Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/_OoO_o4K00qfp8HIX0m8UaUh6wA.roa
File: _OoO_o4K00qfp8HIX0m8UaUh6wA.roa (raw, json)
Hash identifier: NIhf8i3CsrbHwysgKXVUYZhNFMiYJoLYody9cdaIme0=
Subject key identifier: FC:EA:0E:FE:8E:0A:D3:4A:9F:A7:C1:C8:5F:49:BC:51:A5:21:EB:00
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 152C
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/_OoO_o4K00qfp8HIX0m8UaUh6wA.roa
Signing time: Tue 11 Feb 2025 23:44:23 +0000
ROA not before: Tue 11 Feb 2025 23:44:23 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 33717
IP address blocks: 220.128.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 01:22:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5420 (0x152c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 11 23:44:23 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=FCEA0EFE8E0AD34A9FA7C1C85F49BC51A521EB00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a2:87:65:80:84:f8:c4:16:a8:20:ea:d3:0f:
79:43:57:50:a2:e9:d5:21:2a:7a:84:0b:16:7c:01:
d8:92:4b:3f:d5:99:f1:56:8a:ce:17:9a:fa:1f:d8:
a8:a2:1c:18:5d:5e:4d:c8:2f:c7:ff:c9:88:f4:72:
03:b2:c0:4d:04:d7:60:d5:85:bc:27:ab:ae:bd:44:
1f:f1:41:57:0b:56:45:f8:35:cb:53:76:6e:6a:ea:
79:cd:b1:f4:79:17:d4:8a:5d:9d:c2:a9:2f:2b:db:
50:7b:3e:c8:f3:24:68:49:44:76:09:06:83:57:4e:
3b:5d:02:1d:96:7c:68:6e:66:b0:7e:9a:98:98:d8:
6c:13:09:cc:fd:c3:92:60:3e:5a:93:12:d5:a8:48:
b8:ce:85:ba:e0:d2:45:ee:cb:f6:81:5e:69:32:e8:
b9:97:fc:61:3f:3d:6a:41:67:60:17:e0:6f:52:e2:
93:22:37:ea:3a:2a:b7:9c:84:ef:63:57:a9:ea:81:
82:0f:e1:9e:30:5f:94:9e:67:cb:6f:10:d3:fb:e1:
ac:d2:c0:5b:e6:ff:2f:e6:f9:ad:c9:75:2b:eb:ae:
0f:75:05:ca:66:a7:19:b0:b0:b7:8d:1c:61:b9:84:
82:11:04:15:57:32:ab:ca:bc:14:2f:20:5c:c6:70:
49:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:EA:0E:FE:8E:0A:D3:4A:9F:A7:C1:C8:5F:49:BC:51:A5:21:EB:00
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/_OoO_o4K00qfp8HIX0m8UaUh6wA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.128.51.0/24
Signature Algorithm: sha256WithRSAEncryption
92:37:b5:53:38:ec:e4:ea:96:d1:7e:0b:c9:16:2e:e7:4c:80:
92:99:30:ba:99:ce:dd:a4:19:ad:0f:01:da:7c:14:e4:3c:2e:
52:77:ed:e3:36:84:bd:24:72:e7:9a:d9:be:5f:9b:66:6f:5a:
a2:f0:c7:15:b5:e4:54:e3:24:f6:c1:6a:00:d0:cf:1c:56:25:
5c:93:9e:3b:eb:52:f2:25:a0:a8:40:bf:02:65:d0:93:67:de:
75:3a:e5:fc:a3:8b:bf:a2:a2:20:4d:26:f9:fa:b9:12:b3:ff:
3c:b0:db:8c:8e:d6:90:7f:4c:6e:ae:14:64:68:94:d1:14:91:
23:0d:aa:6b:19:53:1d:a5:bb:9b:b5:25:53:3f:c3:d3:da:90:
0a:98:d1:78:a9:c7:12:62:4a:c2:e4:f8:82:37:4f:06:69:88:
ad:96:be:a4:39:86:f7:9c:3c:f9:03:ea:d3:c8:29:0a:ad:d4:
45:c2:fe:41:8b:7f:42:64:4f:8c:27:8e:4d:e0:0c:da:14:20:
a4:b2:7d:be:53:07:16:fc:e0:40:59:3d:64:2a:c5:23:59:8b:
19:8f:8f:46:23:37:60:a6:9c:89:12:bd:3e:a3:6e:2e:4e:ba:
c6:69:9e:82:14:cf:1c:ec:df:09:67:ba:dc:33:be:b9:3c:7f:
68:36:3a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:16:08 2025 by rpki-client