Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/y6DLhu3qy6tzRFwcgLTlOD2x78s.roa
File: y6DLhu3qy6tzRFwcgLTlOD2x78s.roa (raw, json)
Hash identifier: YmPSr4+XlylzgCyTeL9CI/z5raWrUIT5N5apCe7eIIc=
Subject key identifier: CB:A0:CB:86:ED:EA:CB:AB:73:44:5C:1C:80:B4:E5:38:3D:B1:EF:CB
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1506
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/y6DLhu3qy6tzRFwcgLTlOD2x78s.roa
Signing time: Tue 11 Feb 2025 23:44:15 +0000
ROA not before: Tue 11 Feb 2025 23:44:15 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17714
IP address blocks: 175.111.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 01:22:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5382 (0x1506)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 11 23:44:15 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=CBA0CB86EDEACBAB73445C1C80B4E5383DB1EFCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6d:0b:58:e8:dd:ce:70:23:a0:af:6d:1d:24:
5e:7d:81:a0:bf:59:0d:c8:b1:53:05:90:7c:1f:98:
dd:7d:9c:3f:bb:f1:92:2c:09:38:4e:cc:d6:89:33:
c9:c8:1b:1b:a5:83:ec:8c:ec:da:88:f2:6b:f3:7b:
f7:ed:60:8b:7d:c7:b0:ab:df:2e:36:b7:22:db:b9:
bd:c6:95:9e:10:26:df:75:f5:6b:ec:13:b7:0d:9d:
65:2d:e4:6d:3d:f8:a4:75:6e:02:7f:98:f3:13:f1:
2f:24:0d:09:f8:45:7c:e2:e5:eb:b4:8c:38:67:4a:
6a:dd:dc:e5:f4:25:90:5b:41:3f:03:d9:c1:7e:ad:
85:ac:78:38:75:a4:da:7c:89:f0:a3:e0:cb:e3:08:
cd:dc:7b:cc:6f:97:fd:e7:6f:f0:4b:04:61:58:de:
b5:d9:ef:df:a5:43:b0:41:0c:5e:6d:4c:4a:a7:36:
42:03:18:35:9a:0b:2b:84:1e:65:33:fd:d4:63:d6:
52:06:0a:c9:86:ab:6e:9a:5b:3b:8b:cc:4b:12:b0:
d3:65:09:94:2a:06:c6:92:f1:e1:e0:48:18:53:2d:
ae:ef:30:30:0f:56:93:4d:cb:a8:68:45:fa:52:80:
09:68:d6:8d:a6:83:0b:9f:16:54:01:3a:13:bb:e9:
7c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A0:CB:86:ED:EA:CB:AB:73:44:5C:1C:80:B4:E5:38:3D:B1:EF:CB
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/y6DLhu3qy6tzRFwcgLTlOD2x78s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.111.255.0/24
Signature Algorithm: sha256WithRSAEncryption
57:46:04:fa:55:45:47:8b:68:91:18:8e:b0:45:f3:45:d6:1c:
b4:66:18:b2:c4:3c:2b:08:81:95:1b:c8:c4:6e:e1:0f:87:0d:
62:28:3a:e3:3a:8f:d7:6c:1d:97:ea:36:a1:05:49:13:8d:7d:
87:8d:26:8f:48:9a:79:d3:88:dc:a2:2a:70:8d:cc:7e:5c:0f:
b7:47:50:a1:39:26:f1:ad:0f:a6:86:e5:13:5a:a9:00:4f:fe:
ba:d1:a5:b3:28:cc:f3:78:3c:5b:88:0c:75:15:a1:4c:bd:ea:
c9:bb:77:79:74:13:ec:b5:48:6d:06:c9:11:ff:eb:46:12:45:
69:74:0d:5d:98:5d:d1:d9:17:0b:9c:74:83:2e:40:6f:5b:80:
5a:81:fe:46:21:84:c2:8d:dc:c4:af:23:aa:65:9a:e4:31:ca:
04:00:20:d6:73:7e:79:fb:ca:d2:0a:1a:96:20:53:9e:ab:4d:
8c:aa:7c:a6:0e:a8:eb:af:6d:de:dd:73:b9:1c:eb:f8:f4:ee:
5e:b3:8b:d7:f0:0d:74:ff:18:34:5d:c1:52:f3:17:9a:8b:4d:
b4:91:eb:61:c3:49:12:8e:af:7b:80:fa:25:15:1f:1d:a5:e0:
c5:ef:85:ea:7f:d6:7b:c1:2e:a8:2a:aa:69:71:3f:92:e0:b8:
32:61:a5:cd
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICFQYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTEy
MzQ0MTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENCQTBDQjg2RURFQUNC
QUI3MzQ0NUMxQzgwQjRFNTM4M0RCMUVGQ0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCjbQtY6N3OcCOgr20dJF59gaC/WQ3IsVMFkHwfmN19nD+78ZIs
CThOzNaJM8nIGxulg+yM7NqI8mvze/ftYIt9x7Cr3y42tyLbub3GlZ4QJt919Wvs
E7cNnWUt5G09+KR1bgJ/mPMT8S8kDQn4RXzi5eu0jDhnSmrd3OX0JZBbQT8D2cF+
rYWseDh1pNp8ifCj4MvjCM3ce8xvl/3nb/BLBGFY3rXZ79+lQ7BBDF5tTEqnNkID
GDWaCyuEHmUz/dRj1lIGCsmGq26aWzuLzEsSsNNlCZQqBsaS8eHgSBhTLa7vMDAP
VpNNy6hoRfpSgAlo1o2mgwufFlQBOhO76XydAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUy6DLhu3qy6tzRFwcgLTlOD2x78swHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC95NkRMaHUzcXk2dHpSRndjZ0xU
bE9EMng3OHMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAr2//
MA0GCSqGSIb3DQEBCwUAA4IBAQBXRgT6VUVHi2iRGI6wRfNF1hy0ZhiyxDwrCIGV
G8jEbuEPhw1iKDrjOo/XbB2X6jahBUkTjX2HjSaPSJp504jcoipwjcx+XA+3R1Ch
OSbxrQ+mhuUTWqkAT/660aWzKMzzeDxbiAx1FaFMverJu3d5dBPstUhtBskR/+tG
EkVpdA1dmF3R2RcLnHSDLkBvW4Bagf5GIYTCjdzEryOqZZrkMcoEACDWc355+8rS
ChqWIFOeq02MqnymDqjrr23e3XO5HOv49O5es4vX8A10/xg0XcFS8xeai020keth
w0kSjq97gPolFR8dpeDF74Xqf9Z7wS6oKqppcT+S4LgyYaXN
-----END CERTIFICATE-----
Generated at Sat May 10 12:17:43 2025 by rpki-client