Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/brOmA9gXuJyPZn3XaFmf9nJ0l-I.roa
File: brOmA9gXuJyPZn3XaFmf9nJ0l-I.roa (raw, json)
Hash identifier: +N4mmgofrpUbvPIzgzCIyp871rWG55yri/v1fVmNs3c=
Subject key identifier: 6E:B3:A6:03:D8:17:B8:9C:8F:66:7D:D7:68:59:9F:F6:72:74:97:E2
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 11E4
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/brOmA9gXuJyPZn3XaFmf9nJ0l-I.roa
Signing time: Mon 26 Aug 2024 05:18:02 +0000
ROA not before: Mon 26 Aug 2024 05:18:02 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17421
IP address blocks: 2001:b401::/32 maxlen: 64
Validation: Failed, certificate revoked on Mon 10 Feb 2025 20:35:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4580 (0x11e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Aug 26 05:18:02 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=6EB3A603D817B89C8F667DD768599FF6727497E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:65:f5:10:ba:a1:6e:d1:f4:46:20:2f:94:af:
f8:af:ce:ef:cb:1e:47:f3:e9:af:ee:a2:05:b9:f1:
7f:9f:9d:b5:69:74:01:fe:4e:74:8f:e6:53:3f:d0:
8d:4d:0f:15:1b:5f:f5:99:b0:53:25:80:ea:58:82:
79:13:f2:f9:e5:cf:20:69:78:55:eb:59:f0:bc:50:
5b:6a:37:54:66:0f:3e:a8:3b:79:00:75:65:de:3b:
e0:46:73:1d:35:25:17:8a:e4:b7:3e:0f:5e:2c:e0:
f5:2d:55:f7:e5:f8:ff:76:8a:d9:46:aa:40:94:b8:
05:1b:86:b8:59:37:61:86:01:89:e6:9e:f4:a0:74:
d3:8d:fd:2e:d8:27:02:61:2e:a2:58:3a:d8:f9:b5:
d3:e2:49:9d:b6:b2:8a:dd:6b:88:de:02:d9:c0:21:
c7:bb:c3:80:a0:c4:66:08:54:48:3c:e1:7c:1a:6b:
50:82:52:1c:83:e5:19:d9:df:06:23:0f:d2:26:c2:
f8:f3:4c:0e:77:51:71:72:88:38:4f:30:17:76:d7:
79:f0:e4:c4:b8:90:5c:22:9b:be:8e:d6:73:af:b3:
18:3f:a1:9e:3b:20:a2:f6:61:a9:f1:b3:c3:f3:1b:
a9:50:46:37:a5:a8:94:03:7f:8e:c9:31:e7:06:68:
b0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B3:A6:03:D8:17:B8:9C:8F:66:7D:D7:68:59:9F:F6:72:74:97:E2
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/brOmA9gXuJyPZn3XaFmf9nJ0l-I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:b401::/32
Signature Algorithm: sha256WithRSAEncryption
1b:94:a4:f8:1c:e9:27:75:80:4b:e5:ca:a7:5d:3a:ac:91:b4:
5d:31:d7:ac:d2:e7:4c:a0:59:38:24:ea:da:21:dc:81:85:4f:
2d:a2:e2:49:9b:7f:29:03:57:56:4d:9d:8a:4d:32:6a:c2:7c:
30:03:94:ab:37:54:75:c4:88:08:3b:8d:db:2c:ea:6f:bf:e1:
79:c9:f4:46:2b:60:5f:1a:ab:eb:6e:4c:0d:27:e1:b0:ce:e2:
3d:df:ba:94:3e:74:13:21:58:fb:d8:dc:5a:23:20:b6:84:22:
e7:2e:17:49:53:e9:6d:db:29:dc:dd:e1:e5:25:d3:e2:86:99:
83:71:84:f1:29:ea:0a:7c:48:11:ec:5e:15:47:66:4c:39:3b:
fb:86:23:70:8d:b6:05:52:06:1a:7a:e0:42:34:67:a1:e2:f7:
29:24:9e:b6:a1:18:37:4f:16:ba:5e:76:5e:7b:38:32:41:5f:
39:15:b5:02:2b:03:9d:2c:d7:cc:35:22:e4:85:3c:1a:c0:56:
ac:07:76:6b:eb:b9:1c:6b:8d:bb:fd:57:f1:70:27:0a:17:9d:
3d:fb:37:05:a2:91:72:fe:a6:47:6b:94:e9:7e:ac:a4:a1:ab:
f4:16:c6:8f:01:d6:b2:af:12:d5:b0:c1:f1:d6:02:87:00:f9:
9b:b0:ac:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:22:10 2025 by rpki-client