Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/WvWdyp6LEGocDZs_AmiC_QbS4b0.roa
File: WvWdyp6LEGocDZs_AmiC_QbS4b0.roa (raw, json)
Hash identifier: AAUZbK9rdMGG9y5LrrtmhDGSg/aHYhcq0CPzVUuAxJs=
Subject key identifier: 5A:F5:9D:CA:9E:8B:10:6A:1C:0D:9B:3F:02:68:82:FD:06:D2:E1:BD
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 11A8
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/WvWdyp6LEGocDZs_AmiC_QbS4b0.roa
Signing time: Mon 26 Aug 2024 05:17:46 +0000
ROA not before: Mon 26 Aug 2024 05:17:46 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 203.160.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 20:35:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4520 (0x11a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Aug 26 05:17:46 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5AF59DCA9E8B106A1C0D9B3F026882FD06D2E1BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:72:e5:59:07:26:92:ad:89:5a:f1:43:72:d9:
5e:18:56:45:68:c1:5b:5f:2f:f5:42:98:f7:12:05:
20:e5:dc:0b:26:ca:99:d4:8a:23:ce:e0:40:7c:5e:
40:11:59:4b:09:13:f9:59:bf:ff:2f:42:76:c3:fc:
99:16:a0:89:c1:63:1d:02:b9:8c:6b:84:66:16:fb:
f7:58:c8:0b:4b:e7:fc:c9:80:de:0a:6a:41:58:14:
e3:79:0f:a6:cd:ac:14:97:fc:63:4d:cf:74:f5:1a:
22:ca:79:b8:c5:80:e3:85:20:fe:6b:00:50:ca:b3:
2e:d9:0c:e6:52:0c:70:16:e8:3b:13:6b:2f:1c:78:
1d:ef:c2:8c:cd:5f:70:7b:3f:3d:06:24:a6:eb:f4:
80:4e:6f:4b:79:81:5a:af:f2:da:9c:90:1d:3a:53:
fa:c7:ff:8e:f5:ee:5d:91:52:14:92:6d:b4:4e:cb:
7e:7b:22:79:55:78:ef:6e:97:79:f3:08:69:ef:91:
cb:98:0c:32:0a:54:c5:61:b6:77:d6:2e:c0:5c:82:
63:ca:41:36:76:94:f7:87:f8:ef:45:09:78:f8:11:
67:4a:16:4b:45:0f:70:05:b4:88:90:ac:ac:59:2c:
ba:f1:2f:51:ea:2d:1e:5e:3d:8b:e1:30:9d:ec:5a:
f2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F5:9D:CA:9E:8B:10:6A:1C:0D:9B:3F:02:68:82:FD:06:D2:E1:BD
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/WvWdyp6LEGocDZs_AmiC_QbS4b0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.160.242.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:82:52:90:4d:8f:1d:18:4a:23:ae:48:a7:1f:bc:28:45:87:
ea:ac:a6:47:81:c8:aa:ea:1a:06:44:39:fa:44:41:d9:43:69:
8b:cf:98:37:c2:91:4c:4e:de:f3:c8:e2:3f:c5:c2:46:27:fb:
00:75:e3:f7:89:fb:37:37:a1:3b:1e:7f:ad:44:91:f9:aa:06:
f8:49:fb:91:5c:b5:23:04:a6:4a:71:8e:a5:67:d2:74:10:9b:
a2:e9:3b:4d:89:10:72:27:92:43:7e:67:05:7e:0d:73:36:76:
55:55:e0:f0:9b:e5:97:31:4d:57:29:0b:cd:e2:8c:7f:a5:a1:
a8:b5:09:fa:70:0c:a8:22:89:2c:43:66:c7:22:77:b0:0e:11:
a8:bc:95:c8:30:1b:ba:3c:09:d5:5d:34:be:df:18:e3:e6:f5:
b0:00:c1:4a:f7:47:e3:6c:8a:61:dc:d2:5b:a4:5b:d1:a4:2f:
f4:64:e3:90:ba:d6:3e:59:6e:81:3b:bf:6c:75:2a:ad:55:6d:
5a:94:65:ac:52:ae:50:41:51:06:fa:24:69:53:eb:82:bb:bb:
7d:a4:17:76:42:62:a9:0f:b5:b1:91:70:79:c9:e5:6a:cc:c6:
92:20:4a:7e:fb:9b:e3:9e:7f:6e:a4:9a:f5:c8:0d:f2:0f:e8:
5e:eb:8b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:28:31 2025 by rpki-client