Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/Wq2fISh6RMF3-padrb4x2Y5LgnE.roa
File: Wq2fISh6RMF3-padrb4x2Y5LgnE.roa (raw, json)
Hash identifier: O/b8U3qDm9UK66nwThKZ3hYf1oRqmQUJkFCLSL/YlX8=
Subject key identifier: 5A:AD:9F:21:28:7A:44:C1:77:FA:96:9D:AD:BE:31:D9:8E:4B:82:71
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 11F0
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Wq2fISh6RMF3-padrb4x2Y5LgnE.roa
Signing time: Mon 26 Aug 2024 05:18:05 +0000
ROA not before: Mon 26 Aug 2024 05:18:05 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 198949
IP address blocks: 203.75.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 20:35:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4592 (0x11f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Aug 26 05:18:05 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5AAD9F21287A44C177FA969DADBE31D98E4B8271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4e:6e:20:82:42:9f:f3:b7:b2:80:fe:6a:3f:
45:df:f4:8c:1a:28:e5:d9:e0:fe:3a:0d:50:d8:d6:
3b:7f:57:51:50:e9:12:e3:c1:cc:c9:9d:7c:e5:d5:
cb:7a:5d:76:6a:2f:0c:53:80:f4:10:97:3d:f9:ee:
4a:59:b7:f8:3a:e3:41:2c:21:ab:84:fa:ca:80:d2:
b0:51:16:ce:62:f3:ab:49:f0:be:f6:2d:90:63:cf:
0e:49:03:17:25:3b:bf:71:c7:87:20:e3:bf:25:36:
b3:03:8b:f7:df:54:dd:46:91:68:cc:83:47:14:17:
1e:73:3f:d1:16:cd:58:c9:87:e6:42:7f:0b:b5:32:
55:c7:71:1e:22:8b:0d:1f:6e:b6:b2:6c:be:70:43:
f5:dc:fc:6b:fa:28:3b:c7:2b:f3:77:ca:76:ec:ab:
42:c0:75:90:0d:06:59:bc:97:1a:1c:20:74:c8:57:
a2:1d:46:d7:36:b4:7c:39:a6:26:ab:40:45:56:57:
f7:9e:c7:9a:b7:86:28:24:b4:bf:a1:a0:52:d6:8b:
89:16:b7:db:e1:b4:21:9a:09:1b:5b:89:d0:4a:d5:
41:57:e9:d1:d7:05:b7:99:7e:3f:e3:27:13:c0:ff:
9e:5c:d9:b6:53:00:ca:cb:24:52:7c:0f:a6:a7:48:
0c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AD:9F:21:28:7A:44:C1:77:FA:96:9D:AD:BE:31:D9:8E:4B:82:71
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Wq2fISh6RMF3-padrb4x2Y5LgnE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.75.255.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:cf:8a:b8:d2:65:b3:47:0b:b3:7d:f7:56:90:87:6e:64:b3:
d3:52:53:ce:b9:0e:c9:12:54:a4:a1:6b:21:d0:fd:bc:8d:7a:
b0:1c:6c:95:c1:f2:01:fa:ba:30:1c:3c:a7:12:6c:4e:29:11:
cd:62:50:e2:bc:72:79:40:46:d3:8e:c2:f3:45:b3:f3:08:07:
f2:91:e1:89:fa:2a:32:70:75:3f:24:df:81:99:37:5e:ee:2a:
c8:ff:e1:d6:5f:9d:b3:27:54:3e:74:9b:68:e9:fc:4d:9c:f3:
f0:78:4b:ae:20:e8:48:aa:5a:ab:e6:4d:ce:3b:6c:f8:c8:29:
31:75:40:b1:ef:71:fa:05:b4:e5:b4:db:bf:20:8e:34:6d:a2:
65:5a:b5:fc:7b:c0:ad:c0:84:e9:39:51:ed:22:b8:4c:96:16:
c0:0a:21:a5:3e:87:0c:e1:39:3d:ba:3a:e6:9f:4a:1d:57:86:
80:8a:0d:18:a9:9f:ed:0c:a7:98:19:93:97:1e:5b:df:62:2f:
42:e0:3a:b9:c4:8f:75:b5:ff:8e:f9:23:2d:7e:31:8f:bf:86:
ad:dd:50:2c:26:47:8c:27:9e:37:86:90:b5:4f:13:dd:9f:68:
0d:00:b3:2d:84:4b:ce:2f:4f:0b:d0:67:68:85:ae:0f:9a:8b:
0a:ad:3d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:13:07 2025 by rpki-client