Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/9HEBWaXdVXde4CwxP6rBh2goEUc.roa
File: 9HEBWaXdVXde4CwxP6rBh2goEUc.roa (raw, json)
Hash identifier: zUYMJQ/twnEV3J88OEoM3pf02E3DS7qgn2r2PKbfaKI=
Subject key identifier: F4:71:01:59:A5:DD:55:77:5E:E0:2C:31:3F:AA:C1:87:68:28:11:47
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1513
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/9HEBWaXdVXde4CwxP6rBh2goEUc.roa
Signing time: Tue 11 Feb 2025 23:44:17 +0000
ROA not before: Tue 11 Feb 2025 23:44:17 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 20940
IP address blocks: 210.65.144.192/26 maxlen: 26
Validation: Failed, certificate revoked on Wed 12 Feb 2025 01:22:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5395 (0x1513)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 11 23:44:17 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F4710159A5DD55775EE02C313FAAC18768281147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:08:d4:98:13:62:44:5f:f2:6b:cc:9b:a5:25:
a8:42:64:34:13:fe:27:65:a4:b3:cb:03:3a:03:d3:
3b:55:c1:6f:90:24:c0:a2:a6:24:72:e2:8a:d3:97:
08:f4:a9:bd:4f:0c:2b:c3:df:03:2d:93:72:26:ce:
c7:aa:86:9d:da:89:10:94:1b:52:20:3e:03:7e:4f:
37:53:3a:2a:9b:2f:72:a8:e8:34:f9:3c:f5:41:11:
c8:3e:fa:3d:2b:e0:04:82:18:ca:f7:78:cf:89:75:
09:0a:57:ee:f5:47:8e:5a:ec:40:e9:3c:c6:db:1c:
4c:1f:56:a4:be:bc:3f:19:53:c0:26:ce:a0:cd:3c:
f4:ac:75:cc:da:d9:ef:fb:17:88:a9:1e:3a:14:7e:
cd:de:1f:36:85:f3:95:cd:1a:1b:25:fd:04:84:91:
fc:5b:09:36:b6:b0:f5:75:8c:34:0c:f3:b4:52:6f:
ac:9f:3b:ba:ad:f0:97:9f:02:79:4a:c8:df:3a:de:
8f:31:b7:fb:e5:68:3a:18:31:44:46:3c:f2:b1:f1:
4c:5d:50:45:af:00:a2:8c:2d:b5:5d:ce:0b:d9:d6:
17:ed:0d:e3:f4:60:00:d9:df:4a:aa:a0:d3:03:ff:
1a:ad:58:f2:46:fe:1a:d3:5c:15:68:98:89:56:e1:
5b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:71:01:59:A5:DD:55:77:5E:E0:2C:31:3F:AA:C1:87:68:28:11:47
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/9HEBWaXdVXde4CwxP6rBh2goEUc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.65.144.192/26
Signature Algorithm: sha256WithRSAEncryption
04:9c:f4:e0:cb:d8:a5:9f:8e:92:79:fb:33:94:5b:cd:5d:71:
08:94:fc:02:bf:e1:1e:06:c4:86:71:35:2a:59:9c:5f:ad:f0:
2d:be:2c:12:e5:74:d8:1d:27:ce:d5:81:ab:1b:ad:2f:9d:1f:
14:81:9f:29:88:96:90:ca:c8:f9:a7:79:8f:fc:e0:8d:62:fe:
b4:e7:9d:bd:ea:4f:18:c3:64:ba:eb:96:c2:2f:03:fa:ff:ca:
cf:4b:c2:47:b3:9e:b1:11:e4:9b:73:f4:fa:11:5a:52:de:8d:
48:68:e5:39:51:f7:9d:df:79:23:cb:d0:c5:52:e8:15:40:0b:
cc:51:77:53:30:fc:be:b3:a2:6f:e2:bd:ee:33:c9:9b:5c:ab:
00:29:6f:9e:93:2e:16:ec:8e:9a:56:74:0d:84:6c:70:47:51:
2d:21:b7:d0:ea:b2:aa:ca:e0:36:8b:7d:22:33:c8:4a:27:cc:
f0:25:0f:bf:b4:46:5c:25:4e:8e:85:c2:1f:29:7c:18:b9:03:
4c:dc:63:dd:d9:73:41:14:10:90:4f:0f:53:9f:d7:f1:fd:5c:
e4:ff:46:14:ea:62:cf:0e:4f:95:18:d7:f8:1a:67:0f:84:ac:
e5:cb:b9:ea:a8:1f:b0:d5:2f:96:1c:4a:f5:0a:ef:79:94:ce:
37:83:b2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:29:32 2025 by rpki-client