Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/GlBXXHTR5jS6_1ZRN_6ge34fmEE.roa
File: GlBXXHTR5jS6_1ZRN_6ge34fmEE.roa (raw, json)
Hash identifier: FKnZedUTYGtMah1zqW0cw7st1tG4s+hnto0gyd+GR+k=
Subject key identifier: 1A:50:57:5C:74:D1:E6:34:BA:FF:56:51:37:FE:A0:7B:7E:1F:98:41
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1789
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/GlBXXHTR5jS6_1ZRN_6ge34fmEE.roa
Signing time: Wed 12 Feb 2025 01:36:48 +0000
ROA not before: Wed 12 Feb 2025 01:36:48 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 114.24.0.0/14 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Aug 2025 09:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6025 (0x1789)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 12 01:36:48 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=1A50575C74D1E634BAFF565137FEA07B7E1F9841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:29:95:80:af:f9:cc:9a:f2:4d:71:93:30:c0:
ea:5d:6c:ac:c9:fb:5d:0d:d3:1c:ee:bd:57:27:19:
ad:f6:cc:c0:75:6c:f5:a8:e4:f1:09:62:7c:bd:2b:
52:31:8c:25:ad:03:b7:e9:70:42:d7:cd:89:6f:9e:
65:d9:a3:a5:3f:de:10:0f:59:c8:d7:ab:4d:e6:9c:
5f:dd:98:26:4c:c1:01:b8:f3:39:5d:92:31:b9:a5:
e0:99:44:30:7d:47:ce:7a:ff:c6:a8:bf:66:4c:54:
be:5b:d5:97:ae:86:fe:1a:6f:2d:f2:e0:3a:54:50:
8d:74:62:b1:18:c8:d5:99:96:cc:b7:ef:be:3b:50:
56:d3:e3:5b:d2:15:4e:e2:70:b5:ca:71:e9:1d:98:
13:cd:13:5d:a1:8c:e9:43:11:8a:96:50:de:80:7a:
9a:c0:fa:0c:1b:9a:b5:31:0c:27:ad:15:02:08:8f:
fa:a0:56:0b:e8:6d:c0:2d:68:89:f9:b1:8d:0d:fa:
27:20:c7:37:7c:bf:c6:13:a1:51:53:7b:aa:09:60:
c3:4d:e8:5e:64:f0:ef:b4:b6:0d:ee:fd:c8:da:d4:
4b:a0:85:94:79:00:68:11:e3:8f:1f:fb:6b:c0:bf:
b2:59:b1:d2:c4:ee:a6:08:56:af:fd:67:7b:bc:5d:
eb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:50:57:5C:74:D1:E6:34:BA:FF:56:51:37:FE:A0:7B:7E:1F:98:41
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/GlBXXHTR5jS6_1ZRN_6ge34fmEE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.24.0.0/14
Signature Algorithm: sha256WithRSAEncryption
16:b4:ce:57:c5:a8:c3:ef:eb:4d:ec:1d:9e:91:6c:83:e0:be:
a6:e1:f1:4e:2e:25:fb:41:9e:24:f9:07:ce:d2:54:13:da:21:
e6:22:32:98:91:90:16:17:a3:5e:13:10:19:cd:27:97:a9:18:
0f:3b:61:83:60:17:c9:d2:d5:f5:fb:13:73:9b:4e:99:09:e1:
c6:0c:ff:27:1e:b5:1f:95:de:b0:db:43:4e:f8:ee:a1:57:35:
29:73:40:83:ac:8f:0e:6f:3b:66:9e:38:5a:2c:59:3e:6c:69:
ed:38:93:4e:cc:68:b0:d4:b0:3b:72:27:86:22:51:6f:af:a9:
b4:e0:59:8c:68:65:ea:74:4c:a0:e5:5c:4c:b3:21:a9:7c:4f:
a9:35:4f:7b:25:98:b4:98:01:83:8d:d4:f9:93:ab:62:ec:ba:
00:24:28:49:34:5c:26:51:d4:18:86:2c:6c:f9:26:f1:60:ec:
6a:5d:ca:80:5b:00:2d:58:30:d2:02:04:72:ea:d0:84:5d:c7:
e1:aa:7c:33:bb:72:55:ec:18:07:68:0c:0e:96:ff:47:be:c6:
6d:ea:9c:2b:19:ce:e4:8a:91:39:c7:ab:2f:70:db:fc:56:48:
4c:6e:aa:7f:f7:de:a5:54:d3:4d:ae:97:a8:2b:fc:43:b8:cd:
1a:f2:46:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:48:06 2025 by rpki-client