Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/W4qgig8lZ4VlSmjAzUEHp1lDFpI.roa
File: W4qgig8lZ4VlSmjAzUEHp1lDFpI.roa (raw, json)
Hash identifier: 9oO4cD8xgFJP6huedjf1IkiXtKVe4qfOtjmV2PWUuig=
Subject key identifier: 5B:8A:A0:8A:0F:25:67:85:65:4A:68:C0:CD:41:07:A7:59:43:16:92
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1476
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/W4qgig8lZ4VlSmjAzUEHp1lDFpI.roa
Signing time: Mon 10 Feb 2025 14:34:56 +0000
ROA not before: Mon 10 Feb 2025 14:34:56 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 36040
IP address blocks: 202.39.67.128/27 maxlen: 27
Validation: Failed, certificate revoked on Tue 11 Feb 2025 23:44:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5238 (0x1476)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:34:56 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5B8AA08A0F256785654A68C0CD4107A759431692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c5:f6:f2:39:31:f6:ed:0b:5e:be:37:b2:27:
76:a4:de:10:87:9c:b0:cb:aa:2c:e3:dd:76:0f:1d:
b7:2b:cc:8b:86:95:1b:1d:f1:b5:9a:11:ec:e1:68:
86:62:f1:52:9d:5e:a3:f2:15:cb:26:d1:cc:9c:b2:
9b:ce:0f:b7:35:18:d6:b1:4c:3d:3e:0d:48:a1:d1:
ef:aa:ac:47:a6:60:2a:de:e7:9e:e8:53:f0:9c:80:
7a:fc:a7:f9:5f:76:20:9f:2c:6e:3e:cd:56:e0:95:
25:db:a5:6c:7a:d6:53:ce:5d:ed:96:d8:d6:81:a1:
af:7d:9c:b1:cc:08:2a:0a:59:1a:5d:ce:a1:b2:bb:
5f:e9:49:b3:41:f6:cb:72:d8:fd:3d:7b:46:59:7d:
50:b9:da:4b:ac:79:41:83:62:dc:11:0a:a7:6c:ec:
bb:8f:d2:39:31:1f:e9:61:fc:d2:79:ad:3c:99:8c:
1b:8d:a4:72:78:e0:72:82:82:3b:6b:ac:54:46:d5:
0f:6b:a6:5c:a1:31:03:0b:60:ab:23:a5:27:62:56:
d2:bd:f6:97:01:2a:eb:fb:11:48:a7:ab:bf:7a:c4:
2a:ee:9a:51:3f:1a:36:11:cf:59:92:f7:86:20:45:
e6:be:24:0c:6e:65:f7:24:ab:07:b2:85:b0:51:1a:
a0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8A:A0:8A:0F:25:67:85:65:4A:68:C0:CD:41:07:A7:59:43:16:92
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/W4qgig8lZ4VlSmjAzUEHp1lDFpI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.39.67.128/27
Signature Algorithm: sha256WithRSAEncryption
56:f3:68:18:ea:7a:d3:61:99:f1:53:2a:31:f9:f6:86:eb:9d:
44:7e:28:30:87:e6:6c:63:b8:2d:09:00:1c:3b:47:fa:ec:82:
75:fd:27:e2:66:92:a9:cd:03:6a:2d:ca:f1:6b:7e:80:64:0d:
6b:1b:fa:0c:04:69:7f:68:15:65:e2:a2:8a:fe:e5:d1:bd:16:
29:d4:e7:f4:85:a3:08:20:4d:ba:60:0b:75:83:24:fc:ef:e0:
e0:8a:9a:b0:0c:f5:8e:8d:5f:4f:c9:49:d9:40:67:38:a7:85:
7c:fe:51:86:df:96:af:44:be:af:80:bd:5e:39:dd:03:66:05:
fc:dc:db:fb:98:f9:e9:08:b9:71:0e:9f:ce:75:3b:fb:00:de:
4f:f3:d7:ae:82:50:df:1b:22:d1:ff:b0:84:46:ba:82:95:bd:
04:28:f4:cc:b3:80:d4:6d:39:29:7e:c2:43:62:bd:63:f7:47:
0d:dd:84:90:d7:79:64:dc:ef:84:35:e0:3b:dd:ae:6a:0f:6a:
9a:a1:51:8a:04:b2:ee:f4:9a:96:0b:c7:cf:f7:ee:67:c4:7f:
9e:0f:e6:cd:fe:7a:ae:c5:cb:26:e0:4f:49:4e:fb:36:64:33:
18:28:ec:2a:51:cc:8e:36:d3:04:d3:17:2f:28:22:b3:c4:dd:
9b:29:63:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:33:47 2025 by rpki-client