Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/KisjUfg29hSQ-F--4TOlkkSpQ6Y.roa
File: KisjUfg29hSQ-F--4TOlkkSpQ6Y.roa (raw, json)
Hash identifier: guhZuzQfPA5/YzYQRRH3x5VsWUvBIzCwQkZ3i9Ifpwc=
Subject key identifier: 2A:2B:23:51:F8:36:F6:14:90:F8:5F:BE:E1:33:A5:92:44:A9:43:A6
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1588
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/KisjUfg29hSQ-F--4TOlkkSpQ6Y.roa
Signing time: Tue 11 Feb 2025 23:44:44 +0000
ROA not before: Tue 11 Feb 2025 23:44:44 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 23675
IP address blocks: 203.66.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 01:23:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5512 (0x1588)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 11 23:44:44 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=2A2B2351F836F61490F85FBEE133A59244A943A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e0:e4:b7:17:67:37:8a:39:f0:29:89:22:95:
c3:2f:c4:0f:27:02:75:22:8e:26:32:83:fd:e1:a2:
44:94:91:ef:eb:49:9c:6e:03:3b:f8:47:f6:0b:34:
9b:13:a4:9a:00:bb:52:12:e2:8e:6c:9e:89:15:d7:
62:e1:f7:cd:cb:c4:0f:2e:e4:25:18:4f:a1:27:78:
a3:2e:bc:34:e8:31:bb:e7:63:45:fe:0b:88:87:64:
a5:e4:ea:47:0e:a8:91:c2:f8:25:43:63:f0:92:93:
21:f4:fd:1e:7e:91:d8:29:5a:ef:8b:23:3d:d7:18:
78:ed:f3:bd:de:ad:25:aa:69:dc:ff:5d:d6:5f:86:
d4:d0:76:17:d5:64:3f:20:3e:43:3b:6f:07:d2:ce:
a7:72:05:a0:2c:bd:7f:bd:bd:c7:9b:91:b7:4b:81:
ad:56:32:a8:e5:14:36:d9:ef:01:3b:e6:17:8f:22:
5f:64:dd:0f:d4:14:7d:98:98:0b:11:71:b5:83:2d:
78:ae:50:09:26:11:80:0a:3a:93:4c:3c:40:34:07:
80:79:95:a7:a6:ef:5a:10:84:91:44:c8:b6:a8:f1:
5d:6b:3b:2b:1b:47:13:e7:25:7f:1c:f6:ed:39:e7:
59:c1:30:f8:38:05:f0:5a:69:0b:7e:f0:c0:9a:be:
84:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2B:23:51:F8:36:F6:14:90:F8:5F:BE:E1:33:A5:92:44:A9:43:A6
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/KisjUfg29hSQ-F--4TOlkkSpQ6Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.66.245.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:a4:bd:fb:7b:3d:bc:39:76:34:d2:e8:41:c5:de:7e:5e:02:
87:33:3a:56:ee:17:c7:8f:6f:9c:f4:aa:78:56:72:2d:00:73:
c2:2b:2d:8d:05:0e:38:c8:9c:e7:21:45:05:99:67:b3:b1:1e:
ec:cc:71:f2:5f:ab:06:76:3c:ee:d8:bc:d3:12:a4:2d:b1:c2:
44:6e:02:c8:d8:df:3d:d2:b4:65:19:2f:db:d5:40:6c:c5:7a:
d8:74:36:99:e9:3b:fc:32:ae:26:e8:0d:bc:a3:3a:89:2c:8d:
d9:90:17:8e:fb:91:ab:ff:09:f3:1e:eb:3f:cb:10:3f:e2:f2:
0c:a7:c2:b0:ca:ed:8a:fd:b9:2d:02:09:ea:70:77:7b:bc:f4:
53:0b:48:9d:a7:30:3e:b5:d8:10:68:d2:7b:80:be:9b:72:45:
92:96:09:5d:2b:5b:08:cc:c8:a8:36:39:47:ed:32:e2:db:f2:
b9:5f:d9:ff:29:c3:a0:49:9f:f1:a2:e5:77:4f:52:a8:c1:b4:
8b:a0:7d:5e:8c:e1:d8:7a:41:7b:2a:16:25:e5:21:21:2b:ba:
79:27:18:73:ab:86:36:cf:90:f7:d2:d1:32:57:8c:d3:40:47:
1a:4d:96:bd:55:70:a7:03:30:99:70:6c:74:c3:9f:81:ab:6a:
f4:7f:df:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:21:44 2025 by rpki-client