Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/LmM_cpC5G7iK4XBgtombZP1AuDE.roa
File: LmM_cpC5G7iK4XBgtombZP1AuDE.roa (raw, json)
Hash identifier: j8oc3S/i+iJGbqJ+WTedXUJuZXWjACpMJ5rwkMxMQQQ=
Subject key identifier: 2E:63:3F:72:90:B9:1B:B8:8A:E1:70:60:B6:89:9B:64:FD:40:B8:31
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 120A
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/LmM_cpC5G7iK4XBgtombZP1AuDE.roa
Signing time: Mon 26 Aug 2024 05:18:11 +0000
ROA not before: Mon 26 Aug 2024 05:18:11 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17421
IP address blocks: 42.64.0.0/12 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 20:35:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4618 (0x120a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Aug 26 05:18:11 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=2E633F7290B91BB88AE17060B6899B64FD40B831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:66:06:cf:a6:bf:d0:5c:5f:cd:90:e1:b1:7d:
25:da:8f:0a:b8:ba:7c:ec:d8:a0:9d:b4:16:e7:a8:
14:59:47:67:e8:f6:ab:5f:25:c9:3b:a0:b2:e3:f1:
fb:77:96:3c:92:93:4e:b4:5c:9a:7d:f8:af:25:46:
cb:63:08:43:00:ca:9b:d1:26:06:cc:3b:cc:97:55:
72:73:06:c1:1f:ce:36:f0:4a:30:f2:2c:6f:8b:b9:
0f:eb:0c:57:27:a7:60:8e:58:b3:0e:55:e2:78:0b:
83:bc:15:f7:51:37:8a:55:41:1e:08:4a:16:42:29:
3e:0d:6a:bf:03:c5:92:45:e2:a4:2e:f0:50:91:1b:
d7:67:40:70:c8:d6:0d:1e:c1:6d:8a:03:ba:ff:f1:
99:0d:58:e7:7a:25:09:2e:b7:88:2a:5c:9f:b2:52:
b9:e2:8f:b7:98:34:9c:4c:cb:d8:55:cc:d8:06:4c:
b0:a0:e4:a7:79:88:fd:f9:d3:1e:4b:d0:42:e0:4a:
58:e0:e2:b7:be:31:de:c7:e8:88:c2:23:99:20:0f:
28:3a:ae:2a:fb:ed:1f:c7:2b:ba:66:32:89:12:3c:
a7:4b:3e:73:7c:f7:01:89:09:8b:5f:5a:6d:0d:97:
22:07:bc:37:57:78:d0:4b:39:d8:f2:28:b6:07:dc:
b7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:63:3F:72:90:B9:1B:B8:8A:E1:70:60:B6:89:9B:64:FD:40:B8:31
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/LmM_cpC5G7iK4XBgtombZP1AuDE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
42.64.0.0/12
Signature Algorithm: sha256WithRSAEncryption
a9:ad:65:1a:b1:41:a1:73:9b:75:07:4a:7f:54:25:22:9a:3e:
37:30:7f:82:56:cd:1f:51:dd:8f:95:be:82:c5:4d:a5:2b:cd:
8b:4a:ca:09:c9:ec:5a:f4:36:af:46:5b:14:d0:b2:c5:47:4c:
d1:2e:d9:ae:ba:76:d1:83:b3:6b:20:ac:65:4b:36:0c:65:6e:
57:d9:fe:3c:25:41:3a:54:16:a3:89:a0:1c:74:e6:1f:79:72:
3f:02:c3:02:e9:39:23:1e:04:0a:b5:c0:72:d5:2b:aa:d4:80:
d5:37:dd:db:07:fc:8a:d6:ab:aa:3c:25:e2:29:15:53:45:36:
9d:3e:16:0b:69:19:59:fe:a0:23:04:a5:00:2c:d3:0a:af:01:
ce:7a:b8:55:03:ee:b3:66:66:0e:59:a9:58:ce:1b:e8:6e:73:
f2:da:aa:46:83:9a:34:9c:7e:1d:c1:52:d4:f6:ed:69:6e:c2:
66:15:b3:72:fc:83:31:1f:7e:0e:fc:1c:e5:d6:b3:eb:21:e8:
35:ad:02:5a:77:ea:14:7f:cf:e6:48:3b:31:0e:b1:e0:90:9a:
62:6e:32:b8:f6:ba:f7:a3:38:89:f6:88:3d:6c:f6:01:72:84:
a2:21:32:a9:e2:49:39:79:ed:a4:9d:db:3e:c2:25:5f:89:2b:
cc:ae:92:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:38:31 2025 by rpki-client