Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/aNcY61Ztc0LkNmX1s7Dqx-vYBBM.roa
File: aNcY61Ztc0LkNmX1s7Dqx-vYBBM.roa (raw, json)
Hash identifier: rks2gG+gwRz6rDz/18bGdFUV0XX8ayJSSWrNiLL+Hd8=
Subject key identifier: 68:D7:18:EB:56:6D:73:42:E4:36:65:F5:B3:B0:EA:C7:EB:D8:04:13
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 157E
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/aNcY61Ztc0LkNmX1s7Dqx-vYBBM.roa
Signing time: Tue 11 Feb 2025 23:44:41 +0000
ROA not before: Tue 11 Feb 2025 23:44:41 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 15133
IP address blocks: 2001:b032:c101::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 12 Feb 2025 01:23:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5502 (0x157e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 11 23:44:41 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=68D718EB566D7342E43665F5B3B0EAC7EBD80413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:09:f6:2b:1a:9e:cc:96:14:9a:dd:d3:48:a1:
1a:ad:d7:15:89:1c:05:6e:4a:69:d2:f0:38:e0:be:
4f:10:98:58:fc:2c:ab:89:e5:47:05:b1:47:c1:d9:
1f:c0:e2:33:42:ec:08:49:a3:71:22:5d:52:8d:1c:
84:8c:a8:92:12:59:c5:da:01:b2:28:7d:47:bc:73:
6b:45:68:b0:51:ed:98:cf:81:0d:a2:5c:10:5c:2f:
ea:61:96:5f:4b:e2:2e:73:25:da:b8:fa:01:79:5f:
72:19:84:8c:71:2f:c9:30:97:be:4e:16:dd:f6:3c:
ca:18:a8:56:09:81:a6:cc:c1:5e:5a:1f:e9:7a:d0:
bb:cf:25:37:7f:68:08:cf:80:2b:e0:c4:1d:72:2c:
21:f5:4b:a0:c9:ee:1c:87:8a:0c:a6:bb:f4:64:3c:
16:57:91:ef:59:bd:16:8b:5f:60:53:9f:d2:52:6e:
b4:98:01:6c:c2:70:b3:85:30:47:86:64:93:6b:3e:
54:c4:ff:99:b6:56:5d:49:83:b3:1a:26:b6:86:3e:
39:32:a2:25:ca:9f:47:26:ee:82:8a:ab:cb:ff:82:
3a:7f:bb:cd:26:5c:b7:5f:da:45:7a:93:6a:bd:5c:
fd:99:9f:ef:5a:a1:1e:ce:7a:0d:bb:fc:68:2c:2e:
b3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D7:18:EB:56:6D:73:42:E4:36:65:F5:B3:B0:EA:C7:EB:D8:04:13
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/aNcY61Ztc0LkNmX1s7Dqx-vYBBM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:b032:c101::/48
Signature Algorithm: sha256WithRSAEncryption
8a:21:4e:8c:96:1d:f2:9c:79:c3:c6:2b:e5:a8:85:90:6d:b9:
01:5d:ae:87:58:6f:69:be:78:03:23:41:3e:7d:15:13:7d:86:
8a:07:42:78:fa:53:8e:3d:f5:c7:73:cd:a6:e7:20:09:de:22:
bf:fa:08:3f:ed:e9:f4:45:5a:18:64:58:c0:93:b5:be:52:53:
25:00:5a:f7:e2:49:b7:b1:73:86:84:cb:4f:b6:06:58:d0:0c:
2a:bd:74:8c:ef:90:5a:6c:91:73:2e:53:e8:70:47:63:96:a2:
57:4d:9a:b2:59:1b:b4:c0:35:0a:01:75:50:b8:ce:36:58:92:
0b:22:f9:df:de:7e:30:cc:23:93:51:0b:80:ff:f1:df:0e:0d:
99:e4:62:9e:57:cf:bb:88:87:45:a9:0e:52:4b:c7:40:a3:86:
1a:27:8a:c6:e8:9e:b5:15:22:91:10:d6:a5:b8:64:fc:02:75:
9c:03:eb:f8:3b:63:90:bd:e8:3b:a3:c9:5a:37:c0:71:fd:16:
a8:ec:fb:5e:93:1d:dc:8a:8c:dc:b2:f3:6d:91:9d:97:3c:6f:
63:6e:63:ed:66:b6:31:28:d1:bc:8a:f6:9d:e6:27:52:45:ad:
0b:8b:d1:07:43:0d:66:2b:9e:d2:a3:ed:88:07:cd:db:a5:11:
89:8d:90:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:21:49 2025 by rpki-client