Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/-zqYD6UFgL3ERUmG_-fe49xgwrU.roa
File: -zqYD6UFgL3ERUmG_-fe49xgwrU.roa (raw, json)
Hash identifier: GWqcmqBbWZPvdGAAJR3Wjbx5kyZLIfsELAfGjuU/3uM=
Subject key identifier: FB:3A:98:0F:A5:05:80:BD:C4:45:49:86:FF:E7:DE:E3:DC:60:C2:B5
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 11BB
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/-zqYD6UFgL3ERUmG_-fe49xgwrU.roa
Signing time: Mon 26 Aug 2024 05:17:53 +0000
ROA not before: Mon 26 Aug 2024 05:17:53 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 20940
IP address blocks: 203.74.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 20:35:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4539 (0x11bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Aug 26 05:17:53 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=FB3A980FA50580BDC4454986FFE7DEE3DC60C2B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:82:0c:af:68:47:a7:93:81:2d:dc:3f:bd:20:
84:4d:11:f6:99:86:a7:1c:a3:1f:16:25:b2:27:e1:
6e:76:ad:e7:78:41:d4:ed:af:88:c8:6b:08:e6:18:
13:fe:e3:21:e1:79:f2:f5:a5:30:c0:d9:a4:2a:7e:
4d:57:ec:34:a8:0e:c9:f1:b3:03:f3:74:f8:6a:eb:
05:82:e6:45:7e:e6:b1:75:4f:23:8d:79:16:02:5c:
93:33:b4:1e:3e:69:ae:26:69:92:ed:04:ab:a0:93:
b3:c4:24:ec:35:75:73:c7:dd:2b:7e:93:86:4f:19:
d3:67:ce:0e:f5:42:f6:28:0c:67:5d:cb:6c:c1:ab:
1d:10:db:af:81:11:ef:2d:62:0b:2c:96:84:e5:af:
60:15:a9:c6:b5:cf:e7:9b:2a:d5:86:49:23:ee:16:
84:68:de:0b:06:9d:26:0b:0c:e1:28:82:ca:ea:48:
3c:ba:8d:2f:f7:e1:f1:2d:79:5c:10:41:55:b3:05:
9a:62:2e:5e:cf:f3:6a:1f:32:a1:6b:c4:2b:4e:2e:
00:28:87:d5:86:16:7c:55:07:e0:01:d1:b0:82:55:
a4:dc:c1:cc:0b:5e:74:72:c3:72:31:e3:cd:97:fe:
98:7f:66:a2:b0:2c:dc:c8:95:24:3a:9e:eb:98:02:
0f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3A:98:0F:A5:05:80:BD:C4:45:49:86:FF:E7:DE:E3:DC:60:C2:B5
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/-zqYD6UFgL3ERUmG_-fe49xgwrU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.74.95.0/24
Signature Algorithm: sha256WithRSAEncryption
08:15:57:11:ad:8b:6f:fd:61:1a:9e:6f:ab:4b:72:9b:8a:c7:
76:6a:19:ef:0e:8e:0e:32:3c:1f:92:34:f0:d8:e0:14:65:6a:
18:32:f5:41:bd:b6:65:33:af:47:a8:f3:f7:9b:b3:54:10:3a:
23:8d:14:65:ef:7e:38:f9:48:4d:df:82:d7:39:d7:0b:b7:4f:
cb:da:3d:12:28:68:d5:17:b3:48:aa:9f:76:c9:34:1a:00:2d:
52:14:e0:50:50:a7:84:07:4d:cb:4c:18:f6:8a:93:8e:d7:a4:
4e:56:b7:8b:7f:53:3d:e4:52:04:04:aa:78:3a:27:55:50:1b:
b0:bb:c5:8b:32:b7:25:07:b7:de:30:09:50:a7:13:52:f5:ca:
a9:ea:0e:16:4a:45:c9:62:fb:fa:d0:73:13:7d:47:e4:18:67:
58:ad:aa:fd:f2:c1:01:fb:82:6a:c9:ee:0b:1c:2f:64:c0:63:
db:19:f4:08:0d:33:6f:a9:72:f1:31:91:22:52:19:b5:7c:ec:
f4:e2:7d:f3:f3:23:fa:ff:0e:a1:9c:9d:45:af:12:dc:8a:a2:
4e:5e:5a:e3:07:2f:87:f4:03:4e:1c:7f:24:bc:5e:72:a3:44:
ce:87:5c:9d:d1:29:72:07:83:c2:4f:c1:09:e8:16:bc:db:83:
18:b8:3b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:44:53 2025 by rpki-client