Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/JQLXF-k_Pk2ciPnNrW7MlFqzI-4.roa
File: JQLXF-k_Pk2ciPnNrW7MlFqzI-4.roa (raw, json)
Hash identifier: k7CMrtspXeDv+6NoRRvgsgJ7QguZyiA3aPniBttMgQA=
Subject key identifier: 25:02:D7:17:E9:3F:3E:4D:9C:88:F9:CD:AD:6E:CC:94:5A:B3:23:EE
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 14A1
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/JQLXF-k_Pk2ciPnNrW7MlFqzI-4.roa
Signing time: Mon 10 Feb 2025 14:35:07 +0000
ROA not before: Mon 10 Feb 2025 14:35:07 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 202.39.128.0/17 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 23:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5281 (0x14a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:35:07 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=2502D717E93F3E4D9C88F9CDAD6ECC945AB323EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3d:77:00:7c:21:88:d7:93:58:e2:11:bb:86:
18:75:cd:42:29:fb:6a:f0:5a:0a:f8:e7:42:cd:11:
39:5b:d1:22:15:3e:98:0a:ad:24:31:33:3b:61:52:
4f:6d:68:2c:9c:dc:71:0b:cf:41:52:bb:4f:81:28:
23:df:b7:c8:b0:05:5c:0c:9e:bb:ef:0b:3b:1f:2f:
2b:8a:4a:c2:ca:4d:fb:a8:a0:48:36:cc:a1:24:ef:
5f:11:53:48:bb:20:b1:e4:72:59:d0:76:5e:bc:63:
0b:f7:82:85:bc:e0:f8:b4:0c:c1:02:c0:2a:1a:e3:
79:68:fc:cd:e6:b0:50:94:9a:93:b8:92:76:e8:4e:
d3:20:4e:b9:90:63:d4:d0:f3:99:1b:c8:6a:82:e5:
e2:5b:4d:1d:1e:e2:4f:08:19:10:38:5f:86:e7:3c:
e0:a3:2c:86:23:5e:5c:be:c6:de:98:19:49:93:65:
76:24:6a:10:d7:0c:9c:87:0a:b0:a9:02:dc:a4:9c:
10:b8:2a:23:7f:f5:6b:5d:c0:b8:90:28:61:8a:c9:
f1:bf:ff:ea:92:d7:97:5c:06:16:ce:f1:8c:cf:04:
b7:37:9b:84:a8:3b:10:41:6e:e3:81:b4:88:07:19:
4d:81:35:b6:22:1b:c0:02:67:8f:e4:78:cb:66:6b:
b0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:02:D7:17:E9:3F:3E:4D:9C:88:F9:CD:AD:6E:CC:94:5A:B3:23:EE
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/JQLXF-k_Pk2ciPnNrW7MlFqzI-4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.39.128.0/17
Signature Algorithm: sha256WithRSAEncryption
36:83:02:2b:cf:a4:64:1b:f4:32:c5:6a:ab:90:6c:f8:8a:8f:
0f:ad:c1:5a:8f:8c:b5:ae:5f:b3:b7:10:26:6c:1f:2a:e9:a8:
27:64:34:51:e8:06:1e:20:5e:ce:e6:81:34:da:d4:df:4c:d4:
af:ed:4b:bf:58:a0:94:74:b4:42:31:b8:32:28:50:14:b4:a3:
29:ae:40:a1:5c:f0:bf:76:b4:f7:9d:87:d6:0e:a5:84:54:93:
a9:46:7a:79:c9:8e:3e:a6:78:a1:33:98:39:e5:ae:57:88:93:
cc:40:2c:09:83:0c:22:9d:a7:14:b7:54:de:4e:29:2f:04:f4:
12:7c:03:34:ee:c9:f2:ab:a9:c0:4f:7a:48:56:9e:89:29:6c:
5e:32:37:4b:d0:d6:e3:60:87:9b:19:63:8a:e4:de:ab:e1:b0:
f3:64:ee:db:57:37:94:1f:bf:03:bb:48:56:90:fe:ec:d1:15:
34:42:5b:91:4c:a7:84:12:a2:1b:22:ed:ef:eb:97:da:36:07:
f9:9e:1d:f3:fc:eb:d8:8a:a2:c0:51:89:96:e5:d0:da:51:71:
12:09:60:f4:a3:db:69:4f:1b:2e:52:d9:af:57:15:b8:73:39:
bc:73:54:ac:c9:d4:ca:eb:c3:1d:8c:f9:32:d1:1c:27:74:75:
e3:79:14:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:22:00 2025 by rpki-client