Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/FM2CJHSozwVBi5zZhe7ZY5mhhSY.roa
File: FM2CJHSozwVBi5zZhe7ZY5mhhSY.roa (raw, json)
Hash identifier: 0zZgvJIhGjx5HPPe3LHiKQQuWzlP+S+p9VX+1gMc1bU=
Subject key identifier: 14:CD:82:24:74:A8:CF:05:41:8B:9C:D9:85:EE:D9:63:99:A1:85:26
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 171F
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/FM2CJHSozwVBi5zZhe7ZY5mhhSY.roa
Signing time: Wed 12 Feb 2025 01:36:25 +0000
ROA not before: Wed 12 Feb 2025 01:36:25 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9505
IP address blocks: 175.111.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Aug 2025 09:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5919 (0x171f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 12 01:36:25 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=14CD822474A8CF05418B9CD985EED96399A18526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:26:2f:5f:63:45:bf:fa:c9:0c:58:c7:44:6b:
cd:2e:fb:39:d9:00:f9:62:66:05:40:4c:c8:ce:63:
2a:f7:fe:ac:45:5b:c9:8a:ef:b8:45:2b:7e:00:0a:
77:24:6b:0f:df:2c:22:07:5a:02:47:10:bd:17:ed:
eb:6e:04:8b:4e:cf:0b:e1:ad:9c:aa:6a:0c:4c:e9:
ea:c4:4a:34:8e:6f:04:1f:62:c9:25:c3:d0:b7:cc:
e7:83:0c:77:d7:62:fa:16:93:f1:76:eb:74:a4:c0:
68:47:d3:3f:7d:bd:53:ea:03:f7:d5:1b:84:a5:95:
47:57:18:f0:48:1d:c2:b7:f0:d1:20:84:ee:47:cb:
34:4a:68:6b:ef:97:cc:68:12:9f:b9:43:55:5b:fc:
58:6e:99:8d:2a:eb:51:38:70:13:26:de:11:d4:ca:
e1:08:20:8d:1c:0a:39:d3:48:3d:03:af:f5:51:40:
95:ae:65:31:f8:72:5d:75:0f:27:2f:e2:fc:a1:29:
9d:71:50:59:6b:e1:bf:90:58:a1:f3:b2:d1:d9:c8:
e7:b2:23:df:53:cc:69:42:a9:9c:d5:08:c5:22:d5:
6b:e3:85:c5:b0:36:9f:92:e1:44:e6:27:b9:31:f1:
0c:2b:b8:20:4e:4d:3c:04:cc:df:de:17:fa:8c:2e:
29:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CD:82:24:74:A8:CF:05:41:8B:9C:D9:85:EE:D9:63:99:A1:85:26
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/FM2CJHSozwVBi5zZhe7ZY5mhhSY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.111.238.0/24
Signature Algorithm: sha256WithRSAEncryption
82:0d:11:98:45:68:ed:84:ce:cb:17:24:35:64:31:ec:ca:63:
d1:a9:a8:66:ea:34:cb:aa:c4:71:2f:40:64:58:ae:94:80:65:
11:70:46:ca:bc:5a:37:a4:da:9e:ea:48:5d:0a:ac:9a:b5:a9:
3d:23:58:52:bf:dd:4e:cb:a2:f1:4e:9b:42:7a:26:20:9a:58:
17:55:3e:cf:77:d1:d8:90:4f:24:5f:7a:b8:4d:88:c8:8b:09:
58:c1:bb:3e:de:d0:17:f5:64:e2:59:0c:c2:38:dc:d6:b0:17:
26:06:f3:40:03:75:43:47:e5:b5:a2:7a:7f:e4:c6:4e:a1:a1:
ed:ee:8e:2f:10:3f:a4:7f:17:ef:80:be:d8:e5:28:81:80:2e:
f5:22:42:7a:55:77:f4:c0:de:c7:7c:5f:91:e4:72:96:8f:fb:
4b:15:3f:aa:21:30:5b:ee:c1:a5:0a:77:b9:fc:f9:6a:8b:d4:
0b:7e:db:0c:ff:a6:8d:27:94:29:15:20:a6:1c:19:26:15:9d:
57:2f:de:bb:1a:80:aa:86:67:78:1c:6c:10:96:2e:e4:af:c9:
71:32:30:47:86:50:d8:43:1a:d1:b2:ac:29:73:84:9b:d1:7b:
cc:fa:84:69:09:bd:94:a4:32:c2:41:46:7b:af:65:a6:44:8d:
a8:af:d4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:43:36 2025 by rpki-client