Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/_YrXikJQp6avwOHOj2x2Si9slw4.roa
File: _YrXikJQp6avwOHOj2x2Si9slw4.roa (raw, json)
Hash identifier: OLNpaWvb4QL7EfMmDbCA/gbqITn+Z+FAjicYhQ0J3Rc=
Subject key identifier: FD:8A:D7:8A:42:50:A7:A6:AF:C0:E1:CE:8F:6C:76:4A:2F:6C:97:0E
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 14DD
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/_YrXikJQp6avwOHOj2x2Si9slw4.roa
Signing time: Mon 10 Feb 2025 14:35:21 +0000
ROA not before: Mon 10 Feb 2025 14:35:21 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 198949
IP address blocks: 210.61.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 23:44:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5341 (0x14dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:35:21 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=FD8AD78A4250A7A6AFC0E1CE8F6C764A2F6C970E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:71:97:20:ee:b2:f8:0b:ba:fc:05:8f:e8:30:
76:cf:61:65:5c:25:85:ac:c2:82:05:99:8d:f3:4b:
f0:21:dc:e0:e4:67:cf:84:43:30:8c:a4:a2:2f:85:
5f:a8:aa:bd:77:b7:a1:f9:7a:07:b7:69:5d:31:8d:
57:b4:65:39:c6:74:ad:0d:2f:5d:40:7a:21:3e:88:
50:cb:1b:39:58:24:39:0d:9d:32:a9:ab:c5:78:89:
17:40:1a:e5:66:87:96:16:16:a7:e0:6f:f0:2f:71:
d5:29:27:95:51:bc:df:70:49:55:cf:6e:00:27:d4:
4d:2c:b4:f4:88:9b:79:97:c3:47:23:8f:de:28:95:
8f:d0:7a:ec:ea:fc:2d:67:f3:38:fd:43:73:fa:0f:
44:88:2e:eb:5e:82:e0:70:87:98:24:23:df:d6:e0:
eb:80:80:8e:45:be:bc:79:cc:a9:7e:cf:1c:2b:00:
6a:30:c3:85:9f:04:e2:43:ec:af:d7:94:29:f0:66:
b1:49:a2:ca:de:3b:4d:e2:67:4d:c8:62:a4:68:c9:
c1:d9:f3:1a:1d:9c:86:55:92:07:e5:bd:ee:79:a5:
eb:a5:95:6b:c6:c7:25:d2:d5:85:2f:19:8d:e4:99:
43:b9:0c:ac:5c:99:7e:88:ff:4f:4e:d7:dd:1a:50:
0f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8A:D7:8A:42:50:A7:A6:AF:C0:E1:CE:8F:6C:76:4A:2F:6C:97:0E
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/_YrXikJQp6avwOHOj2x2Si9slw4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.61.3.0/24
Signature Algorithm: sha256WithRSAEncryption
91:bf:18:20:38:87:f2:43:2b:e6:a3:47:fe:55:0e:9e:b4:a2:
22:73:b0:b8:26:55:13:a4:b6:69:f2:8b:cf:61:29:48:43:5a:
bb:5e:25:39:71:cb:2a:eb:ad:da:ea:f0:4b:f5:46:e7:6c:9e:
c5:ed:71:56:16:cc:ea:2e:b2:0b:0e:2e:e9:1b:e8:26:bb:97:
ca:54:15:ee:3e:c3:c7:3f:28:80:33:05:a6:ee:00:2c:78:a6:
d6:61:6d:cb:26:8f:8a:a4:80:2c:d4:62:8b:98:c4:cb:ba:13:
35:93:b3:71:6a:20:00:03:b4:2a:c0:d0:aa:e3:f1:23:c9:88:
e1:14:c4:9e:71:ff:5e:f4:cd:bf:00:e8:89:33:55:8c:8c:8d:
7a:ce:19:f1:e4:04:f2:5b:11:49:21:9f:57:e7:b5:d0:c7:16:
c2:87:6b:31:96:7f:ae:d9:97:8c:38:11:70:8e:52:87:43:04:
30:b7:10:31:1e:76:40:01:a2:ca:d4:95:a8:2f:39:85:ba:aa:
e6:5c:c9:92:07:8d:4a:ae:e1:c3:81:ad:2b:4b:d7:0a:eb:3e:
3c:88:ac:7e:2a:50:af:97:6c:87:8a:97:da:13:46:35:b6:4f:
91:b1:e6:9d:37:96:07:0c:f4:00:66:2e:b0:35:87:f6:a5:0e:
c9:b9:05:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:31:37 2025 by rpki-client