Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/axPg-hGChqiZQqasEsNT33T6wfA.roa
File: axPg-hGChqiZQqasEsNT33T6wfA.roa (raw, json)
Hash identifier: u1Y6wtWqVTd1i6EDNV18/GlExEkiy33Z8t9e2AFzK1E=
Subject key identifier: 6B:13:E0:FA:11:82:86:A8:99:42:A6:AC:12:C3:53:DF:74:FA:C1:F0
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 11AC
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/axPg-hGChqiZQqasEsNT33T6wfA.roa
Signing time: Mon 26 Aug 2024 05:17:47 +0000
ROA not before: Mon 26 Aug 2024 05:17:47 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 198949
IP address blocks: 203.66.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 20:35:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4524 (0x11ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Aug 26 05:17:47 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=6B13E0FA118286A89942A6AC12C353DF74FAC1F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fc:b9:ea:a0:f9:76:02:dd:40:fc:8a:54:6e:
06:1b:52:22:f7:3a:ce:88:2e:7d:44:92:df:9f:cc:
78:e7:ce:e0:4b:00:cc:15:cf:89:34:88:c0:d5:14:
4a:9b:83:98:4f:9a:93:01:29:01:63:fb:fe:c9:33:
84:2d:45:2c:1b:40:4d:72:9b:f1:52:df:d7:68:37:
5b:28:84:2c:db:80:4c:97:da:82:7d:b9:16:7d:6f:
b7:a0:40:91:5a:ca:22:8d:13:55:d2:36:c3:13:71:
7e:56:78:31:97:f0:99:38:10:72:a0:0b:c4:03:93:
55:f1:e6:0d:31:ec:e2:fb:85:5c:99:54:5e:8c:c8:
4c:84:0b:b4:ac:09:0f:55:64:62:04:f3:2e:b9:9e:
1d:64:ef:96:6a:34:1f:36:f3:2b:85:0a:a9:34:54:
89:21:19:47:0a:cd:24:86:24:d8:41:61:48:56:3d:
0a:01:ad:66:3a:a9:b9:0e:bb:13:6b:89:8b:56:5f:
1b:4c:91:a8:7f:64:d6:0a:75:f6:24:71:30:53:49:
0a:78:46:5b:db:ea:33:25:18:33:18:52:84:60:66:
3d:da:d8:cf:2b:c7:7f:26:00:f7:12:99:49:83:ec:
23:08:e2:03:74:70:92:d2:8c:da:ba:02:83:33:6d:
c2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:13:E0:FA:11:82:86:A8:99:42:A6:AC:12:C3:53:DF:74:FA:C1:F0
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/axPg-hGChqiZQqasEsNT33T6wfA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.66.126.0/24
Signature Algorithm: sha256WithRSAEncryption
81:b7:ad:c5:af:b9:6a:2d:c2:60:ce:d9:66:1d:fc:22:ec:ec:
e6:6c:9f:ef:c6:2c:bf:19:83:fc:b6:50:6b:b4:07:a4:d1:39:
05:aa:84:85:65:60:18:1e:10:81:d5:0b:27:9a:70:a4:da:02:
15:be:9d:83:80:ca:87:c6:14:19:96:9c:3d:c6:45:95:01:cd:
f2:94:39:be:73:84:dd:9c:a5:4d:d2:04:42:bb:04:54:3d:09:
0b:0e:62:90:07:1f:fd:33:8b:97:0b:95:70:dc:5c:27:08:a5:
51:42:c7:7e:4d:50:e6:52:ea:e0:88:a0:49:f9:23:95:30:49:
f0:1d:d9:ed:7f:38:2f:b1:d8:80:a9:77:75:f9:c0:4d:5d:f3:
24:1d:55:19:82:96:26:6d:f6:07:31:c8:ee:28:2a:05:d9:bb:
73:06:c7:dc:22:c0:6c:c7:4e:75:7a:e1:7d:fe:d8:53:85:1c:
37:d7:67:ac:cb:8f:5d:f2:89:c9:85:0b:43:c2:50:6f:9d:a5:
06:6b:d9:da:4b:2e:27:44:13:37:8b:15:70:e0:a4:b6:11:df:
6b:5e:bc:d5:aa:25:7c:15:58:22:cf:05:87:a8:3d:5b:12:c1:
12:b6:15:39:d7:41:fc:58:f0:77:a7:da:a8:46:7f:b1:b3:3d:
3d:8b:b7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:16:37 2025 by rpki-client