Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/aTqJGcf8i1kq5fjsBtzc1eK4yl0.roa
File: aTqJGcf8i1kq5fjsBtzc1eK4yl0.roa (raw, json)
Hash identifier: Z2AAxYPKX43KZT3bZAhvfvTWFvFlEI0RgFSOk4EjhSY=
Subject key identifier: 69:3A:89:19:C7:FC:8B:59:2A:E5:F8:EC:06:DC:DC:D5:E2:B8:CA:5D
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1181
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/aTqJGcf8i1kq5fjsBtzc1eK4yl0.roa
Signing time: Mon 26 Aug 2024 05:17:36 +0000
ROA not before: Mon 26 Aug 2024 05:17:36 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 114.32.0.0/12 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 20:35:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4481 (0x1181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Aug 26 05:17:36 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=693A8919C7FC8B592AE5F8EC06DCDCD5E2B8CA5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:57:3c:be:23:bb:32:fa:36:ba:e2:75:f9:38:
43:85:fc:f0:21:59:e0:a2:f2:2d:6a:81:72:61:a4:
af:5a:41:f7:4d:3f:a4:5b:55:8e:68:99:5f:db:14:
1b:06:10:f4:4b:cd:e7:19:78:64:05:00:b0:f3:c9:
ef:33:99:9b:04:bb:8d:4b:25:f1:c1:c2:10:ad:fd:
f0:f1:f4:f5:bf:51:1e:17:56:83:f6:47:dc:59:c6:
9e:15:b5:3c:19:80:ff:d6:5e:d1:6f:83:04:4d:31:
87:df:1d:14:24:6e:6c:28:2d:41:35:8e:9d:59:7f:
3f:1d:76:04:b0:ea:8b:52:4c:31:8c:7e:9d:fd:aa:
40:13:0f:b5:b5:e8:43:c9:a0:24:ea:50:4a:c7:f4:
6e:54:ee:65:8b:10:ac:ab:78:3f:2d:4f:b5:da:08:
6e:61:d4:2e:36:b8:f4:3d:2b:de:d7:6b:12:80:f8:
b4:75:a4:37:6c:fc:0c:aa:c7:2b:75:4d:75:0e:da:
c3:88:07:5a:3f:ec:80:20:96:c6:56:a4:8c:63:a2:
cf:ef:1a:51:6a:34:19:d2:73:35:5b:ff:98:2f:e4:
43:62:04:2c:dc:c5:ba:6d:f8:17:6e:77:e4:7a:21:
69:9c:d2:bd:fe:8c:e0:31:7b:93:64:db:04:89:30:
90:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3A:89:19:C7:FC:8B:59:2A:E5:F8:EC:06:DC:DC:D5:E2:B8:CA:5D
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/aTqJGcf8i1kq5fjsBtzc1eK4yl0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.32.0.0/12
Signature Algorithm: sha256WithRSAEncryption
2e:06:e0:f2:09:3b:24:7f:bf:52:c4:17:ec:26:cd:7d:49:4e:
78:69:df:f3:ea:4b:c7:d4:be:64:99:c5:fb:50:24:0e:4a:48:
6b:65:c1:a4:58:d0:d7:16:fb:4b:60:b8:7b:7b:3d:6c:fb:9e:
81:4b:3a:48:05:1c:09:f6:c6:50:68:3a:0a:52:d3:a8:0a:fc:
ae:8c:8e:74:07:4e:0d:5b:d5:74:f9:bb:b7:8e:d9:f8:f4:83:
fd:5b:7b:f1:b1:13:5d:61:c6:9c:9d:ae:9a:0a:b3:4f:c2:13:
5a:24:1a:9e:f0:8f:8f:73:bc:23:a6:5d:24:56:09:a8:9b:3a:
0c:a1:6a:98:f8:80:ec:4a:30:5c:92:5b:0f:e0:16:f6:af:b8:
27:4d:a1:32:fc:1d:37:ba:67:f2:ef:1f:d0:27:6d:f9:b9:90:
81:41:c9:d0:9b:85:3c:85:4f:28:f9:91:d4:39:c6:43:7e:59:
21:0e:05:d8:a2:d1:de:ed:fc:2e:e0:4d:9b:17:75:a0:ee:f8:
22:dd:74:18:87:18:f0:9c:c8:df:8d:90:b6:6f:36:8c:51:bf:
20:b9:cd:a3:b1:84:c8:6d:e6:2d:7a:8b:c1:0a:88:25:76:0d:
fb:4f:ce:b2:6c:ec:a4:ba:fc:c8:38:f5:2b:36:56:bf:08:cb:
80:52:27:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:20:09 2025 by rpki-client