Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/YzA70YQWHRa4Iyg8v8m_M6sg6Ww.roa
File: YzA70YQWHRa4Iyg8v8m_M6sg6Ww.roa (raw, json)
Hash identifier: AHSp7v3sPUFpDcAxF6slFGFGbgWInWwKLo+fGNoGIJw=
Subject key identifier: 63:30:3B:D1:84:16:1D:16:B8:23:28:3C:BF:C9:BF:33:AB:20:E9:6C
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 11E5
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/YzA70YQWHRa4Iyg8v8m_M6sg6Ww.roa
Signing time: Mon 26 Aug 2024 05:18:03 +0000
ROA not before: Mon 26 Aug 2024 05:18:03 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 10126
IP address blocks: 220.128.56.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 20:35:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4581 (0x11e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Aug 26 05:18:03 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=63303BD184161D16B823283CBFC9BF33AB20E96C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:55:0b:d2:a1:89:15:0a:2d:ed:5b:e3:fa:1e:
5c:60:af:7f:1e:37:35:65:17:2e:0a:2b:7a:93:57:
e6:f4:37:3f:d8:0b:61:b0:30:3d:be:fa:a1:86:ca:
c2:78:14:d2:c1:60:85:4f:2b:76:6d:c4:29:c4:b6:
25:4b:62:b2:22:ad:b4:7c:56:06:fd:8f:96:b9:17:
52:4c:57:65:06:a8:10:07:cc:db:51:73:c9:ab:27:
b4:49:5f:8f:fe:0f:3e:93:c7:36:66:d1:85:15:bf:
94:e2:65:4e:d0:08:36:7e:25:18:3f:a2:d2:30:9f:
ad:8b:5a:94:ce:b3:e4:77:e6:ff:45:08:b4:6e:87:
47:5a:37:c1:47:44:de:a7:ce:df:6c:2f:1e:99:71:
a4:a8:e0:06:68:fc:fb:73:39:6d:9c:19:75:f7:52:
b7:4f:e6:2b:bb:fe:ef:9c:e1:f5:a7:50:02:5f:9b:
a0:50:c5:39:a3:d2:c7:ab:cd:2d:0e:05:bf:44:e4:
83:8f:cf:89:c1:15:fc:1e:ba:20:35:8d:29:4e:3a:
64:3e:e6:f5:ca:42:ca:ff:fa:5c:bc:97:fa:ff:ff:
f7:f3:f3:23:dc:fd:df:d4:13:76:6e:95:84:57:ff:
4d:0c:89:b5:ac:af:f3:b4:ec:fe:3d:f1:07:ad:03:
18:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:30:3B:D1:84:16:1D:16:B8:23:28:3C:BF:C9:BF:33:AB:20:E9:6C
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/YzA70YQWHRa4Iyg8v8m_M6sg6Ww.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.128.56.0/21
Signature Algorithm: sha256WithRSAEncryption
a6:6a:ed:89:c9:cd:c9:25:c3:be:35:e7:c7:7d:a9:cf:0f:a8:
0c:95:2f:ab:a5:ef:d4:9b:e6:4f:e6:3a:f5:0c:fb:42:0e:ae:
6b:5d:b3:33:5a:88:c0:c9:5e:f3:f0:94:5a:d9:2e:5c:48:67:
00:7e:1f:2d:1c:b4:a2:88:05:ea:1f:97:03:3a:bd:c4:a1:80:
cb:90:f7:9d:85:1e:e6:7a:cc:6b:95:a2:eb:f0:9a:ba:a9:df:
53:35:7e:d7:09:8b:72:2a:0c:81:38:01:74:58:ae:b1:ac:a0:
41:84:b4:ad:5d:de:e9:d6:4e:5c:8a:08:00:1e:b7:24:f6:62:
33:3c:af:ab:d7:6c:49:67:44:0c:25:3f:c9:a6:16:7e:f9:3d:
2c:5e:a9:d0:7d:ff:0b:85:cd:97:a5:c8:1b:23:2e:c9:9c:0c:
eb:29:17:37:9f:d0:1f:8c:28:80:89:df:21:86:93:8e:84:71:
07:99:72:64:78:9e:d9:f5:78:2b:30:03:a0:bd:95:8b:67:98:
66:9b:8b:25:33:92:05:72:b1:8c:01:c9:00:7c:50:cd:af:3d:
d3:20:d2:f2:69:11:8c:8c:25:15:b4:8b:3b:89:73:3d:f8:cf:
ae:93:bb:db:3b:1e:60:fb:96:b8:d2:ec:5e:21:cd:bb:77:7b:
53:f5:ab:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:22:19 2025 by rpki-client