Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/UL1Ou7ldau1Qc5KUcY-ONr4tJYA.roa
File: UL1Ou7ldau1Qc5KUcY-ONr4tJYA.roa (raw, json)
Hash identifier: mKEsp263g+jTgeu/Mb7a3D1fGVnQr5IYWhS2+9HYSVU=
Subject key identifier: 50:BD:4E:BB:B9:5D:6A:ED:50:73:92:94:71:8F:8E:36:BE:2D:25:80
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1547
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/UL1Ou7ldau1Qc5KUcY-ONr4tJYA.roa
Signing time: Tue 11 Feb 2025 23:44:29 +0000
ROA not before: Tue 11 Feb 2025 23:44:29 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17421
IP address blocks: 111.70.0.0/15 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 01:22:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5447 (0x1547)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 11 23:44:29 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=50BD4EBBB95D6AED50739294718F8E36BE2D2580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:13:e1:a7:d5:2d:d6:f5:d2:ea:ac:66:b7:bc:
47:49:39:90:7d:fe:f7:1c:a9:f8:36:24:2c:82:aa:
2f:78:c8:83:b1:31:7f:15:0b:46:1c:23:ac:d2:3f:
0c:d2:02:d3:a1:b6:02:80:b3:ed:56:98:19:10:ee:
00:68:18:94:00:3a:ce:8f:a6:5f:af:0d:6f:3e:3b:
06:a3:13:91:1b:6c:ac:11:a6:19:79:43:c9:6b:06:
ef:a9:9f:40:b9:48:81:57:eb:b4:a0:8b:02:4b:d4:
4a:8a:c8:ae:1f:b4:3b:fe:03:22:b0:e2:5c:03:f0:
30:81:50:cb:f9:01:09:c7:63:bb:61:71:c6:51:06:
12:bb:06:aa:d2:f1:24:1b:d3:db:99:f8:85:b7:b4:
76:1a:67:e7:25:8e:64:21:67:4b:9d:6c:d5:d7:5b:
98:9c:a0:e8:e3:08:fd:96:87:0f:4d:e3:ea:cd:fe:
5a:ca:54:d9:25:54:cb:3d:c4:db:3e:88:9a:33:06:
f8:06:b4:9a:82:63:ed:55:51:eb:4f:8f:d7:3d:fc:
25:91:79:b5:fd:3d:79:25:7a:b9:d0:73:ad:fb:22:
a1:5e:ea:97:7c:ba:64:ba:a5:2f:40:2e:04:81:23:
14:74:2e:fb:09:68:52:6e:3e:98:4d:bf:ef:78:45:
63:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:BD:4E:BB:B9:5D:6A:ED:50:73:92:94:71:8F:8E:36:BE:2D:25:80
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/UL1Ou7ldau1Qc5KUcY-ONr4tJYA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
111.70.0.0/15
Signature Algorithm: sha256WithRSAEncryption
2e:e4:2f:2b:85:19:30:7c:6e:3b:da:a8:95:43:6f:3a:cf:91:
b1:e3:99:8f:fb:48:21:97:db:79:93:5f:de:1a:c1:d1:87:a7:
03:97:36:87:0b:c8:32:83:df:e3:24:c9:be:da:2e:87:8a:04:
6e:f2:75:31:1e:4b:cf:2e:30:d3:64:2c:11:6b:bb:94:f2:ee:
38:42:01:f3:eb:0b:c1:7f:10:3c:ca:c5:83:fa:f6:bb:20:fa:
3d:7b:8e:9a:0d:36:83:bc:1f:7a:4c:2d:76:d4:2c:ea:2d:99:
73:8e:58:8e:ef:82:ce:2a:ac:f7:ac:d6:f7:af:7a:8b:dc:37:
40:14:15:47:42:0c:7e:d8:27:29:b2:4d:62:4a:ad:75:73:52:
fb:f5:84:0c:93:a0:84:34:80:60:fb:94:12:f0:b6:20:d3:ed:
a2:2b:6d:49:db:5a:c7:05:73:14:5c:89:29:1f:80:59:44:d0:
f2:ab:e7:54:3c:1e:38:e7:05:01:61:e3:75:e4:55:ef:f8:f5:
52:52:d8:03:8a:f2:a6:56:b9:bc:84:80:83:70:76:f1:35:fc:
e9:99:40:65:68:5d:35:6c:c5:cd:28:99:ec:b2:93:cb:bd:39:
d2:f9:d1:3d:0a:e7:43:75:1d:bc:80:74:dc:23:90:e0:0e:c2:
32:d6:a2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:32:37 2025 by rpki-client