQ/PKQZWp9SDo86ZwyhYO8h3M2ekRxtxbCVbQSR79QHvKUKz3q2JxCCw
wMoN7TtSCLl2KsdAzBgVBmvY1dO8hsX973LDKp+zhlkGchiU8I0Qf+1c8vvfbttq
bvgbs9TXUQPUy9fWTFb1sRqD0ZlD6ylgMlcRvq8Zz9dOTQj7dcICGvENjfwADJO5
Cq4kT+jkarh2Z1cJhaPAb4hrycbrrjgGXPPBrZCl0rbU1P7TyA==
-----END CERTIFICATE-----
Generated at Sat May 10 11:35:18 2025 by rpki-client