Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/Mg6PwFnO0obJenPa-QmkXmQTh1w.roa
File: Mg6PwFnO0obJenPa-QmkXmQTh1w.roa (raw, json)
Hash identifier: LtEsyDOHg/WtrmGhT/cOU4Sa2Rnf88hs9jwtjoezH6M=
Subject key identifier: 32:0E:8F:C0:59:CE:D2:86:C9:7A:73:DA:F9:09:A4:5E:64:13:87:5C
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1228
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Mg6PwFnO0obJenPa-QmkXmQTh1w.roa
Signing time: Wed 28 Aug 2024 03:00:51 +0000
ROA not before: Wed 28 Aug 2024 03:00:51 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9680
IP address blocks: 2001:b000:91::/48 maxlen: 64
Validation: Failed, certificate revoked on Mon 10 Feb 2025 12:51:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4648 (0x1228)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Aug 28 03:00:51 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=320E8FC059CED286C97A73DAF909A45E6413875C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3a:b8:3e:b2:9e:06:d8:76:a3:48:9c:ba:64:
25:4c:30:5e:1d:ec:ef:06:7c:73:83:b6:60:a2:9b:
79:e9:18:b2:13:77:59:fb:2b:b0:c7:ad:a6:06:14:
60:e2:2b:30:e0:6a:85:07:f3:26:d6:97:60:99:c9:
6b:61:50:63:3f:36:0a:2d:a2:46:2e:a0:5d:04:4d:
be:d1:45:bb:2e:33:f9:df:22:e4:33:bd:0e:53:93:
8c:66:7d:c3:65:f9:a1:4e:76:d6:3c:9f:04:1a:b5:
ba:7b:52:87:d4:80:df:47:8a:b3:12:6e:9f:f0:bb:
26:05:57:c1:e5:be:83:1f:a4:09:9d:82:cb:ca:17:
e7:9f:69:9e:6e:c3:c8:49:0b:a2:de:77:d7:5c:b0:
21:dc:5d:b5:6a:c5:8c:83:4a:2d:ae:c3:40:37:75:
f8:e3:b4:94:6c:83:8f:38:bf:98:57:86:4d:c8:5a:
15:47:51:e4:5f:c8:75:ac:20:fb:da:38:bb:45:06:
48:54:65:14:55:d1:78:a4:e6:4c:e8:c0:43:01:cb:
a4:38:1c:b9:50:3a:2e:19:df:2c:88:b1:ce:41:9e:
53:68:0a:6b:4d:c9:6c:23:21:d9:96:64:5f:87:1e:
e5:f7:54:a8:57:fe:2a:50:28:23:7d:08:53:76:41:
b1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0E:8F:C0:59:CE:D2:86:C9:7A:73:DA:F9:09:A4:5E:64:13:87:5C
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Mg6PwFnO0obJenPa-QmkXmQTh1w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:b000:91::/48
Signature Algorithm: sha256WithRSAEncryption
3b:5e:59:0e:e1:8b:00:7f:20:a0:1a:9e:5c:21:28:b0:3f:20:
14:0f:8f:d3:93:3f:d6:91:dd:95:f1:dd:d8:78:ba:bb:49:75:
b1:71:14:48:21:db:45:29:4d:fb:ed:fc:e9:1b:ca:6f:55:7b:
c0:09:b0:b5:62:c9:14:a7:fd:68:70:4a:ad:26:40:24:27:d8:
2a:e1:63:ab:5d:42:29:51:5c:06:40:e2:89:28:9e:7f:02:01:
fb:cd:5d:2a:cd:04:89:a3:df:b8:23:88:a8:01:00:28:eb:e3:
9b:55:f6:45:64:b9:a0:48:c5:dc:d1:b6:ce:83:96:d3:c9:6e:
fc:b3:b2:1d:89:e1:6d:95:c4:5c:ff:16:9c:f4:2a:67:f8:51:
4e:2c:41:04:03:0e:bd:db:6c:ea:74:f0:91:2c:93:7c:c6:cb:
d8:59:43:ab:ba:b3:bd:11:ff:6b:d1:5a:40:67:4b:8c:f2:71:
fb:2b:e9:df:53:28:6c:3a:54:b3:8e:4b:20:87:b6:f0:18:15:
6b:11:ca:11:38:36:eb:35:ac:cd:a3:7f:ae:0b:c7:32:df:fa:
c4:e2:cc:ef:f1:04:00:5c:51:2e:3e:51:18:95:85:bf:55:b3:
7c:c6:2d:97:82:be:8b:24:9b:f0:d1:e1:53:29:9d:3b:22:a0:
3c:81:35:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:40:14 2025 by rpki-client