Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/zri1gxOHitGv4cB639qQ3r4YRP4.roa
File: zri1gxOHitGv4cB639qQ3r4YRP4.roa (raw, json)
Hash identifier: JXBNsW6+JFeR/wV8jng9FRdb1OcDGhGOGXtz5Y6Ho80=
Subject key identifier: CE:B8:B5:83:13:87:8A:D1:AF:E1:C0:7A:DF:DA:90:DE:BE:18:44:FE
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 172E
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/zri1gxOHitGv4cB639qQ3r4YRP4.roa
Signing time: Wed 12 Feb 2025 01:36:28 +0000
ROA not before: Wed 12 Feb 2025 01:36:28 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 202.39.64.0/19 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Aug 2025 09:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5934 (0x172e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 12 01:36:28 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=CEB8B58313878AD1AFE1C07ADFDA90DEBE1844FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:37:c6:bd:77:0a:6d:2d:28:9c:6e:b6:2e:6f:
b2:f6:15:60:f4:0a:40:6e:85:14:fe:c8:78:36:a5:
90:10:35:56:a4:a9:42:98:d7:63:09:4e:75:ce:a1:
f7:1b:e0:bc:c9:00:5c:70:ba:cd:e6:64:c3:fb:0d:
fb:07:4d:49:83:cf:3f:ef:a2:44:50:cb:23:9c:90:
f2:fe:ae:de:7a:b5:53:4e:51:45:f7:37:7b:e2:e7:
fb:ea:8b:03:8e:7e:8c:43:8f:d3:f7:96:1a:9e:34:
a6:9d:48:18:97:54:f3:0b:6a:5d:3a:7e:60:56:0b:
c5:25:6d:80:54:0c:2b:c4:94:5a:ea:37:c5:63:a2:
cb:b5:89:7f:55:a4:62:a4:05:ce:3d:2e:a7:92:39:
d6:d6:33:cd:63:b9:1c:d5:8e:c2:1f:98:8e:29:ce:
80:40:89:72:1b:e4:9b:68:59:e2:77:02:45:be:ee:
29:fb:dc:f9:1a:5f:4a:b9:f1:cb:2b:6d:75:2b:74:
e6:eb:6c:8f:aa:61:4e:11:1d:17:11:c0:ad:ca:64:
6a:d9:ff:8a:72:95:98:0c:7e:6b:79:43:0e:6c:a2:
58:94:1d:b0:12:f6:df:3f:aa:d5:fd:67:0a:a3:0f:
c1:29:89:d0:0f:0b:28:c5:8e:50:dd:82:d7:a7:3a:
ad:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B8:B5:83:13:87:8A:D1:AF:E1:C0:7A:DF:DA:90:DE:BE:18:44:FE
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/zri1gxOHitGv4cB639qQ3r4YRP4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.39.64.0/19
Signature Algorithm: sha256WithRSAEncryption
57:e4:a5:fe:55:5f:98:61:9f:67:da:a6:fa:ef:04:05:30:81:
66:95:4a:b0:a0:ff:2b:97:f0:ec:8b:36:3a:06:45:d9:09:29:
3c:54:7b:f0:d9:c3:87:5d:d8:7c:b6:7e:43:04:cb:0d:05:65:
7e:20:5a:00:ed:7a:51:32:b3:bd:1e:97:d4:36:08:73:cf:55:
3d:b3:4b:4c:a7:61:61:25:2a:ce:0f:d0:24:bc:32:7f:f4:8a:
f3:9d:8f:4f:22:4c:fd:ac:9f:7d:a0:f3:17:04:63:00:46:2c:
f3:f9:ce:36:e8:62:6b:70:2c:2c:b1:fb:ce:56:97:ca:19:05:
9b:e7:19:42:65:55:e0:ac:d4:0f:3d:2c:46:d7:41:86:4a:c6:
f4:b1:25:8d:fc:e2:40:bc:5b:0e:f2:8d:aa:7b:2b:00:be:9b:
a9:57:1c:e1:2e:24:6b:0c:71:0f:3c:79:64:73:a0:82:a5:be:
b9:11:38:b6:42:1f:88:1f:60:08:71:37:dc:47:68:8d:29:c7:
10:cf:09:d9:51:b9:91:99:fe:59:dc:55:78:cf:e7:19:9c:4c:
ae:dd:7b:18:da:c2:12:5b:61:1c:19:d6:66:5b:fd:9a:cd:2b:
89:62:6d:85:d0:0f:4a:f2:5a:44:e6:01:5b:e4:4a:df:1d:3f:
4f:d9:73:8e
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICFy4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw
MTM2MjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENFQjhCNTgzMTM4NzhB
RDFBRkUxQzA3QURGREE5MERFQkUxODQ0RkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/N8a9dwptLSicbrYub7L2FWD0CkBuhRT+yHg2pZAQNVakqUKY
12MJTnXOofcb4LzJAFxwus3mZMP7DfsHTUmDzz/vokRQyyOckPL+rt56tVNOUUX3
N3vi5/vqiwOOfoxDj9P3lhqeNKadSBiXVPMLal06fmBWC8UlbYBUDCvElFrqN8Vj
osu1iX9VpGKkBc49LqeSOdbWM81juRzVjsIfmI4pzoBAiXIb5JtoWeJ3AkW+7in7
3PkaX0q58csrbXUrdObrbI+qYU4RHRcRwK3KZGrZ/4pylZgMfmt5Qw5soliUHbAS
9t8/qtX9ZwqjD8EpidAPCyjFjlDdgtenOq1vAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUzri1gxOHitGv4cB639qQ3r4YRP4wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC96cmkxZ3hPSGl0R3Y0Y0I2Mzlx
UTNyNFlSUDQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFyidA
MA0GCSqGSIb3DQEBCwUAA4IBAQBX5KX+VV+YYZ9n2qb67wQFMIFmlUqwoP8rl/Ds
izY6BkXZCSk8VHvw2cOHXdh8tn5DBMsNBWV+IFoA7XpRMrO9HpfUNghzz1U9s0tM
p2FhJSrOD9AkvDJ/9IrznY9PIkz9rJ99oPMXBGMARizz+c426GJrcCwssfvOVpfK
GQWb5xlCZVXgrNQPPSxG10GGSsb0sSWN/OJAvFsO8o2qeysAvpupVxzhLiRrDHEP
PHlkc6CCpb65ETi2Qh+IH2AIcTfcR2iNKccQzwnZUbmRmf5Z3FV4z+cZnEyu3XsY
2sISW2EcGdZmW/2azSuJYm2F0A9K8lpE5gFb5ErfHT9P2XOO
-----END CERTIFICATE-----
Generated at Sun Aug 24 02:41:55 2025 by rpki-client