Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/J64emD1yn67Xt1nJcSC-On5F5nU.roa
File: J64emD1yn67Xt1nJcSC-On5F5nU.roa (raw, json)
Hash identifier: L3kPz5WNt8c/Ihmr34+oLdOsrS7cpndqPZ1qAxsnrD4=
Subject key identifier: 27:AE:1E:98:3D:72:9F:AE:D7:B7:59:C9:71:20:BE:3A:7E:45:E6:75
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 11AF
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/J64emD1yn67Xt1nJcSC-On5F5nU.roa
Signing time: Mon 26 Aug 2024 05:17:49 +0000
ROA not before: Mon 26 Aug 2024 05:17:49 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 221.120.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 20:35:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4527 (0x11af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Aug 26 05:17:49 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=27AE1E983D729FAED7B759C97120BE3A7E45E675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b1:53:10:16:3a:11:ae:ad:9e:35:4f:df:ee:
8c:bd:f0:96:2f:28:fc:f5:16:7f:10:7b:56:50:dd:
58:00:c0:69:f6:2d:41:db:26:4c:0f:e3:80:b4:bc:
35:f1:a5:3e:ed:2c:5a:8c:c1:16:83:22:ee:de:06:
f0:82:ff:78:f1:91:94:0f:5a:7c:c8:ce:25:11:eb:
61:92:70:4d:c4:be:8e:87:60:70:cc:9b:4f:48:60:
d7:c2:73:fa:33:d5:9a:88:5c:2c:e2:56:f5:b8:df:
b4:cc:3b:3f:1d:08:13:23:e7:f2:17:0a:55:9c:ac:
b6:fb:7e:11:6d:39:d5:96:b4:35:aa:b2:fc:36:66:
ab:f5:b6:38:6e:9a:6e:be:41:5b:72:e3:19:51:e1:
e1:3c:ff:58:62:a9:2d:9c:a8:51:13:94:90:fd:d7:
c1:c2:da:29:3f:7f:39:52:c7:e0:98:10:48:41:e5:
25:8d:60:fc:1f:b3:3c:b5:aa:e7:32:34:48:02:7e:
a9:8a:c7:24:6d:33:e7:92:57:0a:03:3a:42:ba:4e:
1d:a0:26:ca:6b:f2:8b:b7:9b:72:ea:30:37:40:a2:
9c:83:f1:0d:6f:b9:d2:93:e5:89:34:5d:2e:f8:82:
ef:f4:34:f7:a9:c4:d4:1b:f2:67:d5:e6:40:fd:04:
32:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AE:1E:98:3D:72:9F:AE:D7:B7:59:C9:71:20:BE:3A:7E:45:E6:75
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/J64emD1yn67Xt1nJcSC-On5F5nU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
221.120.25.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:e3:71:aa:c1:22:0a:d6:f4:79:8c:c9:b2:c2:6b:55:40:40:
f7:c0:bb:ae:ac:95:fe:e5:92:b8:71:9f:32:b5:b4:63:ca:68:
03:ba:ac:cd:03:13:f1:be:cc:1f:68:ee:78:f6:e3:74:0c:d1:
1f:8a:85:91:95:c8:6f:9c:0f:a8:92:7f:bb:15:bd:10:b0:a5:
18:71:44:e5:2a:90:b1:0b:bb:53:ce:e5:59:1e:2e:82:0a:62:
fa:60:6f:dd:93:fd:e1:21:f2:c5:3d:67:d3:c3:d0:0b:f9:d2:
9c:b3:d9:4b:a3:88:ea:6c:55:0a:e9:d4:66:77:82:0f:de:bd:
2c:a6:bc:20:e0:21:45:12:9b:38:f6:2b:a4:d9:3b:08:76:93:
59:34:6f:89:70:78:6f:03:35:57:7a:f0:5c:8a:6d:46:bb:7e:
ae:91:16:9e:75:db:77:18:fc:a9:89:51:b9:04:85:fb:3a:94:
98:7c:21:4b:d6:e4:db:7f:08:2c:4d:96:61:1c:79:15:d7:b7:
87:67:ca:53:ad:d1:c3:7d:74:dc:6b:9c:3a:c9:95:90:fa:16:
75:b0:06:25:b4:e0:4e:96:c1:66:1d:72:f3:c5:f8:d3:d1:24:
c2:ae:d0:19:d3:15:83:ac:6f:2f:1e:dd:55:cc:c1:1c:f1:35:
ca:0d:a3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:29:18 2025 by rpki-client