Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/4p8Xoc_rXIrVo3A8_kEFkHjp5hc.roa
File: 4p8Xoc_rXIrVo3A8_kEFkHjp5hc.roa (raw, json)
Hash identifier: wiTT5l5yWfDvIAKq4D+jK5HkyBLiuHUsx1fvRHShwbQ=
Subject key identifier: E2:9F:17:A1:CF:EB:5C:8A:D5:A3:70:3C:FE:41:05:90:78:E9:E6:17
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 11B8
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/4p8Xoc_rXIrVo3A8_kEFkHjp5hc.roa
Signing time: Mon 26 Aug 2024 05:17:51 +0000
ROA not before: Mon 26 Aug 2024 05:17:51 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 203.74.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 20:35:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4536 (0x11b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Aug 26 05:17:51 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E29F17A1CFEB5C8AD5A3703CFE41059078E9E617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dd:a4:44:dd:96:78:63:24:c4:b4:2a:ba:51:
69:6d:ac:e8:d4:12:3f:17:71:2d:1c:b1:29:c6:01:
d5:2a:87:ac:4e:ab:c0:22:96:36:33:de:de:22:2c:
f4:b5:7f:29:c7:ae:3b:00:e5:56:e7:53:f3:f7:01:
39:b2:97:e9:df:3f:47:9d:ac:c8:b5:d4:eb:da:49:
0d:7c:4b:f5:e9:a0:35:10:48:e8:d2:d9:6a:f1:51:
04:10:11:e7:91:e2:8e:6a:85:37:c7:34:6c:39:d1:
c5:dd:7e:b7:05:6e:40:a2:38:d6:ed:a3:5f:8d:2b:
a2:d9:c9:a6:24:54:57:d1:89:d5:a6:f1:85:41:67:
02:1c:35:93:84:e4:dc:be:2b:d7:55:d6:79:d6:39:
73:8f:18:b4:a3:d0:d9:5f:cd:46:32:11:d4:45:e8:
23:f3:6f:f5:8c:8c:79:7d:dc:4b:c5:37:90:17:19:
76:36:98:59:0f:65:a8:26:40:35:04:5e:30:8e:e8:
e4:07:c5:03:6c:fd:75:2b:d3:f4:db:24:f8:0d:5c:
cd:99:ff:62:f5:fd:25:cc:f1:4c:07:9e:65:30:f4:
e0:03:f4:bb:e4:c6:8b:8c:5d:68:b9:72:4a:e3:4b:
cd:55:8c:0a:84:12:0d:b1:26:db:a1:91:dc:12:43:
08:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:9F:17:A1:CF:EB:5C:8A:D5:A3:70:3C:FE:41:05:90:78:E9:E6:17
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/4p8Xoc_rXIrVo3A8_kEFkHjp5hc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.74.0.0/16
Signature Algorithm: sha256WithRSAEncryption
46:f5:5b:43:88:a9:4c:0f:61:ae:77:2d:52:0a:ee:bb:85:a7:
1e:da:58:e0:76:d4:26:aa:f3:87:97:d6:36:74:cc:48:37:27:
4a:3b:99:e0:06:99:d6:45:ee:ae:40:4c:39:a8:81:01:60:8e:
4f:05:de:f8:22:a2:d5:7f:f2:67:9e:b5:f5:9d:42:57:2e:b4:
d4:69:89:c2:a1:c0:f3:9c:64:d8:18:2f:0e:95:3a:c0:7d:ab:
a7:5d:4d:a1:96:b8:fb:d1:12:0b:60:ae:85:fb:68:a7:5b:fa:
b3:a7:9d:09:de:6e:02:c0:dc:73:8e:ae:96:be:4e:67:a9:81:
c8:9b:94:44:b6:66:67:72:15:b2:9a:be:58:25:b7:2e:d9:90:
89:04:57:b7:9d:74:d2:09:6e:d4:c0:0e:4f:9f:ff:cd:ee:d8:
eb:45:71:e8:08:a2:ab:24:a3:7e:ad:3d:3b:07:14:49:b3:71:
8e:1a:59:43:eb:37:c1:a1:96:bd:f9:ea:df:9c:65:4d:50:79:
53:29:85:a9:43:a9:7b:9a:e0:d9:65:58:64:d5:cc:36:15:ea:
5b:e8:e6:ad:23:2d:b7:58:ac:64:5a:a6:63:53:42:d6:d4:49:
87:56:27:65:65:c2:d1:e9:89:1d:df:53:68:8a:2d:fa:38:e8:
81:2e:d3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:44:49 2025 by rpki-client