Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/_j_zp6ltoWLG5h4SSq7Ib92Zopk.roa
File: _j_zp6ltoWLG5h4SSq7Ib92Zopk.roa (raw, json)
Hash identifier: PacRaXIzF0weDUpvI/7//snVMjfEjNx4z2xy96JBAs4=
Subject key identifier: FE:3F:F3:A7:A9:6D:A1:62:C6:E6:1E:12:4A:AE:C8:6F:DD:99:A2:99
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1563
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/_j_zp6ltoWLG5h4SSq7Ib92Zopk.roa
Signing time: Tue 11 Feb 2025 23:44:36 +0000
ROA not before: Tue 11 Feb 2025 23:44:36 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9680
IP address blocks: 2001:b000:90::/48 maxlen: 64
Validation: Failed, certificate revoked on Wed 12 Feb 2025 01:22:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5475 (0x1563)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 11 23:44:36 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=FE3FF3A7A96DA162C6E61E124AAEC86FDD99A299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bf:24:0f:a3:05:db:43:c9:d7:9d:06:d6:3e:
f7:b2:9a:98:09:0b:4d:11:82:42:4a:25:5c:2e:a2:
80:e8:64:6b:c3:80:5e:a9:df:f8:91:4d:eb:34:d6:
f2:21:94:56:3a:16:c1:8d:87:44:c4:38:cf:f1:02:
d2:e9:23:09:c0:29:36:b9:a3:64:fe:cb:ab:9d:3e:
79:17:ed:61:3d:7c:5b:62:c3:5f:e5:cd:90:2e:a3:
e0:01:90:16:25:c3:9d:75:b1:2b:a8:d8:2a:c7:b7:
d9:85:95:4c:f8:6d:7d:aa:7f:41:12:c1:98:c3:43:
36:63:8c:4e:cd:45:b2:35:f7:56:8d:ba:be:cc:19:
79:f3:fc:b3:fb:70:ca:b3:0c:8e:f5:53:50:25:c6:
93:16:a3:ed:85:00:e1:8d:17:5a:7d:b2:2d:05:8a:
b6:5f:ba:a6:76:1c:22:08:ad:ae:c0:fb:72:78:a7:
a3:7c:c2:bc:68:9c:19:e3:04:f0:36:b9:3b:ce:9e:
ae:58:2e:d9:d1:a5:f8:f2:e7:5c:1b:eb:1f:21:78:
b3:64:67:f5:29:be:3c:1e:5f:2e:0b:23:f8:bc:f8:
10:1d:44:a2:a7:93:d9:d2:e6:3d:77:57:43:11:a1:
76:11:a2:9c:90:fb:44:a9:a6:ad:05:17:0b:8a:5d:
ce:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3F:F3:A7:A9:6D:A1:62:C6:E6:1E:12:4A:AE:C8:6F:DD:99:A2:99
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/_j_zp6ltoWLG5h4SSq7Ib92Zopk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:b000:90::/48
Signature Algorithm: sha256WithRSAEncryption
ae:72:b4:ff:6b:6b:ab:05:81:74:27:3c:f7:e3:5a:8d:a5:1b:
f8:4c:f3:57:e8:9b:a4:ab:0e:36:5f:59:87:06:51:3f:2d:1d:
73:21:8c:8d:7f:64:1e:86:c7:d7:7c:06:8a:9a:97:c9:00:1f:
36:56:c6:a3:e9:ab:0a:5f:13:e2:b2:bc:f9:03:0a:9e:04:5b:
80:de:82:79:98:d5:41:2a:01:ce:1d:f2:fc:75:13:51:f9:42:
f1:0c:d1:8f:2a:a9:a8:76:5e:dd:1c:e3:95:ed:db:7a:29:c6:
9f:3f:64:bc:25:57:79:f2:74:16:2c:50:f2:13:e4:4a:69:73:
ad:e0:61:a9:45:d7:a4:5c:05:fd:5f:06:da:0b:25:54:b3:a7:
9f:18:f6:9d:d5:fb:5e:09:9d:33:38:dc:9d:ee:3e:2f:13:37:
07:a3:c8:2a:ee:a3:f2:a8:b9:11:14:7a:37:ca:41:6d:2c:72:
8e:49:14:09:0a:f0:2f:0f:93:e2:d6:22:78:28:58:9c:81:1e:
11:07:6b:79:b9:81:93:13:69:13:37:19:d4:75:24:88:c8:6f:
65:da:a1:95:fb:7a:16:ed:9c:ad:fe:d8:f6:a0:35:99:c6:3b:
54:7c:2c:23:29:d8:97:72:81:8a:b8:de:fc:69:40:8a:a6:5e:
74:14:60:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:21:51 2025 by rpki-client