Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/nQCtTLHNLnJYUkIFYsGTlQPcwFI.roa
File: nQCtTLHNLnJYUkIFYsGTlQPcwFI.roa (raw, json)
Hash identifier: ivu7RKzF1hAL/Uow7w+IZhZhT7GDUb83xjgES8trLWU=
Subject key identifier: 9D:00:AD:4C:B1:CD:2E:72:58:52:42:05:62:C1:93:95:03:DC:C0:52
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 17AE
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/nQCtTLHNLnJYUkIFYsGTlQPcwFI.roa
Signing time: Wed 12 Feb 2025 01:36:57 +0000
ROA not before: Wed 12 Feb 2025 01:36:57 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 210.59.138.128/27 maxlen: 27
Validation: Failed, certificate revoked on Fri 22 Aug 2025 09:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6062 (0x17ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 12 01:36:57 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=9D00AD4CB1CD2E725852420562C1939503DCC052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:13:1b:a8:4c:fb:3c:ac:07:7c:5f:76:c7:5c:
41:a5:04:00:43:9c:a8:0b:c7:61:c2:04:f9:23:12:
33:14:df:b7:c4:1f:e8:16:b8:99:b5:56:4a:f1:67:
7d:68:15:b4:ef:a2:a3:4b:b5:3a:1a:fc:e4:1c:58:
3c:09:b8:66:8c:fd:d4:d8:b3:b5:d1:c7:46:0e:09:
84:50:f7:e5:4a:a4:80:18:fc:53:89:9c:b0:e4:e6:
4f:07:0b:93:02:5b:5f:2b:2c:67:01:07:2a:11:17:
ec:11:b5:bb:62:7d:f9:7d:be:91:de:93:57:c4:e5:
ff:d8:cf:f9:30:47:06:f6:18:dc:69:84:2d:3c:c3:
29:31:bc:68:45:f4:b5:a8:aa:27:43:de:cd:1b:18:
2f:57:1f:74:83:61:9b:40:5b:37:0f:b2:5b:40:4b:
42:f2:5e:d1:9c:8f:3a:f6:dd:0c:26:0c:c6:9e:38:
a9:99:dd:5a:cf:93:56:81:5e:bf:f2:31:3d:80:a7:
c6:4a:f3:6f:07:2d:e8:10:cc:5b:63:74:14:10:74:
87:94:fd:27:a5:08:c3:ea:71:ea:44:f2:f0:b5:c2:
38:6d:b9:52:8e:94:bd:c4:30:10:d8:57:e6:fa:f4:
b2:f5:fb:44:d7:a7:df:e4:a5:9e:fb:0a:70:dc:eb:
ed:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:00:AD:4C:B1:CD:2E:72:58:52:42:05:62:C1:93:95:03:DC:C0:52
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/nQCtTLHNLnJYUkIFYsGTlQPcwFI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.59.138.128/27
Signature Algorithm: sha256WithRSAEncryption
6a:96:39:d6:7e:d0:8c:2a:42:c6:60:48:22:0d:1a:a7:f4:8c:
d4:a2:b5:32:d8:3b:66:47:12:7a:de:d8:37:c2:1a:ce:39:c5:
05:3e:e0:2c:fa:a9:1d:69:5b:5f:d8:86:08:9d:48:ba:fb:70:
c1:60:25:e6:24:a7:ac:f0:64:77:79:66:b8:e0:5b:95:9a:df:
fb:c6:90:91:aa:00:2b:89:c6:a1:bf:ff:cd:73:cc:a6:57:c4:
d2:e9:5b:7e:75:ee:f7:ce:08:b9:37:05:1f:cb:69:75:9b:82:
79:f6:1f:01:da:b3:1a:15:7d:da:99:3c:76:84:41:6b:a8:b0:
85:c3:c2:fd:c0:cc:72:7b:68:84:40:62:7e:8f:37:81:35:57:
1c:d9:9b:ed:d3:a8:86:b6:2b:69:20:b0:77:2b:12:e8:55:b7:
c7:8f:12:67:29:3f:eb:7b:c4:ab:f7:c2:49:f1:9f:d4:2f:59:
d9:12:50:54:79:22:8a:e9:bd:47:3e:3f:b6:90:d0:f0:3a:49:
41:de:6c:3c:3d:a2:1c:19:f7:e3:18:3b:7a:aa:df:e2:b9:5d:
fc:91:8f:27:2b:13:a0:20:b0:4b:57:2b:c5:8b:fc:ac:74:43:
83:ec:65:2f:87:b7:56:93:61:1e:8b:18:60:7f:84:2e:b0:97:
7d:47:c3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:44:22 2025 by rpki-client