Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/XztEM4qgD8HS7TgT-MOc1Sf4rNw.roa
File: XztEM4qgD8HS7TgT-MOc1Sf4rNw.roa (raw, json)
Hash identifier: oYzdukhjgNRUkGkG3FzS3vhfoYwMev4PVLgyrDaK10w=
Subject key identifier: 5F:3B:44:33:8A:A0:0F:C1:D2:ED:38:13:F8:C3:9C:D5:27:F8:AC:DC
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 171E
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/XztEM4qgD8HS7TgT-MOc1Sf4rNw.roa
Signing time: Wed 12 Feb 2025 01:36:25 +0000
ROA not before: Wed 12 Feb 2025 01:36:25 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 125.224.0.0/13 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Aug 2025 09:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5918 (0x171e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 12 01:36:25 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5F3B44338AA00FC1D2ED3813F8C39CD527F8ACDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:09:6b:0b:7d:36:22:b7:f2:64:e7:c5:b5:08:
49:79:16:91:95:a9:09:da:ba:53:8b:bb:2f:8a:4a:
db:41:7c:ca:65:23:83:0f:d5:f6:47:17:2e:a8:c7:
57:87:82:2d:9c:6a:73:22:55:f4:4a:3f:eb:04:35:
0e:4e:f7:c9:00:27:b1:71:cf:00:44:4f:e8:34:a8:
16:21:b1:76:3f:47:89:8a:b7:f7:3d:e0:c1:34:d8:
24:a5:e6:82:05:aa:83:8e:4b:f8:51:5c:4e:7b:7f:
f1:e8:29:da:86:03:4b:9e:65:e2:c4:e2:aa:8e:f2:
8d:67:f4:3b:91:72:77:ea:b8:57:f0:1a:2e:92:37:
a3:dc:37:02:e4:af:3d:60:c2:70:9b:9f:66:23:35:
49:88:06:d8:ab:ec:30:a7:9e:7e:d8:11:93:8d:41:
54:c1:23:1f:83:24:d4:0e:97:58:54:2f:15:16:fe:
86:5d:c2:af:8d:66:c1:1e:fb:b2:a0:ea:2c:68:bb:
01:e8:fb:26:fa:3c:ee:09:44:a2:5d:4b:cf:0f:ee:
0a:96:39:69:0f:1c:16:4e:7b:2a:69:b3:4b:6c:2d:
68:0d:d3:44:2c:d0:9d:1a:f4:10:e4:95:99:1f:18:
e4:51:fc:5b:c8:71:5a:33:0f:66:a7:e5:c3:b4:c1:
a5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:3B:44:33:8A:A0:0F:C1:D2:ED:38:13:F8:C3:9C:D5:27:F8:AC:DC
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/XztEM4qgD8HS7TgT-MOc1Sf4rNw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.224.0.0/13
Signature Algorithm: sha256WithRSAEncryption
74:5a:ae:33:3d:3e:9a:f5:2b:7b:b0:99:a5:6a:82:4a:f4:ff:
ff:46:43:e2:32:67:13:4c:d4:f1:04:4e:92:ab:9b:69:92:bb:
cb:04:47:d4:6f:68:77:67:2e:57:fe:dd:b1:ac:f8:d0:a0:a6:
bd:89:17:36:01:2f:b7:be:1d:bf:bb:cd:62:d6:8c:59:4d:11:
cf:e6:75:ff:0e:bc:9f:fd:b2:64:b8:95:ab:97:4b:1b:87:2d:
57:eb:90:6e:c3:03:c9:aa:74:81:91:e4:e0:21:02:10:c9:ba:
3f:07:82:c3:fb:92:90:95:a9:52:e4:dc:cd:fb:a8:6f:bc:f2:
a3:5a:b4:ca:75:0e:72:6c:ff:a8:e1:38:6a:04:a3:06:5b:3f:
63:5c:b4:ab:37:e0:7c:da:17:35:c2:35:84:db:d1:5a:aa:d3:
1c:42:c1:d8:3e:cb:c3:62:e6:bf:0d:58:63:87:14:cb:16:1e:
5b:2e:f6:81:bc:93:c3:a8:ea:f8:a9:cb:45:0e:6b:80:ea:47:
36:f6:b4:5f:96:7f:d9:b1:23:4d:7f:24:d3:d0:ec:fb:20:33:
c1:77:fd:17:4b:ba:76:48:83:85:42:bb:a7:0c:bb:43:a3:ba:
85:68:96:de:75:dc:79:ae:e5:9d:61:a9:40:6a:53:c1:08:07:
42:97:30:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:48:24 2025 by rpki-client