Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/daE5TIc8N3lhT7vh-zspFUCVFwA.roa
File: daE5TIc8N3lhT7vh-zspFUCVFwA.roa (raw, json)
Hash identifier: DZj0IXuicz7cWo9+c6KCz43wpe2t4FtVrib3JKIocQk=
Subject key identifier: 75:A1:39:4C:87:3C:37:79:61:4F:BB:E1:FB:3B:29:15:40:95:17:00
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 119F
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/daE5TIc8N3lhT7vh-zspFUCVFwA.roa
Signing time: Mon 26 Aug 2024 05:17:44 +0000
ROA not before: Mon 26 Aug 2024 05:17:44 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17714
IP address blocks: 175.111.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 20:35:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4511 (0x119f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Aug 26 05:17:44 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=75A1394C873C3779614FBBE1FB3B291540951700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1b:23:ef:9f:ab:9c:ad:05:60:f6:12:93:66:
a1:82:70:7a:54:84:3c:98:d9:67:e5:7a:77:eb:ad:
3f:59:9a:2c:64:22:ce:2c:f8:01:ea:b9:63:3a:66:
f4:17:d5:86:ba:86:4f:82:a4:f8:94:2a:df:0f:23:
46:d8:f8:5f:ba:ea:06:f6:8f:c9:15:d1:57:b1:33:
a8:30:ec:c7:95:a3:8d:d0:7d:2a:7f:e4:4e:71:68:
33:11:c4:c9:dc:8e:4a:1b:1c:51:74:de:40:aa:4b:
6f:27:9e:6e:33:8f:a1:41:75:aa:83:e7:55:db:c5:
ca:07:7c:86:5c:d8:7c:d5:a6:7b:c2:da:dc:e5:9e:
ca:13:ff:34:7b:15:4d:9a:23:10:ac:86:c9:65:9c:
c4:84:97:a0:c6:9a:39:73:ed:c7:e5:d8:3b:de:ce:
5a:0a:cf:e3:9c:6e:57:7c:63:4d:4c:13:d1:5b:a7:
12:a0:50:be:65:66:74:f7:35:0c:8d:e6:82:87:61:
b9:fd:ad:18:68:94:9a:8c:c3:d0:14:9d:16:68:4c:
91:93:fa:71:a4:37:14:5f:4b:f0:76:32:cd:87:aa:
8b:30:a0:94:98:55:50:cc:2a:0d:11:78:c1:fe:7c:
6a:ef:dc:e3:65:2d:bf:e8:8d:b2:9b:89:53:a7:53:
87:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A1:39:4C:87:3C:37:79:61:4F:BB:E1:FB:3B:29:15:40:95:17:00
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/daE5TIc8N3lhT7vh-zspFUCVFwA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.111.255.0/24
Signature Algorithm: sha256WithRSAEncryption
51:49:36:1d:ab:95:c9:9e:9b:89:8a:03:7a:2c:6f:f5:4e:d9:
85:2f:a9:22:39:e3:85:5b:d8:ac:9a:cc:7f:c5:d6:c0:92:d5:
b1:fd:98:2c:9f:af:ba:7b:5c:d8:99:3b:8a:ed:39:38:89:8e:
e0:ec:e4:5e:bc:a7:fd:82:61:d5:2a:ff:96:7e:ca:10:00:83:
cf:02:e5:74:6f:56:22:2c:61:de:44:dd:cb:fc:e3:7e:f2:85:
75:ce:83:3f:e8:3e:5b:a3:41:d3:d8:d6:27:c8:46:65:ce:6c:
3e:de:a8:34:0b:cc:40:b3:9a:20:0c:c6:15:a9:85:f9:84:e3:
92:04:e3:1b:93:63:40:96:7c:27:64:f5:aa:52:02:49:99:ee:
4a:c0:02:e2:9a:78:28:35:ea:01:b0:8b:d4:d9:9e:83:51:0b:
6e:86:96:39:6e:e5:2c:68:0c:fc:af:d2:3f:53:20:6f:55:85:
29:ed:53:b1:2b:2e:3e:47:c8:46:71:c3:6f:e3:23:67:5f:d5:
8c:7d:a9:2d:be:99:69:91:81:1d:a6:e2:ee:51:15:db:af:d3:
32:16:af:35:23:7b:6a:ef:d0:c2:fa:20:7a:83:8d:e2:df:5d:
27:ec:28:c8:bd:8a:5e:a1:92:6e:d5:28:04:52:28:76:6a:07:
84:a8:e3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:40:12 2025 by rpki-client