Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/RPePTl5wKt7jqWHlY_-xn0XVOAY.roa
File: RPePTl5wKt7jqWHlY_-xn0XVOAY.roa (raw, json)
Hash identifier: CofDbOLNnkotu0HyItm3YfjvyL04tkaE5WGp8GD/5I0=
Subject key identifier: 44:F7:8F:4E:5E:70:2A:DE:E3:A9:61:E5:63:FF:B1:9F:45:D5:38:06
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1501
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/RPePTl5wKt7jqWHlY_-xn0XVOAY.roa
Signing time: Tue 11 Feb 2025 23:44:14 +0000
ROA not before: Tue 11 Feb 2025 23:44:14 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17714
IP address blocks: 203.78.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 01:22:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5377 (0x1501)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 11 23:44:14 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=44F78F4E5E702ADEE3A961E563FFB19F45D53806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:37:72:c6:c0:3a:5c:08:ea:06:70:9e:51:6e:
f7:e9:69:ca:54:ea:97:9a:bd:67:36:dd:26:66:11:
4a:17:55:21:94:83:65:00:4e:1c:5a:c4:5f:7f:53:
7e:65:9b:1d:c3:7e:10:4a:36:3e:8f:3e:f1:06:c1:
13:a4:4c:e5:98:27:fb:4d:66:df:a5:17:cc:56:cb:
7b:02:24:7a:d4:c5:19:a5:f4:29:cf:6f:a3:6d:e6:
8e:d8:d0:33:7c:74:ef:7f:f3:f7:b9:2d:cf:43:ef:
e2:69:3c:6d:29:e3:43:0c:f2:09:d3:1c:a4:29:b4:
39:6f:8a:e6:27:6d:ea:d5:63:c5:a4:d6:73:8f:29:
32:7b:7f:0a:ee:26:90:8a:6c:e3:56:ae:5b:36:bb:
50:35:83:2f:76:3a:ed:87:1d:83:4f:b2:42:3c:c3:
8f:c7:ba:5c:dc:7b:13:7a:8f:52:45:b8:67:31:47:
1e:e4:13:92:8c:43:b5:c5:26:fe:be:18:0e:e5:3d:
8a:37:34:81:bb:44:30:96:0b:0c:fa:a2:8e:1f:ef:
5c:6a:36:48:84:d3:75:7d:9e:1a:66:25:12:78:ae:
ad:0e:42:77:6f:84:a0:d4:0c:41:4f:d3:7b:f8:45:
10:d5:07:63:1a:c8:20:29:94:16:90:e3:61:b6:8a:
b5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F7:8F:4E:5E:70:2A:DE:E3:A9:61:E5:63:FF:B1:9F:45:D5:38:06
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/RPePTl5wKt7jqWHlY_-xn0XVOAY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.78.190.0/24
Signature Algorithm: sha256WithRSAEncryption
67:44:72:98:23:a4:2c:6a:12:a3:ba:98:e2:b4:50:bf:63:a2:
8c:ac:02:e7:8d:ba:e6:93:93:db:b8:e5:18:8b:52:8a:25:4c:
43:f4:b2:80:29:f6:24:57:f8:52:75:8f:8d:88:71:db:c5:ac:
5b:b3:25:c4:31:72:12:da:36:bc:41:24:82:f6:1a:4c:0c:5a:
79:41:6f:77:ce:a9:05:84:5f:bf:54:3d:80:c8:02:ed:f7:95:
a9:31:66:68:79:c5:f1:52:97:1e:16:47:89:96:83:b5:0e:21:
77:c7:e5:b4:f8:f5:09:23:67:dc:30:a3:ad:0c:24:38:1d:69:
f7:13:6d:a7:e7:c4:a2:f6:e0:81:d2:92:d3:b1:75:d6:8b:66:
64:5a:a5:1d:95:db:71:db:46:14:b1:e5:1b:1a:66:f0:59:8b:
91:68:e9:1f:09:77:e9:ab:ad:e2:e4:d8:71:98:10:9c:43:36:
c0:37:b2:f6:b4:8a:e9:b6:50:cd:96:8a:14:98:d2:c3:0c:4b:
ca:87:33:8b:3f:f0:44:d0:de:b8:91:48:8e:4e:32:8e:cb:75:
7d:6a:51:44:89:c9:35:b9:a4:38:73:3a:d0:d8:dc:b9:8e:4a:
94:93:6b:dc:14:3d:08:fb:eb:b3:d9:cf:82:8b:2e:7b:c3:02:
e6:47:98:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:41:00 2025 by rpki-client