Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/GJ6cP9AUqbFo2hyI6iTTrSoVxUg.roa
File: GJ6cP9AUqbFo2hyI6iTTrSoVxUg.roa (raw, json)
Hash identifier: SxumSyRHZ3xXzoXnqKl1EL1ZrI/kUhDWPvalMxoIQNk=
Subject key identifier: 18:9E:9C:3F:D0:14:A9:B1:68:DA:1C:88:EA:24:D3:AD:2A:15:C5:48
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 117C
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/GJ6cP9AUqbFo2hyI6iTTrSoVxUg.roa
Signing time: Mon 26 Aug 2024 05:17:35 +0000
ROA not before: Mon 26 Aug 2024 05:17:35 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 220.128.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 20:35:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4476 (0x117c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Aug 26 05:17:35 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=189E9C3FD014A9B168DA1C88EA24D3AD2A15C548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:33:99:20:48:ee:e9:8f:69:ab:4a:18:a3:a5:
1d:9e:e3:3b:90:2d:71:8d:4e:3f:51:56:19:4e:27:
70:15:19:31:df:30:25:6e:3a:ba:62:10:65:a0:7a:
ea:e8:26:63:d9:87:f2:25:11:20:89:9b:a6:88:9a:
cd:fe:c4:73:96:98:f4:50:1c:a5:28:86:38:8b:12:
87:09:35:d4:9f:a3:2b:94:e4:99:31:2c:ea:4d:d6:
ba:52:df:73:ec:00:a6:f5:be:0e:9b:f6:62:2c:2c:
b6:4d:4b:5a:3d:c6:1a:48:38:4d:0f:2b:7b:27:bc:
cf:26:b9:3b:ff:09:ea:f9:8d:05:b7:8a:47:e0:89:
58:db:ac:12:83:ff:d2:17:61:82:ca:ac:3c:c1:78:
9a:09:68:eb:3c:8c:d2:81:a8:4f:b7:14:59:fc:32:
5c:3c:6e:f7:a3:47:2f:36:bc:59:14:ca:7d:6a:5e:
26:7e:c8:1c:f4:9e:6d:ce:b9:2f:69:5d:60:31:27:
08:cb:8f:62:30:20:6a:0e:27:07:ee:27:b1:13:4a:
20:13:fa:a6:3d:39:c0:af:c1:5d:a8:42:e6:fc:ae:
a1:32:1c:08:4c:d6:44:20:35:03:00:db:08:f8:01:
7f:28:00:c2:40:5f:b0:ba:b7:8e:60:3f:43:f6:59:
c7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:9E:9C:3F:D0:14:A9:B1:68:DA:1C:88:EA:24:D3:AD:2A:15:C5:48
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/GJ6cP9AUqbFo2hyI6iTTrSoVxUg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.128.71.0/24
Signature Algorithm: sha256WithRSAEncryption
69:11:92:e0:6f:6e:7b:51:13:01:38:78:79:98:06:14:b6:0c:
5f:93:ae:a3:dd:ab:2c:72:6e:25:fd:05:c2:9e:84:28:91:9a:
81:7f:0d:3c:f9:8f:e3:8c:8b:15:10:d6:14:a7:33:e2:98:44:
1a:d6:cc:12:53:27:5b:8e:c7:20:45:bc:20:8a:7d:cd:9b:bc:
64:22:35:d3:c6:3b:f2:97:95:b0:25:f4:ec:58:e8:f5:2a:d4:
2d:29:45:2e:36:c1:d3:c9:18:6c:7a:d2:b5:c7:ca:bc:24:a0:
a2:32:ec:88:77:bd:6f:f0:63:b0:ee:2c:1f:b5:73:05:b5:87:
a9:1b:80:d9:17:32:18:06:c8:eb:3e:96:f2:39:20:f6:9f:ae:
df:a3:4b:67:10:a5:88:ae:a8:ed:3f:8f:b8:e4:6d:21:24:e8:
f9:72:2f:98:a8:3f:32:a0:69:49:c5:ba:69:10:c6:59:8e:7e:
f1:51:e8:02:b9:ab:c0:b9:75:b2:b1:e4:96:9e:2f:b8:b5:31:
6a:97:ba:af:72:f5:18:7c:96:00:85:58:8f:cb:69:1c:d7:fc:
3b:f8:8f:1c:7f:7c:ad:42:21:91:2f:35:d2:55:78:33:18:20:
bd:6e:a9:43:5a:1d:71:91:f9:db:ce:9f:e0:5f:7f:42:f2:6a:
6d:e1:a4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:32:28 2025 by rpki-client