Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/vE8cfORQ06CSP8IrwzQrSl2hrqA.roa
File: vE8cfORQ06CSP8IrwzQrSl2hrqA.roa (raw, json)
Hash identifier: OHFOLrLCsqpDCHCvqhUIx7y+d+Rnktlh4b4/spiOh1o=
Subject key identifier: BC:4F:1C:7C:E4:50:D3:A0:92:3F:C2:2B:C3:34:2B:4A:5D:A1:AE:A0
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1517
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/vE8cfORQ06CSP8IrwzQrSl2hrqA.roa
Signing time: Tue 11 Feb 2025 23:44:18 +0000
ROA not before: Tue 11 Feb 2025 23:44:18 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131660
IP address blocks: 2001:b000:59c::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 12 Feb 2025 01:22:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5399 (0x1517)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 11 23:44:18 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=BC4F1C7CE450D3A0923FC22BC3342B4A5DA1AEA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:61:7b:4f:0a:0c:c7:0e:eb:8b:44:c2:64:fe:
56:03:38:f8:39:d3:a5:4c:5e:d9:78:8e:fd:ea:6e:
7e:c1:e9:45:52:79:cc:91:24:32:6f:50:35:a3:38:
cf:db:f6:01:5b:a4:7d:58:5c:03:a0:03:30:ee:2c:
fd:97:b9:b6:18:fe:d5:34:60:61:64:ae:cd:4f:f6:
99:65:3f:cc:1c:da:47:ee:97:e3:06:a2:f0:35:98:
96:61:3a:fc:52:70:75:3f:e6:bf:5c:c2:c5:18:94:
26:77:dc:c7:59:00:06:d0:06:3c:95:04:3b:0d:f7:
37:ea:06:b3:e8:9a:79:c9:a1:89:25:b6:49:04:35:
ac:2a:80:10:aa:8f:f2:13:3f:5f:4f:f3:4c:44:68:
ed:1c:56:d6:79:00:fa:95:ad:d0:1c:31:3e:d0:19:
e5:69:a4:f6:fe:87:90:40:52:82:1a:08:a9:c2:24:
57:ca:d9:9b:23:83:3e:09:66:f4:ef:a5:64:ae:8f:
1b:5e:a3:14:89:fc:7b:98:26:cd:f7:26:51:fe:21:
b1:b9:db:bf:59:31:1c:36:61:8d:ce:76:3c:80:b8:
e1:55:30:d9:a0:d7:2e:d6:12:8e:62:d4:7b:62:9b:
22:89:88:db:bb:ce:cd:78:82:ac:0e:34:b3:64:cd:
ae:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:4F:1C:7C:E4:50:D3:A0:92:3F:C2:2B:C3:34:2B:4A:5D:A1:AE:A0
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/vE8cfORQ06CSP8IrwzQrSl2hrqA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:b000:59c::/48
Signature Algorithm: sha256WithRSAEncryption
bd:5d:97:21:62:10:57:07:11:5c:47:80:98:08:d1:cd:08:38:
42:f4:a0:66:51:28:ed:3c:2c:63:29:05:04:57:e6:20:ed:c2:
93:7a:58:90:3d:4c:66:be:f4:cb:4a:8c:cb:e6:f9:ee:fa:95:
e4:48:2d:e8:f6:de:1c:a7:82:97:3a:2f:aa:3e:2a:35:14:1e:
58:62:fe:c7:04:f7:20:9d:d4:f5:34:b5:08:b2:1a:b7:97:d4:
2f:a6:d6:e5:e3:9f:4e:2d:25:fa:c8:43:bc:e6:e5:42:0f:01:
82:70:c3:6f:0f:a5:29:78:54:1a:11:86:94:96:f1:b7:d5:38:
ac:40:ae:a9:cb:1e:61:03:7c:40:4a:28:e7:a3:c8:06:f6:75:
93:9e:6b:1e:c7:8c:10:37:05:23:bf:0f:8b:c2:f0:45:99:ba:
d2:ac:32:fb:34:4e:f5:b0:08:7e:b8:4c:17:c7:76:7d:c0:e5:
5c:77:4a:8c:e4:e2:c8:36:53:6e:ef:9a:e7:0c:76:9c:f6:8d:
a6:2f:d6:2e:ad:ae:1d:2a:50:a4:2d:a7:88:14:32:18:2e:1e:
6a:2e:b8:63:20:39:f4:8b:ee:af:ac:39:03:15:15:05:e7:e2:
7d:25:b7:ad:b0:29:70:9e:37:24:06:ba:5c:13:e8:25:96:d0:
6f:95:83:aa
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICFRcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTEy
MzQ0MThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJDNEYxQzdDRTQ1MEQz
QTA5MjNGQzIyQkMzMzQyQjRBNURBMUFFQTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9YXtPCgzHDuuLRMJk/lYDOPg506VMXtl4jv3qbn7B6UVSecyR
JDJvUDWjOM/b9gFbpH1YXAOgAzDuLP2XubYY/tU0YGFkrs1P9pllP8wc2kful+MG
ovA1mJZhOvxScHU/5r9cwsUYlCZ33MdZAAbQBjyVBDsN9zfqBrPomnnJoYkltkkE
NawqgBCqj/ITP19P80xEaO0cVtZ5APqVrdAcMT7QGeVppPb+h5BAUoIaCKnCJFfK
2Zsjgz4JZvTvpWSujxteoxSJ/HuYJs33JlH+IbG5279ZMRw2YY3OdjyAuOFVMNmg
1y7WEo5i1HtimyKJiNu7zs14gqwONLNkza5tAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUvE8cfORQ06CSP8IrwzQrSl2hrqAwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC92RThjZk9SUTA2Q1NQOElyd3pR
clNsMmhycUEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAGw
AAWcMA0GCSqGSIb3DQEBCwUAA4IBAQC9XZchYhBXBxFcR4CYCNHNCDhC9KBmUSjt
PCxjKQUEV+Yg7cKTeliQPUxmvvTLSozL5vnu+pXkSC3o9t4cp4KXOi+qPio1FB5Y
Yv7HBPcgndT1NLUIshq3l9Qvptbl459OLSX6yEO85uVCDwGCcMNvD6UpeFQaEYaU
lvG31TisQK6pyx5hA3xASijno8gG9nWTnmsex4wQNwUjvw+LwvBFmbrSrDL7NE71
sAh+uEwXx3Z9wOVcd0qM5OLINlNu75rnDHac9o2mL9Yura4dKlCkLaeIFDIYLh5q
LrhjIDn0i+6vrDkDFRUF5+J9JbetsClwnjckBrpcE+glltBvlYOq
-----END CERTIFICATE-----
Generated at Sat May 10 11:23:33 2025 by rpki-client