Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/7ckwTMFC6OlrDp1D8oW8Uafteeg.roa
File: 7ckwTMFC6OlrDp1D8oW8Uafteeg.roa (raw, json)
Hash identifier: oU45bUwX5YG91YIVliqVToW/GM8r0HEJ56H0C+v/6q4=
Subject key identifier: ED:C9:30:4C:C1:42:E8:E9:6B:0E:9D:43:F2:85:BC:51:A7:ED:79:E8
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 11A2
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/7ckwTMFC6OlrDp1D8oW8Uafteeg.roa
Signing time: Mon 26 Aug 2024 05:17:45 +0000
ROA not before: Mon 26 Aug 2024 05:17:45 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 7481
IP address blocks: 210.62.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 20:35:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4514 (0x11a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Aug 26 05:17:45 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=EDC9304CC142E8E96B0E9D43F285BC51A7ED79E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:89:61:08:48:76:74:be:a0:44:16:16:23:3d:
da:a3:a1:f9:3d:0f:95:78:63:25:d9:f7:70:fd:0a:
b0:d1:1d:cd:58:c0:8c:e1:26:56:0b:5a:f3:8e:39:
5b:71:55:9c:3b:2d:e8:44:b0:a1:f2:3e:e9:7c:fe:
d4:e7:28:ee:40:25:56:59:48:77:fe:10:10:2e:72:
13:02:11:89:f4:d3:84:09:69:70:29:cb:a9:da:d2:
88:60:48:ae:54:e5:c8:a1:56:c9:4c:4b:56:4a:b8:
62:68:9c:67:fe:bc:e4:45:30:e6:3d:c7:26:7c:e7:
9f:27:33:77:03:6c:8a:2b:3f:11:cb:79:7c:36:3b:
78:58:89:8c:1b:06:f8:1f:72:1b:e4:12:3f:1a:ff:
62:48:60:b0:df:df:99:a4:c7:3c:16:8b:b7:d3:41:
45:93:fc:33:50:78:23:bc:1a:1b:1d:33:29:3d:e3:
7f:26:4b:52:38:0b:95:52:22:28:f3:a4:20:f6:c4:
d7:b3:99:12:67:c2:c1:cf:4b:07:81:3f:b9:48:06:
49:e2:73:e9:89:4e:44:66:f0:a4:21:0f:4d:13:a2:
70:4e:ea:4d:ef:fe:cc:fd:2b:a8:82:78:3a:f3:26:
e7:3b:89:6a:1f:ad:a1:65:ee:a0:8b:68:05:cd:18:
60:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C9:30:4C:C1:42:E8:E9:6B:0E:9D:43:F2:85:BC:51:A7:ED:79:E8
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/7ckwTMFC6OlrDp1D8oW8Uafteeg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.62.255.0/24
Signature Algorithm: sha256WithRSAEncryption
86:89:a3:d8:99:99:5f:a5:a5:45:ee:21:18:8d:d3:2f:8a:60:
d1:59:e7:e0:85:a0:80:74:19:9f:ba:41:01:de:4f:59:f8:83:
cf:2f:d9:b1:60:ea:51:05:f8:55:c7:9a:c9:15:f2:c4:d4:1a:
bb:75:ed:73:f8:3c:8a:d9:96:c6:cd:f4:8e:db:0a:21:a3:bb:
4e:83:cc:1a:d8:c5:94:37:da:cd:72:40:29:1a:a0:20:8c:e4:
79:45:c9:b6:d3:fa:fb:c2:f0:ca:c9:c2:d7:72:07:4c:e4:b7:
f0:7a:4f:50:07:76:cd:77:87:b7:c7:af:d2:e0:97:f0:18:a2:
f1:79:31:10:47:80:a6:6b:1e:ed:ef:11:35:12:eb:c6:cf:f7:
16:27:27:aa:c8:b7:88:2d:cd:d4:c8:ab:c5:b7:64:c6:2e:ac:
03:fe:fa:04:f0:2f:ff:7c:bb:ac:1c:a2:6d:4a:61:78:38:19:
7c:00:21:0c:f7:9b:73:6b:f2:a4:a8:19:4b:6e:8f:dc:0b:cf:
ac:15:6e:73:f3:72:3e:bf:64:41:85:b5:51:9a:e8:c6:c0:83:
a8:e2:e1:1a:b5:53:e8:11:0a:c9:d8:2b:8d:50:91:b5:8a:1a:
b3:59:b0:4e:b4:ca:a3:29:3f:70:3e:8c:ee:30:cc:e1:f7:6d:
23:b2:13:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:26:05 2025 by rpki-client