Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/MnLcGBa7LCC8DQ0fxtNy91qpyRw.roa
File: MnLcGBa7LCC8DQ0fxtNy91qpyRw.roa (raw, json)
Hash identifier: lkGrxIFG4gFPMpJJXZwdxK3MLYtfeKz3X+UOmPtbWdw=
Subject key identifier: 32:72:DC:18:16:BB:2C:20:BC:0D:0D:1F:C6:D3:72:F7:5A:A9:C9:1C
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1799
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/MnLcGBa7LCC8DQ0fxtNy91qpyRw.roa
Signing time: Wed 12 Feb 2025 01:36:52 +0000
ROA not before: Wed 12 Feb 2025 01:36:52 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 210.71.128.0/17 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Aug 2025 09:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6041 (0x1799)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 12 01:36:52 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=3272DC1816BB2C20BC0D0D1FC6D372F75AA9C91C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:46:ca:c2:fc:56:26:82:55:12:af:9a:bf:03:
0f:b3:7a:74:2b:98:65:53:f3:7d:f8:ec:64:f5:26:
9e:5b:32:4d:fa:cc:6b:83:9c:d7:b5:1a:59:d3:9c:
b9:f9:86:fa:2c:13:5f:d3:74:21:bb:33:0d:7a:5d:
1e:13:ad:61:3a:65:be:48:2b:e1:fe:9e:9d:d4:fd:
8a:ed:ba:64:7d:6d:3b:3d:c0:2f:85:14:a5:09:9a:
13:31:1e:68:57:b9:38:fb:21:7f:af:de:c5:df:b0:
ce:9a:4f:9a:21:60:cf:08:85:10:a8:fe:ba:f6:c7:
1f:d2:31:21:9b:62:42:c2:9b:26:14:c4:89:ce:4f:
1c:4c:71:74:c1:b6:f6:cf:d0:4c:a1:22:bf:3a:fa:
20:aa:de:f4:b6:17:7e:41:5e:00:c8:0c:a2:22:49:
19:56:b5:20:22:3b:7f:83:2d:90:99:d3:1d:da:a1:
7f:bb:ce:7b:9f:41:62:2e:21:0f:d1:45:f2:38:bb:
ce:93:8c:42:ea:1f:fa:7f:c7:11:93:04:a4:47:80:
02:3b:ed:e8:ee:54:8a:2d:e9:9a:ff:ed:b2:26:9b:
09:69:39:0c:3b:13:02:4a:be:37:40:18:c0:f4:fc:
01:62:ef:37:66:b6:71:c3:23:99:4a:74:c1:68:e6:
c1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:72:DC:18:16:BB:2C:20:BC:0D:0D:1F:C6:D3:72:F7:5A:A9:C9:1C
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/MnLcGBa7LCC8DQ0fxtNy91qpyRw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.71.128.0/17
Signature Algorithm: sha256WithRSAEncryption
87:b5:fd:85:35:49:d3:24:38:38:68:b3:2d:39:06:76:27:7b:
1c:bc:45:d9:4c:b5:c9:ac:a6:3d:1a:a5:2f:32:e5:6a:56:a5:
4c:14:49:d0:ae:02:cf:db:c7:e9:2e:ff:a3:52:d1:12:42:c2:
6d:9f:14:21:ee:2c:87:9c:e0:15:f9:bf:b3:9e:e5:57:65:58:
46:12:65:b3:7b:33:5c:96:aa:58:77:1d:7f:79:f6:f4:59:16:
34:b6:46:0e:7a:05:70:31:f8:9c:53:37:e1:c0:14:ff:77:15:
0f:df:11:bf:c7:99:c1:cf:2f:58:82:ab:76:f1:6d:e1:d2:ea:
0f:a2:63:c9:0c:06:36:76:f4:9d:21:ad:98:44:f6:20:78:b8:
0d:09:f3:e3:a2:64:2d:9a:60:94:bf:e8:63:b2:b5:91:2d:2b:
83:5e:27:a1:c5:10:9f:a7:3d:4c:75:bc:0f:7b:d9:35:c1:78:
d1:ea:a3:07:e5:e8:13:f9:0d:42:0f:cf:38:73:60:3b:83:01:
e1:4c:63:f9:8e:5b:e4:a4:11:81:96:4b:50:26:44:fa:73:e8:
c1:97:8b:42:59:a8:4c:cf:0e:0b:d5:04:37:7a:67:93:97:a0:
00:eb:e3:4d:17:df:07:62:8e:c1:94:f4:4a:1c:d7:84:98:90:
d5:24:14:bc
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICF5kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw
MTM2NTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDMyNzJEQzE4MTZCQjJD
MjBCQzBEMEQxRkM2RDM3MkY3NUFBOUM5MUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3RsrC/FYmglUSr5q/Aw+zenQrmGVT83347GT1Jp5bMk36zGuD
nNe1GlnTnLn5hvosE1/TdCG7Mw16XR4TrWE6Zb5IK+H+np3U/YrtumR9bTs9wC+F
FKUJmhMxHmhXuTj7IX+v3sXfsM6aT5ohYM8IhRCo/rr2xx/SMSGbYkLCmyYUxInO
TxxMcXTBtvbP0EyhIr86+iCq3vS2F35BXgDIDKIiSRlWtSAiO3+DLZCZ0x3aoX+7
znufQWIuIQ/RRfI4u86TjELqH/p/xxGTBKRHgAI77ejuVIot6Zr/7bImmwlpOQw7
EwJKvjdAGMD0/AFi7zdmtnHDI5lKdMFo5sFrAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUMnLcGBa7LCC8DQ0fxtNy91qpyRwwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9NbkxjR0JhN0xDQzhEUTBmeHRO
eTkxcXB5Uncucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0keA
MA0GCSqGSIb3DQEBCwUAA4IBAQCHtf2FNUnTJDg4aLMtOQZ2J3scvEXZTLXJrKY9
GqUvMuVqVqVMFEnQrgLP28fpLv+jUtESQsJtnxQh7iyHnOAV+b+znuVXZVhGEmWz
ezNclqpYdx1/efb0WRY0tkYOegVwMficUzfhwBT/dxUP3xG/x5nBzy9Ygqt28W3h
0uoPomPJDAY2dvSdIa2YRPYgeLgNCfPjomQtmmCUv+hjsrWRLSuDXiehxRCfpz1M
dbwPe9k1wXjR6qMH5egT+Q1CD884c2A7gwHhTGP5jlvkpBGBlktQJkT6c+jBl4tC
WahMzw4L1QQ3emeTl6AA6+NNF98HYo7BlPRKHNeEmJDVJBS8
-----END CERTIFICATE-----
Generated at Sun Aug 24 02:44:40 2025 by rpki-client