Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/Z3dGyVitEfruGSDNWBBcmPx50_0.roa
File: Z3dGyVitEfruGSDNWBBcmPx50_0.roa (raw, json)
Hash identifier: TK7pxDLUQpv6L9ObMad0x/cHjqBiY3Yzc4bFCGMrSoI=
Subject key identifier: 67:77:46:C9:58:AD:11:FA:EE:19:20:CD:58:10:5C:98:FC:79:D3:FD
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 11FB
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Z3dGyVitEfruGSDNWBBcmPx50_0.roa
Signing time: Mon 26 Aug 2024 05:18:08 +0000
ROA not before: Mon 26 Aug 2024 05:18:08 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 218.168.0.0/13 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 20:36:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4603 (0x11fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Aug 26 05:18:08 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=677746C958AD11FAEE1920CD58105C98FC79D3FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:57:71:a7:5b:ca:82:84:a6:87:f4:8c:41:c0:
4b:4d:01:b3:f4:4f:e0:c7:b3:be:16:62:ac:27:d4:
39:78:6d:3d:1f:d1:4a:e8:3b:b3:bb:70:b1:5e:19:
5e:c1:4b:04:97:28:d4:f3:50:bc:2f:32:fb:93:61:
2b:81:d1:4c:0b:9a:5c:19:ef:b8:16:76:97:6c:0f:
5a:51:92:8d:88:fc:4a:a6:3e:c2:2b:a8:78:a5:83:
cd:0d:ab:d3:ea:87:cd:2b:11:65:58:0b:cd:61:a1:
4d:2e:96:88:f4:d6:7c:6a:35:13:a7:6d:fb:7a:0f:
12:99:96:a0:b9:89:e3:8c:f3:88:92:f2:1b:b7:c2:
f6:75:c7:5a:71:64:34:c0:17:ab:44:4d:df:97:2f:
52:cd:d4:f0:34:df:7f:df:e8:da:90:23:ac:b5:be:
84:d2:3f:c7:39:d2:1a:60:8c:28:ca:99:33:f2:98:
33:96:df:ca:6e:19:ca:d7:b7:dc:d6:3c:b3:02:af:
59:7c:b9:a4:2c:54:e1:f2:e3:06:c0:3b:8d:18:c3:
84:c4:cc:e9:bc:44:20:fb:e6:16:a3:d0:75:a0:26:
25:b6:75:f3:e1:97:d4:c2:73:83:63:03:b3:7b:b9:
ae:65:15:6e:7b:72:f4:3e:21:29:2e:e5:21:16:a6:
c2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:77:46:C9:58:AD:11:FA:EE:19:20:CD:58:10:5C:98:FC:79:D3:FD
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Z3dGyVitEfruGSDNWBBcmPx50_0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.168.0.0/13
Signature Algorithm: sha256WithRSAEncryption
3c:8a:ec:83:71:57:be:f2:fb:ca:a7:13:8f:8b:4e:fb:d8:a9:
b3:dc:57:72:ca:56:b5:f7:e9:5a:2a:8a:9b:0c:d7:7d:1c:37:
62:12:58:35:80:9f:9d:eb:b2:04:5b:d3:75:e1:6e:7d:ee:de:
ad:a9:81:7d:15:94:da:21:13:21:e7:5a:91:36:e8:e8:00:90:
5e:ee:a7:c8:ee:84:30:16:79:8c:4f:e9:8b:5f:a4:8e:05:5b:
ad:fe:89:e4:69:a6:6b:84:b0:ad:ef:0a:4d:76:19:5c:e9:07:
42:ef:e4:50:4d:9d:3c:19:38:e0:ff:e7:a2:2b:c7:e0:75:0b:
9c:2a:ff:d9:d7:a2:88:be:e2:6d:83:d9:1f:98:0f:f2:28:b2:
68:df:db:b3:32:62:eb:cd:c8:a8:a0:a6:77:81:2b:6e:12:1b:
c9:5d:05:59:0c:b4:19:15:2f:55:74:ae:67:a6:2b:96:f4:f7:
ba:5f:30:35:e6:fd:6e:e3:83:8f:85:c4:8a:b5:72:a7:f5:62:
93:cf:2c:25:71:c1:37:ba:17:d1:5b:d7:78:19:2e:7a:76:3d:
d8:d5:fd:ed:37:6a:5c:42:88:15:b2:ba:3e:5c:f8:ca:a9:4a:
8d:cf:cd:0a:99:93:e3:90:fe:60:40:bc:ac:7b:7e:b0:94:e7:
19:76:19:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:26:53 2025 by rpki-client