Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/LxkU9_EQrnbtg2wDZS-TUx4c29c.roa
File: LxkU9_EQrnbtg2wDZS-TUx4c29c.roa (raw, json)
Hash identifier: aYf9yc8udR/b3TjOY7ujWM0mReTrbVHfe7wAJ7/Eyjw=
Subject key identifier: 2F:19:14:F7:F1:10:AE:76:ED:83:6C:03:65:2F:93:53:1E:1C:DB:D7
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1793
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/LxkU9_EQrnbtg2wDZS-TUx4c29c.roa
Signing time: Wed 12 Feb 2025 01:36:51 +0000
ROA not before: Wed 12 Feb 2025 01:36:51 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 114.30.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Aug 2025 09:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6035 (0x1793)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 12 01:36:51 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=2F1914F7F110AE76ED836C03652F93531E1CDBD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c4:77:f8:83:49:77:73:cd:6b:6c:94:1f:93:
bf:da:52:49:55:30:f0:01:9a:36:d7:60:1b:8c:87:
65:e8:65:a4:80:11:ed:22:65:70:84:01:0d:d7:06:
6e:f2:e5:93:7f:e8:33:7d:fc:4e:21:be:62:4c:00:
e7:ea:8a:ef:30:98:be:70:0f:09:98:1f:9f:c2:b5:
1d:87:cc:a8:bc:1e:96:75:cb:f1:f4:67:9e:af:2d:
55:93:63:23:09:06:3b:a9:de:03:46:93:b1:0e:ff:
04:ac:c0:1a:96:e6:4b:ab:c4:cc:78:c5:1f:70:3c:
db:1f:69:72:eb:c2:31:0e:45:a3:17:d2:7e:4b:ad:
a3:93:85:52:c1:1c:6f:37:4f:b8:45:b5:2f:09:19:
2c:6b:d0:9c:d1:ad:01:84:ae:86:96:d7:50:c6:6f:
0a:ba:18:6a:07:a6:44:5d:fa:e2:1a:82:8c:2a:ed:
43:ab:40:7c:62:17:50:a3:2e:93:bf:54:c7:5a:bf:
20:b0:82:5d:db:92:e4:5e:29:e8:b0:f9:22:62:64:
3f:94:09:b7:90:12:26:3b:88:2a:80:8a:7e:a8:2b:
fe:f1:49:38:13:92:c1:1b:f3:66:03:df:30:e7:02:
64:92:7e:d9:98:9b:2e:11:59:93:9f:8c:84:d4:62:
6f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:19:14:F7:F1:10:AE:76:ED:83:6C:03:65:2F:93:53:1E:1C:DB:D7
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/LxkU9_EQrnbtg2wDZS-TUx4c29c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.30.44.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:bb:d3:ea:cb:0c:19:96:47:52:4f:27:5d:b3:28:91:ec:0f:
7e:ef:f7:f2:de:c0:80:c2:10:32:6e:f3:00:2a:c9:8c:a7:fa:
d3:f2:43:2a:3b:46:1c:d7:84:21:aa:97:5a:2b:40:67:09:84:
ff:d2:b3:75:38:fc:5a:1e:5b:70:32:72:73:e1:f9:1e:8a:08:
c3:80:4b:2a:f1:f3:10:2f:5c:25:c2:67:e7:17:3f:7a:68:49:
ae:91:f7:93:56:e9:0a:42:aa:1b:e6:66:e0:e6:d2:71:fc:43:
2b:dc:e8:22:b7:d5:06:08:8c:18:16:ff:e5:92:63:76:e4:1b:
41:09:35:e3:68:9d:20:97:bc:1d:40:c1:1f:b8:78:94:21:9d:
d3:3b:06:b3:c1:ff:0a:d8:80:7f:45:59:2a:b8:38:90:6d:c9:
05:25:ac:1a:69:96:e8:23:92:ae:6c:1d:34:87:55:2d:e7:e7:
52:97:6a:be:bb:50:0b:1a:7c:11:91:f0:32:2e:03:fb:fc:4e:
f4:97:3f:7b:cb:57:33:65:51:8b:ec:a2:8e:94:78:3b:ae:74:
76:30:39:b2:3b:c6:36:9b:d3:2e:72:55:71:5f:75:59:f5:43:
db:87:3d:44:66:8a:c0:2c:75:8a:75:1a:5c:b1:48:45:f3:72:
ab:d3:5e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:43:59 2025 by rpki-client