Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/wIAlIwlpYe8xqVlsxNlmR-D-Z6c.roa
File: wIAlIwlpYe8xqVlsxNlmR-D-Z6c.roa (raw, json)
Hash identifier: gApnWShqb99AIu68U2GBw8Ol//D+gniHPeU6+AjvuKo=
Subject key identifier: C0:80:25:23:09:69:61:EF:31:A9:59:6C:C4:D9:66:47:E0:FE:67:A7
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 156C
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/wIAlIwlpYe8xqVlsxNlmR-D-Z6c.roa
Signing time: Tue 11 Feb 2025 23:44:38 +0000
ROA not before: Tue 11 Feb 2025 23:44:38 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131660
IP address blocks: 203.74.220.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 01:22:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5484 (0x156c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 11 23:44:38 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C0802523096961EF31A9596CC4D96647E0FE67A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:34:89:13:3a:b9:1a:04:ba:1d:ea:67:16:82:
08:71:6a:00:84:7a:10:13:7f:a5:a3:47:36:a1:dc:
c8:0d:5b:4a:fc:08:4a:fe:f7:c0:6a:b3:bb:41:86:
11:1e:c2:a7:ce:e6:e0:e7:b4:d9:cd:a0:6d:f3:e0:
16:2e:42:5d:18:52:e3:18:55:aa:8e:3e:76:f5:49:
9b:1b:4b:29:8e:34:4b:4e:20:a1:8a:f4:ea:73:77:
04:33:4f:8f:7b:76:f5:82:3c:71:3f:50:05:e5:ad:
07:c1:10:cb:ae:3e:ec:87:55:83:33:03:89:cf:7c:
ee:e9:20:54:39:90:36:d0:eb:fb:c0:21:29:56:e8:
37:71:e3:17:1e:cf:b9:9f:2a:7e:1d:cc:98:57:74:
6f:a2:35:cd:91:06:3c:e1:82:e5:7c:88:cd:ca:58:
1a:5c:b7:2d:fd:35:60:d7:ea:01:4c:29:57:48:35:
6d:fc:56:a1:bc:87:d8:1a:9d:c4:45:dc:bc:4a:58:
9b:11:64:32:f6:38:2d:9f:db:16:7f:47:33:70:f1:
3d:5f:9e:a7:d9:dd:33:ac:06:2a:2a:da:7f:12:72:
82:25:d5:1c:b1:94:83:a6:a7:9a:f4:e8:c6:62:0c:
58:20:64:ee:59:1d:f4:a7:72:8b:b5:c9:85:53:48:
9d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:80:25:23:09:69:61:EF:31:A9:59:6C:C4:D9:66:47:E0:FE:67:A7
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/wIAlIwlpYe8xqVlsxNlmR-D-Z6c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.74.220.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:3d:4e:9e:3b:1a:3d:d0:67:6b:50:5b:18:15:67:d4:60:ae:
95:29:17:19:dd:fe:38:a2:bd:6b:41:04:b7:ed:6a:7a:78:13:
57:94:d3:01:92:3f:a3:f7:21:67:77:c1:24:ef:9d:b5:29:9a:
0c:b2:1f:28:8c:af:3d:8f:c3:b9:c7:4e:87:18:f8:c3:cf:62:
7d:b8:39:5b:3e:fb:8f:b2:ec:23:21:a3:ae:07:ac:49:64:1b:
7f:80:2d:5c:ce:a4:20:d5:52:59:ca:3c:ef:58:dd:9f:37:0b:
32:03:31:0e:46:f9:63:8d:96:96:25:b9:d2:69:e6:3f:c0:47:
cc:d3:c6:79:55:80:c9:bb:7b:cf:f1:ba:a4:22:42:18:13:dc:
59:83:14:5b:24:f7:16:32:f4:ed:e3:ce:c2:84:70:9f:fb:3b:
7e:6f:7f:81:21:9e:e6:a4:64:63:ec:f2:e6:64:aa:eb:a2:71:
05:72:31:98:ce:e7:9b:58:d5:aa:9a:83:67:30:6c:18:2b:86:
ed:38:57:5b:e0:82:33:73:3b:e3:d0:b6:77:3d:57:2c:ab:9a:
3e:6c:9f:e9:c9:11:2b:c8:f4:22:7e:1c:24:5f:ca:c5:2e:c5:
ce:83:ae:c2:62:35:14:c3:a0:da:1f:91:23:9c:51:c6:e7:40:
40:7b:20:80
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICFWwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTEy
MzQ0MzhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEMwODAyNTIzMDk2OTYx
RUYzMUE5NTk2Q0M0RDk2NjQ3RTBGRTY3QTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/NIkTOrkaBLod6mcWgghxagCEehATf6WjRzah3MgNW0r8CEr+
98Bqs7tBhhEewqfO5uDntNnNoG3z4BYuQl0YUuMYVaqOPnb1SZsbSymONEtOIKGK
9OpzdwQzT497dvWCPHE/UAXlrQfBEMuuPuyHVYMzA4nPfO7pIFQ5kDbQ6/vAISlW
6Ddx4xcez7mfKn4dzJhXdG+iNc2RBjzhguV8iM3KWBpcty39NWDX6gFMKVdINW38
VqG8h9gancRF3LxKWJsRZDL2OC2f2xZ/RzNw8T1fnqfZ3TOsBioq2n8ScoIl1Ryx
lIOmp5r06MZiDFggZO5ZHfSncou1yYVTSJ3pAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUwIAlIwlpYe8xqVlsxNlmR+D+Z6cwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC93SUFsSXdscFllOHhxVmxzeE5s
bVItRC1aNmMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCy0rc
MA0GCSqGSIb3DQEBCwUAA4IBAQCLPU6eOxo90GdrUFsYFWfUYK6VKRcZ3f44or1r
QQS37Wp6eBNXlNMBkj+j9yFnd8Ek7521KZoMsh8ojK89j8O5x06HGPjDz2J9uDlb
PvuPsuwjIaOuB6xJZBt/gC1czqQg1VJZyjzvWN2fNwsyAzEORvljjZaWJbnSaeY/
wEfM08Z5VYDJu3vP8bqkIkIYE9xZgxRbJPcWMvTt487ChHCf+zt+b3+BIZ7mpGRj
7PLmZKrronEFcjGYzuebWNWqmoNnMGwYK4btOFdb4IIzczvj0LZ3PVcsq5o+bJ/p
yREryPQifhwkX8rFLsXOg67CYjUUw6DaH5EjnFHG50BAeyCA
-----END CERTIFICATE-----
Generated at Sat May 10 12:26:35 2025 by rpki-client