Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/_0wt85mkSfc4Fctlkrfsd91PTgs.roa
File: _0wt85mkSfc4Fctlkrfsd91PTgs.roa (raw, json)
Hash identifier: I7iplRMUQwTG4qFv7XSZFiTO9RQtU6I47JHOPq/UuFA=
Subject key identifier: FF:4C:2D:F3:99:A4:49:F7:38:15:CB:65:92:B7:EC:77:DD:4F:4E:0B
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1191
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/_0wt85mkSfc4Fctlkrfsd91PTgs.roa
Signing time: Mon 26 Aug 2024 05:17:41 +0000
ROA not before: Mon 26 Aug 2024 05:17:41 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 142005
IP address blocks: 210.242.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 20:35:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4497 (0x1191)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Aug 26 05:17:41 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=FF4C2DF399A449F73815CB6592B7EC77DD4F4E0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b1:48:64:ca:a2:d7:07:36:52:14:ec:36:46:
e7:04:a2:4d:fa:82:f3:3f:e7:8c:3d:27:e0:3d:e9:
f1:f0:89:00:78:09:58:ed:e4:4f:45:70:e8:24:b5:
15:26:9b:ec:94:65:0c:61:23:05:48:2c:f8:a9:9f:
ca:8f:e2:1a:dc:ee:92:3a:d7:aa:e6:3e:6f:11:7c:
d3:ac:ac:d0:62:50:c7:59:4f:8e:d1:72:81:96:c5:
c4:28:35:a1:70:6f:bf:bc:b3:cb:02:8f:9d:c4:3f:
c8:2d:31:dd:dd:f8:c5:84:6c:a8:92:c4:79:0b:fc:
75:e9:3d:38:3f:0d:fb:28:7e:75:9b:4c:4c:75:0f:
1d:75:91:94:65:9d:ef:26:b3:21:43:89:5c:6e:05:
7c:53:06:68:20:23:3b:3b:a6:14:b0:f8:67:5f:00:
fa:93:51:91:93:90:36:24:17:f0:77:d0:f4:0c:82:
d2:e6:11:59:dd:9e:6d:71:33:26:96:a0:37:2f:59:
92:bf:6e:25:eb:9a:e7:00:f1:10:55:eb:55:6f:e5:
93:a8:f1:b5:8b:ca:e0:1e:c3:e9:67:5d:69:a2:32:
d6:6f:8c:96:80:f7:fb:ae:63:26:1c:70:54:73:15:
93:52:3f:e9:fb:4b:16:e6:8c:3f:83:e3:82:9b:a4:
c9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4C:2D:F3:99:A4:49:F7:38:15:CB:65:92:B7:EC:77:DD:4F:4E:0B
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/_0wt85mkSfc4Fctlkrfsd91PTgs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.242.186.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:0b:18:a7:43:1a:72:52:41:f6:cb:ae:a7:56:85:86:90:4e:
01:c6:e0:a0:d0:ef:51:99:fd:46:94:1f:b0:e7:15:d7:b2:17:
29:69:d3:7f:8c:ef:c8:d7:b2:4c:20:17:b8:28:4d:57:ac:f2:
80:97:21:b4:36:94:c6:85:7b:6f:fc:e8:b1:94:51:53:14:c2:
0d:31:79:0a:1b:e6:f8:9b:84:ae:ea:68:c4:97:a0:4a:3f:e2:
5a:3f:2d:37:97:f6:fc:e4:48:07:5f:f5:fe:76:20:72:f8:89:
c1:e1:6c:f2:d3:17:5c:13:fb:4a:a6:8f:4a:f2:a9:03:ef:94:
8a:b9:e4:bc:95:df:9a:6a:e2:aa:af:21:8b:30:69:d7:c2:8c:
61:3e:11:13:e8:c6:4b:95:9c:fb:22:b9:ca:a1:b3:53:85:f8:
67:b7:1b:e3:c6:c6:95:88:21:9a:d9:33:e9:ad:c9:6e:a5:66:
c8:66:3e:42:fb:ce:61:2c:4c:78:e9:f0:48:b1:90:68:2f:20:
a5:41:85:d2:b0:7f:c6:c9:56:f2:88:bf:ba:23:0d:f2:b6:f5:
fe:a3:d8:fd:f3:81:14:16:7f:9d:ef:52:2d:07:45:34:3a:a1:
e9:e3:cc:e4:5e:27:fb:7c:5c:c1:86:d4:21:d2:0d:62:af:df:
37:3e:f3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:32:12 2025 by rpki-client