Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/1SWPmlBmlUqYTZV68R0EmUGD740.roa
File: 1SWPmlBmlUqYTZV68R0EmUGD740.roa (raw, json)
Hash identifier: GbhhTav3k/G1XLLs7sTYE4yShjhBmcIPEC08sSue2Y8=
Subject key identifier: D5:25:8F:9A:50:66:95:4A:98:4D:95:7A:F1:1D:04:99:41:83:EF:8D
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 14CE
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/1SWPmlBmlUqYTZV68R0EmUGD740.roa
Signing time: Mon 10 Feb 2025 14:35:17 +0000
ROA not before: Mon 10 Feb 2025 14:35:17 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 142005
IP address blocks: 210.242.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 23:44:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5326 (0x14ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:35:17 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D5258F9A5066954A984D957AF11D04994183EF8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:59:e8:e7:5f:89:a1:3d:cc:bf:ce:3a:f0:92:
3d:d8:ac:30:68:7f:2e:b8:1d:0e:5d:09:74:f6:7f:
52:c5:ed:d0:89:77:22:f2:05:12:9a:98:ad:fa:3d:
96:49:56:d8:e1:61:a2:fa:1c:0c:4c:f3:24:6d:aa:
7b:3b:91:e5:fc:56:8f:64:06:60:ac:fc:c9:41:7b:
1b:4b:c0:d7:14:1a:d2:8c:c2:be:2e:49:1e:1a:ec:
dc:2e:2e:14:84:35:a9:0c:41:e8:7f:c4:37:99:28:
ba:e6:dd:96:cd:de:dc:cf:3c:6a:76:82:73:f5:38:
6b:6d:69:28:08:69:b1:bf:7c:6b:bd:d3:42:e4:ea:
23:10:f1:fd:33:11:e4:77:97:42:14:37:be:76:19:
82:35:70:65:ee:88:19:f7:30:42:b1:5f:7c:7e:0b:
0d:d7:ff:d2:5f:00:c4:91:63:fa:08:b0:6d:e4:fa:
3c:64:47:0b:42:df:16:e8:1e:3f:0c:50:c1:d0:ea:
b9:57:a3:d3:7f:91:d1:de:06:df:0f:4c:18:53:d8:
1e:d0:f1:35:1a:0a:15:df:25:6a:aa:41:f7:db:14:
30:c4:34:05:ef:cd:8e:bd:14:8e:be:13:5e:60:6a:
7f:f0:52:ed:4a:7a:24:15:fb:4a:7b:dd:a2:2f:e4:
9c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:25:8F:9A:50:66:95:4A:98:4D:95:7A:F1:1D:04:99:41:83:EF:8D
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/1SWPmlBmlUqYTZV68R0EmUGD740.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.242.83.0/24
Signature Algorithm: sha256WithRSAEncryption
18:3a:8a:1d:af:65:38:5a:78:60:56:77:25:87:eb:b3:60:de:
ed:5b:63:70:ac:8d:f7:ed:6c:0f:19:6a:41:82:7c:c5:6d:b5:
f9:2e:3a:b4:8a:0e:4e:eb:03:ce:80:2c:1a:d9:d2:c9:49:67:
a6:ee:6b:10:d6:06:51:4a:02:22:a1:11:2c:bb:4c:22:6d:8b:
24:c6:cb:40:ff:1b:e6:d3:a8:58:19:e0:7c:9a:ee:f5:d6:17:
80:86:1b:7a:f8:5f:97:71:7c:c0:dd:db:5e:2d:b5:8b:81:c3:
87:b8:30:ec:64:ab:41:71:30:0e:ad:ae:90:7b:95:a6:2b:59:
bb:85:e0:33:7a:ce:3e:a7:39:e8:3a:f4:9b:e5:1e:f2:01:99:
ab:54:50:52:48:8f:e0:88:cc:0b:28:82:18:63:90:e0:8b:1c:
77:d7:8a:2a:15:65:d9:24:ad:8b:58:12:ea:91:12:4a:60:50:
0d:c5:a2:8f:3a:13:0f:92:05:75:34:18:52:c7:26:ee:d6:e7:
51:f6:d0:a6:0b:7e:05:b6:4a:97:22:ae:b6:69:a7:fe:a2:bf:
fd:e0:a0:93:87:1a:ac:12:da:3e:4c:ad:b3:d2:13:20:aa:03:
0b:ed:89:7f:14:4f:92:e4:31:0a:6b:9a:74:3b:c6:b1:14:c7:
8a:97:41:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:28:48 2025 by rpki-client