Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/KBIH7mZyZCDKwuEUm0OWJ5WFRX4.roa
File: KBIH7mZyZCDKwuEUm0OWJ5WFRX4.roa (raw, json)
Hash identifier: ZLa6UZcEE82sap/IgBnoSXQPHwn8PSTyf12U+W4Up1c=
Subject key identifier: 28:12:07:EE:66:72:64:20:CA:C2:E1:14:9B:43:96:27:95:85:45:7E
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 156B
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/KBIH7mZyZCDKwuEUm0OWJ5WFRX4.roa
Signing time: Tue 11 Feb 2025 23:44:38 +0000
ROA not before: Tue 11 Feb 2025 23:44:38 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9505
IP address blocks: 175.111.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 01:22:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5483 (0x156b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 11 23:44:38 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=281207EE66726420CAC2E1149B4396279585457E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c5:dc:98:9d:c0:72:66:46:05:13:02:ee:54:
00:03:9d:f9:fb:35:ef:ba:00:e8:f3:b3:72:32:e4:
b3:46:f6:e2:41:7e:98:5d:1c:15:c9:9a:89:c0:1f:
30:8e:4a:a2:a3:2c:49:1d:b2:f6:ee:79:ab:07:ac:
19:6b:02:f0:98:a8:49:8c:1b:8d:23:61:a7:a1:73:
50:8c:3f:7d:f6:2f:e9:2a:01:34:df:ed:1b:02:8d:
d7:ac:64:a4:b5:c5:ad:67:0d:93:d2:ee:31:aa:be:
ff:f2:f5:83:11:af:3b:ce:ea:54:ed:fe:d0:43:77:
19:a0:e5:1f:49:12:6b:35:a1:b5:42:ac:54:c0:a4:
e0:44:93:e7:a4:a5:ae:e0:d3:2a:b1:69:a4:fe:54:
bb:ef:26:dc:93:4d:d0:fe:23:6d:2a:ed:a5:3a:37:
4e:4d:63:9d:55:d6:10:80:8b:ed:0f:7b:98:6c:c8:
c2:30:0b:69:a0:f3:9f:9c:b6:db:5d:dd:e2:22:7d:
63:ff:27:08:8f:15:e0:45:95:1a:7a:59:6e:1b:32:
2e:22:35:9d:86:04:27:2b:cd:49:de:f1:03:1c:57:
9f:f9:10:73:98:5e:e6:d8:ea:88:47:b1:8b:74:ad:
28:25:c2:b5:d0:3b:e5:a8:dd:fb:cd:a3:98:9f:49:
c9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:12:07:EE:66:72:64:20:CA:C2:E1:14:9B:43:96:27:95:85:45:7E
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/KBIH7mZyZCDKwuEUm0OWJ5WFRX4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.111.239.0/24
Signature Algorithm: sha256WithRSAEncryption
23:9f:71:b5:6a:64:f1:f8:41:15:9a:59:a6:7d:ba:05:18:40:
6e:c9:74:d4:87:ec:c1:06:6f:b4:64:06:a6:9d:ea:a7:a0:4c:
36:2f:7f:77:f3:2e:71:5a:cf:44:12:09:9d:81:e2:c7:73:6e:
39:51:45:91:97:71:94:14:41:71:c0:f5:df:bf:11:5a:04:f8:
e0:eb:22:97:71:f1:61:8f:45:72:ca:13:76:39:01:48:c7:c6:
e3:ee:72:5b:d1:cb:76:e7:2d:ff:6c:f4:d9:b2:49:67:1b:d0:
15:d6:77:10:11:a5:c2:bc:15:40:4e:0e:03:46:3a:0d:37:aa:
e7:54:73:8a:0d:ea:52:1d:25:73:df:f6:b1:68:d0:3d:6a:df:
22:f7:2c:54:d2:a5:de:a8:b4:da:3e:80:ba:01:25:d8:6e:b9:
d6:b1:0e:03:3e:4d:30:0a:73:51:28:07:80:df:40:45:62:f1:
ab:b3:8e:79:fe:1d:53:c9:87:e8:0e:4b:84:d6:a1:0a:09:bb:
e4:1c:af:c9:46:34:da:64:b2:ce:74:db:4d:b8:79:b7:9b:d8:
d7:8e:f2:1b:fb:4e:3f:55:22:ce:e5:22:f6:bf:36:1f:e8:b6:
82:fe:26:2d:7f:e2:1f:86:7c:06:8a:24:50:1a:cb:c5:32:a5:
37:70:bf:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:22:08 2025 by rpki-client