Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/POaKAsEiKePrjs4f6nueWJjj8gQ.roa
File: POaKAsEiKePrjs4f6nueWJjj8gQ.roa (raw, json)
Hash identifier: pwqCcgt0zFRQZbz5CkzE/urRNZVEkMSWB5N+vvLXSZc=
Subject key identifier: 3C:E6:8A:02:C1:22:29:E3:EB:8E:CE:1F:EA:7B:9E:58:98:E3:F2:04
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1441
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/POaKAsEiKePrjs4f6nueWJjj8gQ.roa
Signing time: Mon 10 Feb 2025 14:34:44 +0000
ROA not before: Mon 10 Feb 2025 14:34:44 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 60.250.0.0/15 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 23:44:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5185 (0x1441)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:34:44 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=3CE68A02C12229E3EB8ECE1FEA7B9E5898E3F204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:58:65:d4:2f:b6:24:7f:a2:05:74:f9:b2:0f:
81:99:64:af:eb:6c:18:1d:53:40:43:56:38:c2:12:
07:a3:46:fe:e1:5f:99:e3:28:45:80:2c:e6:3c:ad:
ac:cb:86:3c:dd:2b:d1:9d:bf:24:a2:33:b9:fa:3b:
1a:10:9c:5d:2b:ba:a9:86:5c:9f:dc:1a:c8:e7:55:
90:96:0b:91:7d:8d:1f:cd:70:93:d9:8e:32:d4:88:
5e:73:5b:f4:b4:1f:8f:37:e1:0f:77:9c:6f:77:47:
9b:f5:ee:7c:d8:99:86:e7:52:c4:e7:c7:47:a5:cf:
08:67:e4:a6:ac:44:ed:4c:95:e8:80:ea:04:bd:f0:
04:b3:e9:d2:5e:ef:2a:85:5c:31:52:0a:57:9b:4c:
e3:a2:30:49:94:7c:5f:80:4a:24:f9:b3:81:ec:67:
40:1d:d6:2f:95:1e:2b:5b:49:32:0f:9a:32:73:c7:
45:92:09:d5:29:a3:b5:2b:12:80:c6:c3:0b:d6:f4:
bd:e0:2b:c0:95:61:30:ee:e2:8f:a6:c8:69:78:d9:
6e:b2:2e:25:f5:0c:ab:7a:72:47:17:fe:f4:c6:fe:
64:c9:1f:c7:f6:6c:4a:a2:f4:83:d4:f7:03:0a:29:
74:dd:d9:9a:70:ff:5d:97:d9:4e:01:f8:9d:d1:61:
ba:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E6:8A:02:C1:22:29:E3:EB:8E:CE:1F:EA:7B:9E:58:98:E3:F2:04
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/POaKAsEiKePrjs4f6nueWJjj8gQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.250.0.0/15
Signature Algorithm: sha256WithRSAEncryption
6f:c7:dd:e2:ec:4e:ed:09:77:6e:7a:51:92:23:45:31:35:38:
5c:db:14:55:9e:d3:dd:47:91:57:e7:05:78:96:d1:12:47:b8:
f6:fd:5e:8c:80:fd:cc:99:db:7f:fa:ff:11:b9:af:50:a0:5e:
d2:2e:74:83:ac:7d:8b:74:7f:89:a4:26:0c:79:96:ad:e9:86:
bb:a3:b5:7e:d7:7f:c6:8e:f9:9d:14:e8:63:ec:42:19:9c:ac:
5b:83:f1:72:99:e8:f0:57:19:3f:22:8f:37:c3:ca:11:14:17:
4b:5a:53:ea:a7:75:db:14:0e:f0:23:11:cd:20:83:a0:cb:b9:
9d:89:61:f1:da:5b:ab:5e:8f:87:12:60:dc:0f:3e:f4:7d:82:
c1:7e:ab:d5:7d:c0:4e:62:a2:c5:49:f1:43:c8:24:20:2f:9a:
b2:5e:49:89:3c:9f:8f:64:60:6b:a9:46:43:30:26:f1:92:c8:
67:3b:ea:30:06:fa:b8:67:77:b6:3c:06:b7:a6:dc:81:c8:bd:
0a:5f:65:51:59:ef:cb:3d:91:c1:e4:ae:1d:49:af:82:39:86:
d3:3f:f8:e5:94:b2:4f:fe:0b:a8:5a:c4:ee:28:fa:a6:51:a1:
9b:96:63:88:7f:43:70:5a:32:e3:b1:84:f9:18:56:9c:b9:10:
e8:cb:89:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:21:54 2025 by rpki-client