Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/8UHYI67oUEnhosrbT1Qz4uJdb9o.roa
File: 8UHYI67oUEnhosrbT1Qz4uJdb9o.roa (raw, json)
Hash identifier: U6i43om77a/RCp+ZaRFoaMp+SSkCDaLBKfWPOFNPnyg=
Subject key identifier: F1:41:D8:23:AE:E8:50:49:E1:A2:CA:DB:4F:54:33:E2:E2:5D:6F:DA
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1554
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/8UHYI67oUEnhosrbT1Qz4uJdb9o.roa
Signing time: Tue 11 Feb 2025 23:44:32 +0000
ROA not before: Tue 11 Feb 2025 23:44:32 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 210.65.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 01:22:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5460 (0x1554)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 11 23:44:32 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F141D823AEE85049E1A2CADB4F5433E2E25D6FDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:88:eb:8d:00:e7:99:4c:f7:d0:62:92:45:83:
d6:d0:74:07:22:f3:3c:a6:44:02:18:c8:d2:a4:6c:
82:bd:94:ca:ad:08:a6:dc:46:0c:ae:63:f2:75:26:
ee:f2:63:a3:64:c5:cb:5b:30:b1:4c:4a:7f:34:7a:
dc:b1:cf:b0:72:29:fe:5b:07:ae:d7:96:9b:c1:6e:
41:7b:e7:3c:ab:44:29:a2:fe:08:6a:d0:8d:44:25:
e0:8d:49:c0:0b:5f:b1:ad:b4:4a:c7:c6:46:7e:ba:
2a:5a:41:e6:c9:bb:84:34:56:c0:3d:bb:dd:06:0f:
c0:3e:35:db:5c:43:9e:60:eb:83:81:32:5b:b1:86:
79:25:5c:4c:81:54:62:28:80:f6:67:51:d5:d6:85:
a5:36:54:bb:3d:33:c5:aa:ce:27:7c:67:07:0f:18:
58:5d:54:07:72:aa:44:18:5c:45:54:f8:d1:df:5f:
a3:e7:ee:21:95:6d:3e:7c:68:6e:dc:84:46:a9:16:
82:ca:24:1c:53:61:65:70:c6:eb:ed:95:eb:0e:3f:
a5:f6:71:05:7c:cd:fd:ea:ef:ca:42:86:9d:43:96:
41:19:28:6b:bf:cb:25:b5:25:5f:d3:de:f6:7a:cc:
16:a2:7c:85:6e:d9:82:78:03:a3:4f:93:f4:75:25:
d1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:41:D8:23:AE:E8:50:49:E1:A2:CA:DB:4F:54:33:E2:E2:5D:6F:DA
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/8UHYI67oUEnhosrbT1Qz4uJdb9o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.65.0.0/16
Signature Algorithm: sha256WithRSAEncryption
27:15:52:41:cc:fb:03:fb:0f:53:32:ba:c0:bc:32:da:d9:4b:
d3:56:8f:23:ff:df:b9:5b:88:21:89:94:b0:99:6a:a3:89:c5:
dd:c6:e0:32:60:3c:be:d4:3c:90:36:3d:69:76:71:97:dc:5e:
13:64:53:63:fc:8a:33:de:f0:41:3d:2f:46:73:1e:4f:f1:05:
7b:79:b5:ff:5e:86:6c:7f:d5:96:26:25:a0:87:2f:a9:6e:21:
00:ff:76:73:48:8e:d6:d8:1d:a6:7d:9e:57:bd:4e:8c:3e:58:
25:bb:3d:34:76:a4:4e:5f:53:e8:2d:e2:9b:94:5a:ff:3c:a4:
72:c2:4e:b3:9e:27:fa:40:2c:a7:e3:ca:1f:09:ec:75:66:9e:
a1:60:7d:38:ed:bf:c3:b9:59:e2:cc:89:ef:cd:bc:47:4a:0c:
09:32:e1:3f:c5:c3:94:de:3d:b4:33:4a:3e:46:2c:44:2d:3f:
bb:51:3f:00:ef:fe:eb:47:2b:63:3f:54:1c:8e:d7:9e:90:94:
77:3c:ac:28:63:05:49:68:7d:e8:06:43:1c:f7:91:77:0e:77:
52:bc:75:e7:54:93:b7:1f:4c:e7:e1:62:74:bf:65:58:ea:aa:
7b:e9:60:cd:a0:d9:57:75:80:b6:bc:53:95:6a:b5:2a:2a:a7:
1c:97:0e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:25:06 2025 by rpki-client