Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/OpJgK-SVhn4FA5DrB_bRw_9UE1E.roa
File: OpJgK-SVhn4FA5DrB_bRw_9UE1E.roa (raw, json)
Hash identifier: Xo5WxsLDKbqsya9JwQ8wQwDgqg6PyXk8QEutxwTIbls=
Subject key identifier: 3A:92:60:2B:E4:95:86:7E:05:03:90:EB:07:F6:D1:C3:FF:54:13:51
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 143C
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/OpJgK-SVhn4FA5DrB_bRw_9UE1E.roa
Signing time: Mon 10 Feb 2025 14:34:44 +0000
ROA not before: Mon 10 Feb 2025 14:34:44 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 20940
IP address blocks: 2001:b032:104::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 11 Feb 2025 23:44:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5180 (0x143c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:34:44 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=3A92602BE495867E050390EB07F6D1C3FF541351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b8:34:08:b8:1e:34:9d:f0:da:7b:39:90:a2:
73:ee:8d:68:e8:6c:3a:7d:72:77:c6:f5:44:47:ad:
7b:c8:78:d7:d3:7b:e2:bc:e1:60:20:c7:61:8f:32:
54:e7:6e:0c:2a:8c:7b:3e:45:b7:1a:21:32:6f:b5:
bc:9f:75:7f:52:a3:b2:fd:de:b7:f8:09:9a:89:73:
af:ed:75:6d:cb:d8:bc:9e:2d:0f:a9:76:0b:c6:bd:
d1:31:3e:c0:a7:3f:d3:b5:1e:08:5c:47:d7:0b:b7:
72:51:a3:e4:42:e7:80:a7:9c:c7:8b:ad:e3:a6:4f:
26:57:5c:ec:f5:1c:a3:c9:bb:f4:f2:58:c0:19:e0:
47:f6:b3:79:b1:cf:87:25:cc:93:6c:47:12:c6:d2:
39:04:19:a2:f6:22:ff:77:d8:aa:a4:46:a9:c1:24:
13:ed:a8:cb:a2:db:c9:09:67:be:06:a8:77:bc:f0:
ec:48:d5:b6:62:fb:c5:6d:50:ef:6e:5d:bf:8e:a7:
69:62:47:0b:ac:4a:84:91:5c:3c:f9:1e:34:0c:c8:
f0:0e:ec:95:e4:63:ae:8d:71:d7:e8:1b:92:07:c8:
34:00:03:d5:37:1b:80:09:24:ca:8c:2a:20:eb:cb:
a2:d2:af:8f:e0:80:58:49:12:d3:e0:53:1f:20:7b:
70:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:92:60:2B:E4:95:86:7E:05:03:90:EB:07:F6:D1:C3:FF:54:13:51
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/OpJgK-SVhn4FA5DrB_bRw_9UE1E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:b032:104::/48
Signature Algorithm: sha256WithRSAEncryption
17:25:4a:9b:b5:fa:0d:39:76:c5:dc:bb:55:58:68:1d:48:38:
88:2c:82:76:2c:ea:aa:c0:2a:9d:55:3d:0a:e7:eb:04:90:57:
1c:f3:5f:03:d6:eb:11:64:92:30:7f:a1:80:68:92:a6:05:ce:
58:53:60:ad:70:56:53:3a:1a:d0:c2:ff:5e:7b:1a:11:f3:0a:
3d:ca:23:0d:25:42:42:ca:c3:30:1a:6d:78:f0:37:29:b7:2e:
71:86:8d:fb:82:d9:65:8d:65:7f:2d:bd:ca:10:0a:0b:aa:8d:
e2:3c:9d:ce:bd:d9:21:87:5e:62:15:98:1c:53:ae:37:76:94:
d9:8d:15:1a:95:59:8d:2c:fa:ad:51:7c:4c:e6:85:b3:bc:a9:
1a:17:39:97:cd:b7:61:88:20:b6:53:13:f2:1e:7e:34:bf:ee:
25:9b:c4:c6:cd:f9:33:de:3d:71:ae:3b:7c:1e:3e:f7:fa:ca:
82:04:76:5f:bb:18:79:f0:3f:3e:41:84:23:5f:b7:c8:9d:b6:
bc:cb:2b:43:d6:bd:b9:5b:77:8c:a9:d4:ea:2a:89:be:70:5e:
5e:86:2b:33:59:1a:70:be:88:81:54:14:b3:79:f0:14:76:70:
cf:77:72:33:1c:df:e2:5c:e9:6f:4f:06:f0:4d:08:de:65:19:
6f:d8:58:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:45:06 2025 by rpki-client