Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/Oh0tnS4SZRXh8E8kbZeeoakzjYg.roa
File: Oh0tnS4SZRXh8E8kbZeeoakzjYg.roa (raw, json)
Hash identifier: EQbiVnf5KJGq2q6VinzJDnoH/UYyXlhggfgFmXhnFb4=
Subject key identifier: 3A:1D:2D:9D:2E:12:65:15:E1:F0:4F:24:6D:97:9E:A1:A9:33:8D:88
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1461
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Oh0tnS4SZRXh8E8kbZeeoakzjYg.roa
Signing time: Mon 10 Feb 2025 14:34:51 +0000
ROA not before: Mon 10 Feb 2025 14:34:51 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 220.136.0.0/13 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 23:44:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5217 (0x1461)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:34:51 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=3A1D2D9D2E126515E1F04F246D979EA1A9338D88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a3:b6:a4:de:cc:ab:9e:fd:82:41:d6:27:ef:
41:cc:5f:72:3c:c8:f8:aa:9b:12:cf:3e:2b:d6:6d:
5c:db:0b:fc:74:b5:3b:88:f2:b0:d9:f9:dd:87:c8:
b9:4b:cc:88:d5:a6:2f:26:8e:17:a3:4a:97:09:aa:
df:eb:f1:e7:3c:bb:34:ce:35:42:3c:39:c6:9a:19:
fc:a5:00:df:96:6d:dc:dc:01:8d:e1:0d:91:16:76:
b8:91:14:9d:41:6c:0f:8e:10:dd:4e:a2:76:d7:9c:
7b:fa:2f:c4:79:1c:70:56:97:00:85:17:4b:79:a7:
52:6d:ce:11:75:eb:99:07:92:e9:5c:7e:3a:66:35:
31:a7:07:a2:8a:13:40:db:4a:b9:8a:f2:7b:ee:82:
5d:68:c1:a3:d1:2e:81:bb:70:3d:33:a0:b4:92:59:
8f:2d:72:29:a0:fc:68:85:02:d3:bc:db:91:db:9b:
69:b8:2c:51:20:9a:0c:f1:72:51:cf:f5:6b:94:16:
38:fb:53:02:4d:9d:c5:b4:f2:cc:05:46:b3:62:41:
6e:22:4b:72:51:45:2e:87:d2:b7:df:3a:d3:f8:56:
37:1b:e4:ae:c6:78:77:23:23:5b:37:8f:0b:b0:fa:
76:71:5f:70:0d:fb:df:30:b1:35:20:30:32:c5:14:
1d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1D:2D:9D:2E:12:65:15:E1:F0:4F:24:6D:97:9E:A1:A9:33:8D:88
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Oh0tnS4SZRXh8E8kbZeeoakzjYg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.136.0.0/13
Signature Algorithm: sha256WithRSAEncryption
8b:c7:cc:ee:f0:ee:a3:9e:3a:ee:9a:9e:e4:86:da:b4:e8:07:
e6:d9:12:20:d6:92:b4:5c:c9:1a:4f:a6:4e:6a:1f:a7:d6:07:
83:77:fe:f6:bd:48:b6:62:07:a8:50:b9:c6:e2:20:aa:70:a3:
54:26:2d:cc:7b:1c:32:cc:78:d1:49:e0:38:61:05:b8:2f:c8:
42:c8:0a:36:6a:03:43:86:2b:c6:50:59:a3:c4:3d:cf:ca:b6:
e3:0c:1d:c9:82:00:98:f2:e4:9d:1c:17:11:8c:46:a8:8b:51:
a4:d6:e6:19:21:1a:6c:ea:65:95:d5:59:85:05:3b:71:f2:7e:
de:16:19:a6:82:18:2c:93:f2:55:45:af:92:89:45:85:cb:57:
ba:03:5d:f8:ae:e9:33:4d:c6:c8:d1:dd:44:5f:ca:a1:a8:96:
a9:5d:e0:f6:78:38:b5:ac:59:db:cc:38:f8:69:23:f3:99:14:
38:52:d4:cd:36:0b:64:98:c9:ea:ea:96:f7:86:ce:78:13:f0:
90:ab:09:08:13:3b:67:9b:6f:37:29:da:f2:16:08:d6:e4:c2:
6f:93:56:bd:f5:fa:a2:2f:94:ae:c7:57:5a:aa:6c:23:c0:2d:
e2:9b:06:ef:68:9d:2c:4c:e9:7c:eb:d8:e5:23:e3:bc:46:e0:
5f:8e:ed:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:42:30 2025 by rpki-client