Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/ZtgvWvvdXY3wCojer--zGWs1AGI.roa
File: ZtgvWvvdXY3wCojer--zGWs1AGI.roa (raw, json)
Hash identifier: /c+JFjlQ7Mlc7INgBMJjLfmVHAfVBiDy+JbyLoXpcBY=
Subject key identifier: 66:D8:2F:5A:FB:DD:5D:8D:F0:0A:88:DE:AF:EF:B3:19:6B:35:00:62
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1593
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ZtgvWvvdXY3wCojer--zGWs1AGI.roa
Signing time: Tue 11 Feb 2025 23:44:45 +0000
ROA not before: Tue 11 Feb 2025 23:44:45 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9505
IP address blocks: 175.41.48.0/20 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 01:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5523 (0x1593)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 11 23:44:45 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=66D82F5AFBDD5D8DF00A88DEAFEFB3196B350062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:40:6d:5b:b1:6a:e7:ad:ba:e8:b9:87:d4:47:
60:45:a8:0c:09:37:92:4c:a0:52:c0:1b:d6:a2:64:
80:9b:56:0e:7e:3d:89:35:0d:09:d1:29:b9:3c:90:
32:32:1c:4f:a8:9c:69:d6:4c:7b:c7:9a:9a:2f:65:
d1:a1:9e:df:bb:30:c5:77:43:f6:ae:6d:36:4a:45:
32:eb:4c:44:8d:f2:f9:66:57:ac:90:6a:76:05:4c:
57:31:39:c4:b9:3d:db:d3:d1:37:fb:72:24:91:cc:
e2:d7:48:1a:ca:63:5b:ea:af:75:4a:1c:0f:05:83:
45:70:3e:51:5e:8e:65:7b:44:bb:6e:1d:48:df:0b:
96:9f:87:97:08:c4:3c:ed:b5:74:f4:be:e4:89:e8:
0f:8c:6a:28:ba:64:6b:05:ad:62:e6:0b:1a:af:5f:
a8:1d:b1:df:96:ca:b3:f7:20:07:df:24:14:b2:c9:
c5:93:d1:63:f8:4f:21:b5:e3:d3:3a:0a:9a:2c:01:
1e:97:9a:38:4a:08:2b:d1:7c:24:1e:ec:bc:da:65:
d7:e4:5a:e0:ad:ed:e8:a6:2b:5f:03:7d:d9:ac:3f:
29:da:f2:91:34:aa:a6:55:d7:98:e2:81:e4:bf:f0:
16:c8:3c:b8:08:06:98:4a:7c:b2:3e:85:30:f9:22:
2d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D8:2F:5A:FB:DD:5D:8D:F0:0A:88:DE:AF:EF:B3:19:6B:35:00:62
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ZtgvWvvdXY3wCojer--zGWs1AGI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.41.48.0/20
Signature Algorithm: sha256WithRSAEncryption
4f:64:29:71:68:db:55:b2:cb:7c:75:26:95:5a:27:f0:bf:e7:
1d:18:9d:f1:00:2c:3c:0b:d8:80:1a:63:a7:c8:6a:be:fd:31:
b4:2f:38:97:0d:e8:ee:66:3b:6f:50:4b:bb:d2:b9:77:81:d5:
22:40:d2:df:ee:4a:ce:c2:c8:58:02:09:3c:bd:11:30:b0:f5:
d7:f4:d5:83:80:ee:50:a6:13:68:c9:bc:a2:dd:bc:a1:96:7e:
79:f2:16:ae:d2:c2:b7:1c:b4:6e:81:82:fb:fa:f5:be:f9:83:
cd:68:e5:1e:f0:26:11:6f:25:bf:84:de:8c:13:40:54:eb:c8:
54:88:48:42:1b:0b:82:85:e8:85:9e:d5:5d:34:6b:72:22:c5:
7f:de:7a:5d:13:97:97:20:67:97:50:b8:e8:fb:7a:e6:e4:f4:
90:c5:f8:ac:b7:e4:e1:aa:8f:9a:50:74:e9:68:22:72:f0:8a:
0e:36:4e:9c:a2:bf:d5:44:f1:94:a0:1a:b6:01:a2:e0:ef:fe:
a9:f9:d8:e4:1c:bd:eb:d7:e7:1f:c7:50:1b:0f:36:da:ca:a2:
29:ca:57:ff:31:51:c1:28:d7:c6:23:e4:a4:d0:dd:78:11:0d:
af:ee:59:9d:d1:b3:18:9f:d2:35:3d:39:48:f6:33:62:f8:00:
d1:0e:90:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:21:49 2025 by rpki-client