Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/cIN505sIwS6Qz_ZfZFZcwrkHdV4.roa
File: cIN505sIwS6Qz_ZfZFZcwrkHdV4.roa (raw, json)
Hash identifier: LXfV+O8CnaA5Bc+UON/kzjjek79oayPNCW3qy4qs4lY=
Subject key identifier: 70:83:79:D3:9B:08:C1:2E:90:CF:F6:5F:64:56:5C:C2:B9:07:75:5E
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 17C2
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/cIN505sIwS6Qz_ZfZFZcwrkHdV4.roa
Signing time: Wed 12 Feb 2025 01:37:02 +0000
ROA not before: Wed 12 Feb 2025 01:37:02 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 10126
IP address blocks: 203.160.240.0/20 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Aug 2025 09:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6082 (0x17c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 12 01:37:02 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=708379D39B08C12E90CFF65F64565CC2B907755E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ad:95:1f:be:ba:3a:8b:7a:c7:86:c6:0c:b6:
31:6e:73:aa:b0:66:a4:6f:f7:67:77:9e:13:7a:c6:
01:11:f9:16:2b:53:a2:d1:06:75:0f:62:e3:21:f3:
26:25:41:4a:18:35:74:c7:90:0b:d2:59:22:b6:f5:
14:a7:10:00:da:23:95:44:5f:3b:ba:f3:72:bb:71:
66:84:d7:1d:a3:80:71:57:98:1f:a8:2f:42:7a:48:
cd:1f:ad:79:4e:4e:b0:79:4d:b4:60:44:97:31:22:
3a:27:46:6c:cc:27:18:44:0f:f9:c1:33:45:74:44:
85:26:4a:c2:d6:e7:52:2e:9b:71:da:ab:bc:80:5b:
30:a2:50:9c:e4:19:e2:4c:b6:37:27:8b:1a:f4:07:
98:62:93:8f:cd:cc:19:27:72:ef:c5:b0:b1:8a:dd:
c9:af:41:72:fb:1d:7f:60:6b:7e:5c:93:41:39:5d:
eb:c4:7e:8c:43:bb:62:0c:6a:da:0e:31:33:dc:43:
3f:1c:3a:a6:b4:a2:08:30:18:9b:d6:f0:52:a5:04:
40:0a:34:68:1c:9a:c6:25:6a:4f:06:b6:d5:bc:c6:
16:b6:4f:03:ee:45:a6:73:ed:b9:37:ce:6f:95:6c:
27:6f:5c:25:18:d0:ee:f1:6b:b2:57:a2:c1:41:a1:
55:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:83:79:D3:9B:08:C1:2E:90:CF:F6:5F:64:56:5C:C2:B9:07:75:5E
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/cIN505sIwS6Qz_ZfZFZcwrkHdV4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.160.240.0/20
Signature Algorithm: sha256WithRSAEncryption
b6:58:56:9f:4f:bc:30:01:8b:b9:2d:58:99:50:0e:cf:0d:e8:
05:31:c9:16:bc:81:e7:f4:19:2d:59:40:e3:99:dd:d1:2a:43:
f4:d0:ad:c2:82:34:b9:8b:20:be:cc:b1:f4:23:1c:9e:0f:d7:
27:06:b2:fd:2a:c6:22:a0:67:d3:27:78:86:ac:24:90:20:c5:
66:0c:7c:52:ba:c4:55:2c:28:15:c4:5b:9c:cb:de:23:70:ee:
66:60:97:82:8d:06:dc:3a:8f:c6:5b:c3:b7:10:8d:f6:62:b4:
92:d1:fc:3b:08:b0:9b:d5:ba:be:1a:db:76:6d:d9:2a:23:f9:
52:fd:5e:5b:41:13:77:58:f6:16:d7:e5:c3:b2:e7:2b:cf:ed:
78:2f:03:1e:4a:63:c9:88:d7:c3:6c:70:30:df:26:8c:b4:04:
5a:43:81:29:4d:b6:90:01:d7:c0:6f:48:80:78:ae:3a:40:ef:
de:28:c9:69:8c:6d:38:ed:a6:f1:02:f6:ae:22:e6:c7:12:5c:
28:c6:b2:5b:1d:ef:f9:2d:6d:99:a6:1b:f1:5a:f2:f8:6b:1e:
82:8e:ca:52:df:e0:fc:c3:92:47:4b:07:8a:5d:54:69:db:da:
5d:0e:c8:45:e0:60:d7:d0:61:49:a1:40:a1:8b:ca:d8:7f:c8:
f6:03:9c:45
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICF8IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw
MTM3MDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDcwODM3OUQzOUIwOEMx
MkU5MENGRjY1RjY0NTY1Q0MyQjkwNzc1NUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDdrZUfvro6i3rHhsYMtjFuc6qwZqRv92d3nhN6xgER+RYrU6LR
BnUPYuMh8yYlQUoYNXTHkAvSWSK29RSnEADaI5VEXzu683K7cWaE1x2jgHFXmB+o
L0J6SM0frXlOTrB5TbRgRJcxIjonRmzMJxhED/nBM0V0RIUmSsLW51Ium3Haq7yA
WzCiUJzkGeJMtjcnixr0B5hik4/NzBkncu/FsLGK3cmvQXL7HX9ga35ck0E5XevE
foxDu2IMatoOMTPcQz8cOqa0oggwGJvW8FKlBEAKNGgcmsYlak8GttW8xha2TwPu
RaZz7bk3zm+VbCdvXCUY0O7xa7JXosFBoVVlAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUcIN505sIwS6Qz/ZfZFZcwrkHdV4wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9jSU41MDVzSXdTNlF6X1pmWkZa
Y3dya0hkVjQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEy6Dw
MA0GCSqGSIb3DQEBCwUAA4IBAQC2WFafT7wwAYu5LViZUA7PDegFMckWvIHn9Bkt
WUDjmd3RKkP00K3CgjS5iyC+zLH0IxyeD9cnBrL9KsYioGfTJ3iGrCSQIMVmDHxS
usRVLCgVxFucy94jcO5mYJeCjQbcOo/GW8O3EI32YrSS0fw7CLCb1bq+Gtt2bdkq
I/lS/V5bQRN3WPYW1+XDsucrz+14LwMeSmPJiNfDbHAw3yaMtARaQ4EpTbaQAdfA
b0iAeK46QO/eKMlpjG047abxAvauIubHElwoxrJbHe/5LW2ZphvxWvL4ax6CjspS
3+D8w5JHSweKXVRp29pdDshF4GDX0GFJoUChi8rYf8j2A5xF
-----END CERTIFICATE-----
Generated at Sun Aug 24 02:40:46 2025 by rpki-client