Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/cY4fQPc0DSuDHLKFI35hRCG_quA.roa
File: cY4fQPc0DSuDHLKFI35hRCG_quA.roa (raw, json)
Hash identifier: y0A0LREx1CaNgQkh3+JinMUDR4F5jYVv3F0RkOLACyg=
Subject key identifier: 71:8E:1F:40:F7:34:0D:2B:83:1C:B2:85:23:7E:61:44:21:BF:AA:E0
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1431
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/cY4fQPc0DSuDHLKFI35hRCG_quA.roa
Signing time: Mon 10 Feb 2025 14:34:42 +0000
ROA not before: Mon 10 Feb 2025 14:34:42 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17421
IP address blocks: 211.79.32.0/20 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 23:44:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5169 (0x1431)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:34:42 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=718E1F40F7340D2B831CB285237E614421BFAAE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b8:6a:08:65:67:c1:10:7f:83:97:9e:eb:c1:
fa:18:1e:ab:0f:81:83:fc:94:84:af:88:fc:a6:ef:
82:de:b9:ca:34:17:7e:bb:0a:5b:b0:72:2c:6d:e4:
6e:3c:61:63:57:2f:77:29:8a:20:2f:8a:e0:19:55:
b6:da:30:dd:e6:0f:58:bc:ea:b1:24:d4:61:ea:9e:
ea:a3:7f:30:a6:eb:a8:c4:ab:df:a5:8d:d8:1b:7f:
4d:0c:8a:1e:30:06:0d:10:d1:f1:36:7b:72:3e:e6:
28:da:9b:b3:d3:ae:8a:8a:42:78:36:0a:af:74:5b:
0a:94:5e:6f:19:75:aa:a5:2d:d8:54:47:ca:d7:cc:
72:e7:95:64:07:13:41:b7:5b:bc:05:49:64:2b:74:
1d:ea:9a:65:8c:04:b2:3c:d4:ba:02:d0:3e:5c:01:
8c:70:7e:8b:a8:c9:c0:bc:e4:34:40:ae:01:f3:a8:
ab:f5:c5:e3:30:9f:19:8f:13:d2:48:b4:67:35:b5:
2a:23:68:f9:e9:e6:94:3b:1f:84:82:ce:07:bc:57:
e8:e6:74:43:2d:16:6d:2e:6d:50:03:35:0a:2f:c8:
d9:3e:c5:1b:2d:df:84:81:cf:c8:41:f3:96:45:e0:
fc:db:d1:d5:79:cc:ac:6d:77:e7:33:e5:12:b3:64:
d4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:8E:1F:40:F7:34:0D:2B:83:1C:B2:85:23:7E:61:44:21:BF:AA:E0
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/cY4fQPc0DSuDHLKFI35hRCG_quA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.79.32.0/20
Signature Algorithm: sha256WithRSAEncryption
06:3d:af:b9:e6:1a:8d:96:e9:d3:ad:79:60:9b:40:ed:57:d3:
68:1c:5c:20:50:1b:72:f2:5f:ab:46:c6:eb:12:d8:01:ce:69:
3c:56:0b:7e:fa:16:ec:5d:2d:d0:b8:ab:e5:24:3c:d1:d3:35:
82:17:8b:11:3a:ec:1f:1e:cc:7e:ca:4b:73:0d:bb:42:8d:01:
f1:ca:e7:ee:97:fa:e9:94:9e:1d:c4:d7:56:81:9d:84:bb:b1:
cb:5b:0f:73:d2:e4:71:4f:ed:62:52:f2:9f:b0:44:93:8f:ee:
84:8b:c7:ef:0d:e4:8a:33:6d:84:39:b6:5c:f5:86:8f:2b:44:
24:89:a2:e0:df:ac:ad:9e:e3:2f:e0:45:df:41:ff:f3:f6:14:
07:f3:76:76:ed:4e:b4:3d:c6:bf:61:43:1b:ea:c2:e1:80:36:
96:7d:c1:de:d5:0c:6a:67:7b:64:08:bb:f8:a6:f0:e7:f1:3e:
49:9d:f2:1e:17:6a:b8:9d:67:dc:1c:b9:f7:1f:b4:02:f7:8d:
3c:28:33:43:ee:1f:b6:4a:44:a8:45:5d:81:77:5f:7f:07:aa:
b7:3f:50:41:bb:b2:74:c3:70:92:5c:04:ab:a3:70:26:9d:af:
c8:0a:e6:3f:39:12:6d:b2:70:15:ee:83:62:96:a9:d8:ea:82:
8b:be:dd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:24:57 2025 by rpki-client