Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/Wa108z_mLziNwDpeVbZGN4zH4Oc.roa
File: Wa108z_mLziNwDpeVbZGN4zH4Oc.roa (raw, json)
Hash identifier: qssL4LMRLkETrlECJMLWUcwQst4kF2+v4P0H7VmKHNs=
Subject key identifier: 59:AD:74:F3:3F:E6:2F:38:8D:C0:3A:5E:55:B6:46:37:8C:C7:E0:E7
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 178A
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Wa108z_mLziNwDpeVbZGN4zH4Oc.roa
Signing time: Wed 12 Feb 2025 01:36:48 +0000
ROA not before: Wed 12 Feb 2025 01:36:48 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9680
IP address blocks: 2001:b000:591::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 22 Aug 2025 09:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6026 (0x178a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 12 01:36:48 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=59AD74F33FE62F388DC03A5E55B646378CC7E0E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d8:39:e6:e5:d3:98:78:db:98:e6:4a:90:72:
fc:54:f4:6e:03:84:47:78:bf:9e:d6:ee:40:87:d5:
24:7f:2b:5f:25:23:55:7d:9d:59:d0:e2:ae:a4:62:
15:73:cd:5c:be:4b:5f:e8:e9:7a:38:8a:d3:50:91:
a7:49:44:08:0f:6b:e8:11:69:a0:21:79:b4:ff:95:
6c:65:b5:0d:62:c0:26:8e:89:d0:88:22:28:84:c4:
de:f1:f1:64:87:19:b6:1c:43:26:5c:cb:23:32:52:
c5:89:76:b9:3a:42:4f:fb:9b:00:4f:f4:cd:63:39:
75:0a:ac:16:8a:d4:6f:e7:3f:7d:01:0e:8a:0f:24:
b1:43:1c:b8:3f:f5:e0:68:b1:a3:72:74:c9:a6:52:
76:b7:0c:a7:ac:12:a0:ec:b8:1e:ed:d1:24:a3:46:
ae:37:ca:31:78:99:a7:47:ab:34:98:59:93:cc:35:
03:78:e8:55:cc:26:50:37:6e:ba:48:aa:8f:1c:9c:
19:e7:da:91:46:9c:90:dd:fd:25:55:64:c5:4b:52:
f3:90:e3:72:71:d2:7c:ea:52:a0:20:76:c8:20:3f:
42:ac:db:33:b8:e9:81:34:f3:74:4d:3f:45:b1:4c:
dc:ae:8d:f6:ee:c0:15:c7:7f:a8:1e:33:47:01:56:
1f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AD:74:F3:3F:E6:2F:38:8D:C0:3A:5E:55:B6:46:37:8C:C7:E0:E7
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Wa108z_mLziNwDpeVbZGN4zH4Oc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:b000:591::/48
Signature Algorithm: sha256WithRSAEncryption
b8:0a:b1:08:95:bf:4d:1c:68:cd:4e:2d:7b:89:db:8a:4b:6e:
8a:6b:78:80:fc:89:95:6b:15:c1:ff:f8:ac:6e:c9:fd:39:74:
f9:d5:d1:62:d6:54:7e:51:8d:04:bd:51:8e:b0:2a:80:46:cb:
9e:3c:75:07:71:fb:59:0b:df:46:fb:e2:30:4f:f5:2c:9f:2a:
32:1e:f3:4a:d1:7b:40:d3:8d:f3:e2:88:90:74:b2:62:b2:fd:
e2:5b:1c:e3:4b:f2:f1:8c:fc:72:95:d5:90:d5:6a:67:5d:a0:
89:4b:c8:fd:2f:34:e5:e7:6c:ac:6d:18:ed:e3:f2:db:4d:a9:
c3:93:52:8b:62:4a:2e:21:d1:fc:de:1b:43:f8:fd:b1:ad:17:
99:14:04:f2:8f:ef:e4:88:5d:f4:e4:42:4e:90:2c:81:a5:7b:
db:7d:d2:87:a5:b1:ac:4f:b6:25:d2:46:e3:51:30:d8:c5:dc:
71:22:88:11:a3:3d:e8:7d:13:79:dd:71:5e:8d:88:aa:8f:e4:
eb:fd:a1:0d:dd:ef:e1:36:a9:f3:e3:15:e7:d5:f0:81:63:0a:
7a:d8:a1:a7:b1:13:71:f1:a1:3a:37:9d:85:22:d9:8a:c8:03:
e4:24:32:dd:21:9e:8e:72:19:c1:cc:48:7d:c9:d2:97:03:79:
c0:e9:e8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:26:57 2025 by rpki-client