Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/MwZmTNEpihqMvGneu-Yivm4D6zA.roa
File: MwZmTNEpihqMvGneu-Yivm4D6zA.roa (raw, json)
Hash identifier: ElNsOyqXnMSxWHsuZ5VPY8ItDctxWYYbhmgFDIzBwpA=
Subject key identifier: 33:06:66:4C:D1:29:8A:1A:8C:BC:69:DE:BB:E6:22:BE:6E:03:EB:30
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1521
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/MwZmTNEpihqMvGneu-Yivm4D6zA.roa
Signing time: Tue 11 Feb 2025 23:44:21 +0000
ROA not before: Tue 11 Feb 2025 23:44:21 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 203.75.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 01:22:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5409 (0x1521)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 11 23:44:21 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=3306664CD1298A1A8CBC69DEBBE622BE6E03EB30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e6:25:e3:00:17:45:a9:c8:65:29:2d:d2:2c:
ba:a4:8e:57:6b:6e:59:3e:29:6d:8d:a6:6e:cf:12:
91:c5:f3:66:fb:ab:e7:1f:63:60:10:ac:de:a7:58:
ed:15:ab:64:58:04:a3:44:82:86:a8:e1:de:79:8d:
b9:59:0d:29:47:93:10:24:8f:12:2b:c2:92:82:43:
02:5d:3d:1c:1d:7a:79:43:23:01:30:5e:cd:ad:fa:
40:3e:e0:29:4f:1c:27:c8:6d:16:45:ea:fe:7d:8e:
03:68:38:cc:9f:2c:a9:aa:6f:07:69:65:f3:ff:4e:
71:1c:14:6f:94:50:f8:9c:93:7a:fc:a5:3d:39:37:
3d:1b:29:06:a3:bb:69:4a:2e:ac:5b:c8:b5:bd:9c:
26:6e:61:1c:30:ee:64:48:73:a3:f4:af:20:5b:3d:
5f:75:dc:10:5b:ae:0f:4c:89:b7:fc:98:db:91:c9:
06:71:82:92:50:e0:d1:59:a8:9a:4f:df:c0:c5:26:
7e:0f:d7:ef:43:9d:f9:2f:b8:19:96:ed:85:21:0f:
3b:bf:f5:88:89:09:35:61:06:33:a0:e5:dd:14:cd:
e1:b5:61:fe:61:d8:45:aa:02:22:7c:e5:c8:6d:ab:
d0:9d:c7:c3:5b:b1:45:57:8e:8d:8f:a2:6e:bb:4d:
25:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:06:66:4C:D1:29:8A:1A:8C:BC:69:DE:BB:E6:22:BE:6E:03:EB:30
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/MwZmTNEpihqMvGneu-Yivm4D6zA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7f:af:df:53:42:da:34:a4:29:fe:b9:20:79:79:33:3b:dc:dc:
d8:36:fd:e5:91:8a:fe:da:05:06:38:67:3a:ed:7a:93:e6:a9:
bd:e1:bd:f3:6d:fe:c3:70:fc:54:37:69:31:06:21:8d:f8:ad:
15:db:76:96:82:44:89:51:e3:ac:d2:13:01:c3:14:c0:ac:ce:
5e:a6:1e:5b:77:4f:20:60:ab:97:6d:67:59:60:fb:39:b6:fa:
93:01:aa:f2:c6:96:51:8e:8f:8e:68:77:5b:ef:d7:62:61:19:
99:e2:d3:cd:95:e3:07:39:48:db:c0:be:95:96:ae:87:fe:68:
f1:96:98:74:1e:15:58:70:23:d4:a9:6e:33:5c:90:89:75:54:
5a:f0:71:24:29:b3:6a:e5:f7:d1:95:42:90:5f:78:f7:26:22:
ed:70:10:e4:66:43:09:ac:8b:5e:59:7c:d3:c4:46:bf:13:b4:
62:eb:aa:40:e5:c9:eb:c7:11:ff:ba:d2:f8:ef:e4:fd:6d:6a:
2a:ea:68:92:55:0c:c1:e7:fa:62:f7:cd:8c:ec:1a:a6:e4:54:
1d:80:81:3e:44:32:a4:05:cc:e2:dd:23:c4:e8:5b:3f:51:3a:
19:e0:b1:4f:9a:d8:c4:d3:0b:9e:a5:27:05:44:1c:49:3b:99:
f9:88:b5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:55:23 2025 by rpki-client