Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/RkRrDy-h6-4wFv_0CFPODndsAAE.roa
File: RkRrDy-h6-4wFv_0CFPODndsAAE.roa (raw, json)
Hash identifier: +jYf5psgF0rcI/VE464vCKYpny9sERLcdeEwqpPY6gs=
Subject key identifier: 46:44:6B:0F:2F:A1:EB:EE:30:16:FF:F4:08:53:CE:0E:77:6C:00:01
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 11DE
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/RkRrDy-h6-4wFv_0CFPODndsAAE.roa
Signing time: Mon 26 Aug 2024 05:18:01 +0000
ROA not before: Mon 26 Aug 2024 05:18:01 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 142005
IP address blocks: 210.242.118.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 20:35:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4574 (0x11de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Aug 26 05:18:01 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=46446B0F2FA1EBEE3016FFF40853CE0E776C0001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:70:26:f5:dd:a6:38:02:3e:e9:d1:da:5c:0a:
03:7f:02:11:7c:d0:d3:cc:b1:19:f5:a7:ee:d0:19:
62:0d:71:04:41:8b:47:d3:af:23:f4:80:26:e9:09:
9c:36:f0:1a:03:bd:60:a5:11:f4:d5:89:73:22:16:
1e:41:16:08:4d:5a:34:22:24:a1:4a:5d:cb:cd:d9:
a3:43:dc:df:59:44:0a:ac:61:19:82:e3:8c:f0:9b:
d0:88:f6:0a:e0:f5:f1:d2:ca:a7:ba:15:92:87:43:
86:88:ee:40:90:54:56:cb:29:f0:75:45:b4:6e:96:
36:99:e1:52:4a:77:48:6f:74:9e:f1:17:bc:c7:16:
7b:1f:45:4f:ce:c7:1b:54:bb:85:1e:80:2b:f5:61:
48:3d:14:1a:26:0a:99:b4:5e:90:5c:85:7c:64:98:
40:56:1d:41:66:b0:7b:a0:2b:b1:0b:3d:14:84:c0:
19:9c:07:af:eb:c1:aa:7c:d0:02:66:92:44:f7:cf:
ca:11:11:24:a5:c0:79:17:3c:fb:fd:22:45:36:2c:
cb:9c:5d:b1:37:b9:3d:70:7a:99:89:61:68:5a:dd:
fc:f0:74:e0:90:d4:0b:e4:95:05:55:95:07:9f:fd:
f9:b9:96:a1:bf:76:49:2b:d9:d6:a3:42:29:11:5f:
65:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:44:6B:0F:2F:A1:EB:EE:30:16:FF:F4:08:53:CE:0E:77:6C:00:01
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/RkRrDy-h6-4wFv_0CFPODndsAAE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.242.118.0/24
Signature Algorithm: sha256WithRSAEncryption
48:9a:a2:29:8d:81:a1:53:31:60:a0:88:e7:bc:f0:98:a8:2e:
c3:96:d8:e0:b9:fd:f2:f6:7d:fd:c2:ee:cd:5a:da:7c:6c:0e:
ba:13:50:84:ba:14:49:d1:dd:79:a7:b1:7f:31:b1:90:83:60:
01:8f:a1:9b:ca:6d:4b:d5:0d:76:c9:66:31:61:f7:79:84:bc:
90:8c:90:fd:33:47:36:3e:9b:c2:0d:9c:07:cf:bc:4f:a1:94:
d8:fc:df:bc:1d:fd:99:bb:eb:f8:3e:81:74:1c:8c:22:d2:11:
8f:9a:49:b4:0f:62:c2:18:31:2f:d3:8b:7b:25:cb:50:5a:8e:
60:e9:a3:f7:15:08:d3:87:15:80:3e:ea:1c:47:8a:9d:7c:35:
54:a8:75:95:78:6a:2b:8b:75:97:00:a5:e2:e7:38:a6:6b:a4:
21:36:c9:3d:73:60:20:1d:a1:4d:e9:d8:4b:e3:65:fe:60:69:
e2:78:64:50:13:22:da:ee:5d:0f:00:2f:de:cc:d4:4f:31:5b:
29:11:60:ee:65:dc:32:a2:27:c4:c3:82:52:fd:ca:1b:52:62:
7f:5f:c4:18:34:8a:d9:a7:2a:34:82:b1:77:2b:f5:2d:77:90:
25:2d:25:a2:42:78:60:66:d8:90:21:eb:b6:be:4a:eb:d2:aa:
d8:90:13:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:38:42 2025 by rpki-client