Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/n2QQy1K28nTwrMtS30fY02QjCyk.roa
File: n2QQy1K28nTwrMtS30fY02QjCyk.roa (raw, json)
Hash identifier: NW+8TmZ4R0xTrRypHxU/2yEo3USCnH60px2Xip9vxxI=
Subject key identifier: 9F:64:10:CB:52:B6:F2:74:F0:AC:CB:52:DF:47:D8:D3:64:23:0B:29
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 171B
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/n2QQy1K28nTwrMtS30fY02QjCyk.roa
Signing time: Wed 12 Feb 2025 01:36:25 +0000
ROA not before: Wed 12 Feb 2025 01:36:25 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 203.69.47.224/27 maxlen: 27
Validation: Failed, certificate revoked on Fri 22 Aug 2025 09:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5915 (0x171b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 12 01:36:25 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=9F6410CB52B6F274F0ACCB52DF47D8D364230B29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a6:9a:ba:f0:9c:05:f5:63:bf:44:da:13:d2:
15:05:15:b0:73:b0:a2:95:1c:67:54:57:41:30:2b:
2e:bf:71:c4:7d:5f:9d:a3:fd:53:e7:6b:b3:c3:03:
8b:d7:cc:95:86:47:6a:15:0d:6c:57:20:8d:be:dd:
d0:8c:f3:8d:9b:11:8d:b5:bf:45:69:37:d7:06:b6:
06:ec:61:b1:62:60:7d:4a:e4:75:59:ef:f5:51:b6:
15:c8:b6:9e:05:5e:a9:65:86:ea:10:c2:4a:cf:05:
1a:87:e4:ac:5c:c6:59:22:89:85:90:6c:40:9c:61:
c3:33:af:b0:1e:12:87:0f:6b:5d:d9:c4:c0:0a:da:
38:22:d3:37:b7:cb:66:62:5b:45:5a:4e:75:7b:9a:
9e:c3:1a:33:db:49:34:a9:b9:81:ea:23:d9:1b:53:
0e:ef:73:fd:fd:9b:60:bc:d7:ef:7b:8d:2b:12:b2:
0a:c1:63:6a:68:73:31:7f:54:b4:ec:93:17:f6:67:
11:55:e4:29:66:4f:15:b5:7d:87:c6:5f:40:8b:b1:
53:82:bf:41:97:47:18:71:f7:12:c3:6f:9f:16:1b:
f7:77:21:f5:70:8a:19:c0:49:2d:48:74:0e:5e:e1:
27:fd:32:c7:0a:6e:5d:5a:47:5f:13:a0:ff:68:23:
e3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:64:10:CB:52:B6:F2:74:F0:AC:CB:52:DF:47:D8:D3:64:23:0B:29
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/n2QQy1K28nTwrMtS30fY02QjCyk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.69.47.224/27
Signature Algorithm: sha256WithRSAEncryption
18:8b:b7:89:7d:6c:5d:50:30:7f:a5:db:1b:35:d0:6e:34:11:
3e:2d:a4:1a:5e:77:41:65:7f:41:d0:7d:a9:37:b8:49:7c:51:
d7:76:1c:91:34:f9:3d:bb:f7:c1:25:3d:4c:75:c8:a4:01:17:
cf:92:1e:14:c6:37:af:6b:50:e9:f0:f2:39:0d:e9:cc:76:0b:
fa:3f:b8:52:e4:96:d3:88:c7:b4:99:f8:14:2d:72:71:00:08:
23:2b:94:ec:9c:87:55:f8:39:f8:2d:49:02:28:22:bb:cf:c6:
5f:3c:74:52:39:9c:81:38:89:90:38:29:de:b2:e3:64:83:52:
08:d1:25:c9:30:44:10:56:97:84:51:4e:3a:32:77:cc:da:96:
96:26:b8:07:2b:21:e2:c4:75:3c:af:06:53:ef:34:c7:f2:94:
63:8e:b5:d5:51:18:be:f5:9f:ac:5e:50:35:df:70:9c:0d:4d:
d0:e1:a3:3f:8f:39:c9:05:31:78:84:ef:4a:a2:55:f2:f8:cf:
5b:ce:88:22:6b:31:bd:3b:a8:bf:ad:bd:de:a8:60:03:c3:54:
ad:eb:0b:ce:93:b1:39:e2:e6:76:d8:cd:62:19:11:5d:6a:de:
d6:b0:80:ac:79:8c:c2:7f:f1:4c:ef:97:c4:93:ed:ef:60:0c:
4b:5a:3a:6b
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICFxswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw
MTM2MjVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlGNjQxMENCNTJCNkYy
NzRGMEFDQ0I1MkRGNDdEOEQzNjQyMzBCMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6ppq68JwF9WO/RNoT0hUFFbBzsKKVHGdUV0EwKy6/ccR9X52j
/VPna7PDA4vXzJWGR2oVDWxXII2+3dCM842bEY21v0VpN9cGtgbsYbFiYH1K5HVZ
7/VRthXItp4FXqllhuoQwkrPBRqH5KxcxlkiiYWQbECcYcMzr7AeEocPa13ZxMAK
2jgi0ze3y2ZiW0VaTnV7mp7DGjPbSTSpuYHqI9kbUw7vc/39m2C81+97jSsSsgrB
Y2poczF/VLTskxf2ZxFV5ClmTxW1fYfGX0CLsVOCv0GXRxhx9xLDb58WG/d3IfVw
ihnASS1IdA5e4Sf9MscKbl1aR18ToP9oI+OXAgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQUn2QQy1K28nTwrMtS30fY02QjCykwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9uMlFReTFLMjhuVHdyTXRTMzBm
WTAyUWpDeWsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFy0Uv
4DANBgkqhkiG9w0BAQsFAAOCAQEAGIu3iX1sXVAwf6XbGzXQbjQRPi2kGl53QWV/
QdB9qTe4SXxR13YckTT5Pbv3wSU9THXIpAEXz5IeFMY3r2tQ6fDyOQ3pzHYL+j+4
UuSW04jHtJn4FC1ycQAIIyuU7JyHVfg5+C1JAigiu8/GXzx0UjmcgTiJkDgp3rLj
ZINSCNElyTBEEFaXhFFOOjJ3zNqWlia4Bysh4sR1PK8GU+80x/KUY4611VEYvvWf
rF5QNd9wnA1N0OGjP485yQUxeITvSqJV8vjPW86IImsxvTuov6293qhgA8NUresL
zpOxOeLmdtjNYhkRXWre1rCArHmMwn/xTO+XxJPt72AMS1o6aw==
-----END CERTIFICATE-----
Generated at Sun Aug 24 02:40:25 2025 by rpki-client