Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/9C4yKo-M5NN71L7Fhn4K2XUZEug.roa
File: 9C4yKo-M5NN71L7Fhn4K2XUZEug.roa (raw, json)
Hash identifier: aDYTyAYDQ1locDuZpJVjcUCe9zoETjV0f4bdkWWSHXk=
Subject key identifier: F4:2E:32:2A:8F:8C:E4:D3:7B:D4:BE:C5:86:7E:0A:D9:75:19:12:E8
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 14D8
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/9C4yKo-M5NN71L7Fhn4K2XUZEug.roa
Signing time: Mon 10 Feb 2025 14:35:20 +0000
ROA not before: Mon 10 Feb 2025 14:35:20 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 220.128.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 23:44:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5336 (0x14d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:35:20 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F42E322A8F8CE4D37BD4BEC5867E0AD9751912E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:12:70:76:fa:94:c2:e4:76:50:33:2f:92:f0:
54:f9:b9:87:f6:1a:e1:84:27:fc:46:96:22:e4:1b:
ca:14:f7:f4:79:38:98:71:f6:82:7d:aa:bc:8f:77:
4c:17:b0:42:15:80:62:4a:fa:f2:1c:56:58:a0:b1:
01:d5:be:22:91:f2:d2:1d:01:43:53:30:a3:5c:1f:
f4:0d:d5:fa:42:3a:12:0b:55:76:1f:39:ce:fe:77:
2d:ba:b6:24:3f:5b:60:44:2f:9d:73:1d:79:9b:33:
92:64:77:e8:c7:24:8c:6c:fa:f7:8c:ca:ea:f0:b2:
63:dc:41:7f:c2:0e:c5:23:03:41:0b:39:67:a7:7b:
4e:0d:a7:36:11:f2:5a:6e:a1:f9:30:13:a3:84:e5:
bf:02:e6:1f:ca:f7:ec:ca:fa:14:39:60:a1:56:81:
34:0c:0d:d4:1c:b6:52:5c:8f:95:f4:de:69:cf:ac:
34:72:1d:35:60:1f:48:63:c3:4d:d1:f3:d5:2a:e2:
b6:59:09:96:0d:bf:43:4d:9f:7c:3b:87:1b:cf:2e:
0a:85:14:07:58:54:7f:b8:77:55:5e:d4:2e:be:b2:
2a:5d:39:d9:cb:4f:62:d6:76:ed:43:5c:56:64:55:
67:47:e3:68:c8:14:00:f4:a8:a0:69:59:06:55:8c:
69:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2E:32:2A:8F:8C:E4:D3:7B:D4:BE:C5:86:7E:0A:D9:75:19:12:E8
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/9C4yKo-M5NN71L7Fhn4K2XUZEug.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.128.61.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:60:98:4c:04:f5:a8:e6:ca:a0:dc:02:33:f2:e7:2b:80:76:
64:d0:e4:2e:e7:0f:89:0a:b6:97:bb:fe:78:f1:59:46:12:e4:
ff:c9:79:3b:18:cb:a5:c7:c5:88:9f:55:84:dc:76:d6:f0:df:
d9:24:d4:e7:eb:92:40:b7:72:d9:e7:0c:b5:e2:37:8c:85:2d:
7b:f5:df:f1:8d:f1:57:45:7d:1f:43:67:c4:08:b2:08:11:85:
04:3c:83:bd:fa:55:f5:8b:99:a2:c1:6d:56:d6:74:4e:3d:06:
d6:4d:83:d9:27:f5:82:98:c8:e8:e5:34:e6:f2:26:2e:c2:4d:
27:13:27:e0:8a:ef:67:d7:8e:3f:78:0f:be:1a:dd:1d:2d:00:
62:c8:c7:ac:ea:91:f3:ff:03:3d:58:03:5e:61:97:c4:f6:fa:
40:f8:54:8a:1a:87:ff:67:9e:25:5b:bc:23:b7:ca:a3:0e:b8:
e8:2d:81:8a:fe:6c:1e:23:15:93:a9:bf:d4:99:21:55:03:ca:
16:16:fe:75:49:4b:a0:e2:d4:c3:47:a2:d7:94:bf:6a:aa:23:
a2:f0:f1:98:72:85:24:32:6c:21:d9:53:52:c6:02:26:db:da:
86:01:d6:4f:b1:82:fc:b7:55:1c:7b:09:02:5e:47:7d:1f:0b:
5d:ef:5c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:29:27 2025 by rpki-client