Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/SK1FtiAKarnir9FWaJgHyZC_w_U.roa
File: SK1FtiAKarnir9FWaJgHyZC_w_U.roa (raw, json)
Hash identifier: QsnWZ11fOIctUR8gUJ7YqZLMQWzmPghz/c3KGuZr7Rs=
Subject key identifier: 48:AD:45:B6:20:0A:6A:B9:E2:AF:D1:56:68:98:07:C9:90:BF:C3:F5
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1512
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/SK1FtiAKarnir9FWaJgHyZC_w_U.roa
Signing time: Tue 11 Feb 2025 23:44:17 +0000
ROA not before: Tue 11 Feb 2025 23:44:17 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 221.120.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 01:22:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5394 (0x1512)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 11 23:44:17 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=48AD45B6200A6AB9E2AFD156689807C990BFC3F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:71:b7:2a:5a:34:f5:1d:8a:26:63:37:9c:7c:
8b:01:d7:5d:9b:a4:cb:48:c0:bc:87:5e:35:ac:0b:
03:d0:7d:e2:c8:94:c1:73:ab:62:cc:1f:b5:b2:21:
a4:95:a7:12:95:f4:c3:2f:69:67:17:39:aa:43:ed:
fa:20:31:0b:2d:f9:0d:5d:51:2e:0b:cf:07:00:31:
65:af:4c:c8:b7:7c:b2:3e:d0:fd:56:75:f4:d1:a7:
95:3f:c0:4f:26:b1:cd:8a:0c:33:fe:49:ce:2a:b1:
87:63:f9:bf:1d:fe:18:6d:03:0b:c9:24:cf:09:46:
25:0c:e7:8d:61:90:ce:9e:b3:68:ce:1c:38:b8:76:
4a:61:ed:b7:f4:c4:89:e4:9d:b6:76:ce:4e:78:0b:
f7:5e:70:12:5e:a1:2c:53:a5:4a:36:19:74:81:2f:
f8:c3:95:05:ad:67:74:eb:52:65:72:db:72:81:fa:
16:40:35:43:6c:13:28:ae:27:8d:a9:6c:0f:84:2d:
ec:c8:aa:41:4d:50:4a:4b:77:5b:50:58:fd:5a:a4:
86:4a:77:67:83:e8:74:84:48:1e:e8:56:43:14:f5:
b9:eb:d4:f1:4b:5b:ca:7a:74:c2:0d:a7:1a:eb:80:
9b:29:03:f0:20:e6:6c:db:b2:ce:e1:92:de:0c:fc:
2b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:AD:45:B6:20:0A:6A:B9:E2:AF:D1:56:68:98:07:C9:90:BF:C3:F5
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/SK1FtiAKarnir9FWaJgHyZC_w_U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
221.120.25.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:99:47:7a:4a:9f:80:cb:38:76:31:5a:19:7a:40:b1:50:47:
1b:45:83:5f:b4:c0:be:1b:7d:8c:f1:08:b2:ed:7f:a5:cd:87:
99:ee:2e:38:7d:54:5a:0a:56:ca:94:9b:11:1a:4c:04:05:26:
95:25:d6:cd:8a:84:02:16:38:e7:61:3c:a9:14:92:87:e7:02:
1f:bc:cb:d4:ac:1a:47:52:82:ad:92:67:31:12:20:f1:55:92:
25:1d:e1:af:38:cd:29:86:7b:1c:ef:5b:20:a0:7a:e3:58:19:
07:c0:97:1d:6c:c8:b6:8c:45:cc:b9:8c:dc:0f:ba:8c:e3:80:
84:e1:ab:0b:88:9f:2c:0b:21:5c:f1:c4:e7:28:9c:7f:42:e3:
4b:92:17:a2:dd:67:81:4c:1b:22:6e:51:05:26:37:77:d0:a0:
d4:78:d8:a9:f3:bf:e7:79:c7:a4:c3:f9:08:3b:43:71:3c:65:
f5:b8:1a:71:91:c2:c5:da:c1:fc:d6:f7:28:6a:66:b1:ca:d5:
9a:9a:04:d7:b6:ca:10:f2:fb:e8:98:ad:99:bb:65:d2:58:bd:
a8:3c:a3:7e:83:84:fa:75:9a:9a:20:e7:0f:e3:69:8e:d8:4b:
b8:bd:5d:da:2a:08:55:fd:7f:9d:5c:a4:aa:c0:29:74:4c:46:
3d:8e:d4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:35:40 2025 by rpki-client