Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/9-F4n5--4tUt7VNfz_fhTdCbp6s.roa
File: 9-F4n5--4tUt7VNfz_fhTdCbp6s.roa (raw, json)
Hash identifier: Z4Iquj22n5pdXhcgX6XU5yiOhpCgRMwpfU5TMo48q/4=
Subject key identifier: F7:E1:78:9F:9F:BE:E2:D5:2D:ED:53:5F:CF:F7:E1:4D:D0:9B:A7:AB
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1856
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/9-F4n5--4tUt7VNfz_fhTdCbp6s.roa
Signing time: Tue 15 Apr 2025 04:53:45 +0000
ROA not before: Tue 15 Apr 2025 04:53:45 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9505
IP address blocks: 2001:b200::/23 maxlen: 64
Validation: Failed, certificate revoked on Fri 22 Aug 2025 09:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6230 (0x1856)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Apr 15 04:53:45 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F7E1789F9FBEE2D52DED535FCFF7E14DD09BA7AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:98:75:15:5a:cc:4c:13:0a:23:b5:ca:55:1d:
4a:b5:ed:32:b9:4f:40:9a:38:7c:03:6a:3f:40:4f:
af:8b:7c:30:59:ea:6c:e8:43:0c:f8:0a:95:63:7e:
a2:16:4c:4f:34:b6:76:fc:23:73:39:57:ae:99:42:
9b:bd:77:5f:e1:9b:83:8c:7b:a5:59:93:79:01:2e:
4a:c0:31:65:76:9f:db:da:e2:d9:70:7e:37:9c:a3:
0e:9d:52:0c:07:72:fe:71:d5:22:79:94:2e:1b:9c:
c6:95:5a:90:8c:f2:33:41:04:68:7b:7b:bb:8c:51:
21:0a:58:ad:a1:6a:57:5a:5e:2d:b4:7c:09:01:d3:
9f:1f:f9:da:7c:2a:ca:8e:6e:91:78:d0:40:fd:15:
ba:39:4c:79:c7:13:c8:9f:88:5b:27:62:3b:11:c2:
75:6e:64:a0:30:4f:12:cc:85:84:e0:fd:c6:57:cd:
e5:70:f1:c5:db:46:81:60:a1:24:b1:9c:5a:b7:e2:
b3:ee:cc:c4:7b:48:fd:fa:f5:00:32:e6:db:66:d7:
bf:45:63:63:0e:d2:6e:65:60:26:8c:f0:29:56:7e:
b7:75:75:10:e2:e9:da:4c:2d:fb:87:1a:dd:bf:cb:
f3:4e:6c:16:92:b8:0f:70:bc:a3:ad:22:58:00:79:
5f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E1:78:9F:9F:BE:E2:D5:2D:ED:53:5F:CF:F7:E1:4D:D0:9B:A7:AB
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/9-F4n5--4tUt7VNfz_fhTdCbp6s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:b200::/23
Signature Algorithm: sha256WithRSAEncryption
9d:83:1e:26:0a:b3:6b:bd:ea:65:73:47:5f:0c:9d:4e:d9:3c:
3a:b7:8e:88:99:dd:1d:54:1d:cf:65:3f:13:19:d6:25:ae:ec:
05:fe:91:30:ed:df:d1:c0:61:a7:6f:6d:5d:11:c5:7f:73:bc:
ee:15:af:a4:3c:51:45:e9:f6:d9:b9:6b:34:33:b4:3e:e0:bd:
f8:a3:87:66:95:70:b6:dc:23:c8:38:90:c1:02:c4:d9:a4:61:
f5:58:27:aa:c0:2a:ec:e9:79:da:19:d3:5c:55:2d:93:b3:05:
be:ac:33:04:ae:d7:da:cc:8b:37:c9:ea:bf:46:39:dd:a5:0e:
c5:4c:da:a6:2f:aa:b0:db:b7:59:f2:e9:f2:3f:61:c8:1a:b0:
dd:8f:b8:9b:74:9c:8a:42:91:94:54:8a:ec:18:c3:c3:ca:b7:
c1:f6:5c:82:8f:11:3a:7e:38:de:d4:a5:76:ef:e0:40:95:2e:
3c:c2:3a:66:2c:99:93:f4:4b:17:f8:c1:83:3e:52:12:20:16:
38:d2:5e:bf:dd:6f:a6:a4:a6:49:aa:a4:13:7f:90:15:1c:f6:
1a:59:ee:82:6a:b1:f6:c8:30:24:0c:d1:d3:b5:1b:37:85:32:
05:3d:bb:48:e2:79:32:e2:45:d5:fb:e5:84:ad:a9:56:dc:d5:
ac:7a:92:00
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICGFYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA0MTUw
NDUzNDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEY3RTE3ODlGOUZCRUUy
RDUyREVENTM1RkNGRjdFMTRERDA5QkE3QUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCgmHUVWsxMEwojtcpVHUq17TK5T0CaOHwDaj9AT6+LfDBZ6mzo
Qwz4CpVjfqIWTE80tnb8I3M5V66ZQpu9d1/hm4OMe6VZk3kBLkrAMWV2n9va4tlw
fjecow6dUgwHcv5x1SJ5lC4bnMaVWpCM8jNBBGh7e7uMUSEKWK2haldaXi20fAkB
058f+dp8KsqObpF40ED9Fbo5THnHE8ifiFsnYjsRwnVuZKAwTxLMhYTg/cZXzeVw
8cXbRoFgoSSxnFq34rPuzMR7SP369QAy5ttm179FY2MO0m5lYCaM8ClWfrd1dRDi
6dpMLfuHGt2/y/NObBaSuA9wvKOtIlgAeV/xAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQU9+F4n5++4tUt7VNfz/fhTdCbp6swHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC85LUY0bjUtLTR0VXQ3Vk5mel9m
aFRkQ2JwNnMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAAjAGAwQBIAGy
MA0GCSqGSIb3DQEBCwUAA4IBAQCdgx4mCrNrveplc0dfDJ1O2Tw6t46Imd0dVB3P
ZT8TGdYlruwF/pEw7d/RwGGnb21dEcV/c7zuFa+kPFFF6fbZuWs0M7Q+4L34o4dm
lXC23CPIOJDBAsTZpGH1WCeqwCrs6XnaGdNcVS2TswW+rDMErtfazIs3yeq/Rjnd
pQ7FTNqmL6qw27dZ8unyP2HIGrDdj7ibdJyKQpGUVIrsGMPDyrfB9lyCjxE6fjje
1KV27+BAlS48wjpmLJmT9EsX+MGDPlISIBY40l6/3W+mpKZJqqQTf5AVHPYaWe6C
arH2yDAkDNHTtRs3hTIFPbtI4nky4kXV++WEralW3NWsepIA
-----END CERTIFICATE-----
Generated at Sun Aug 24 02:41:32 2025 by rpki-client