Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/eYM0wHkQTk65E_KIzed2RV3gGW0.roa
File: eYM0wHkQTk65E_KIzed2RV3gGW0.roa (raw, json)
Hash identifier: 3dHaRzZWarc4FO4YJcxjczGr3ja9z0NPFWoBvtfDCxo=
Subject key identifier: 79:83:34:C0:79:10:4E:4E:B9:13:F2:88:CD:E7:76:45:5D:E0:19:6D
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1591
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/eYM0wHkQTk65E_KIzed2RV3gGW0.roa
Signing time: Tue 11 Feb 2025 23:44:45 +0000
ROA not before: Tue 11 Feb 2025 23:44:45 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 218.168.0.0/13 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 01:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5521 (0x1591)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 11 23:44:45 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=798334C079104E4EB913F288CDE776455DE0196D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:84:7d:6c:6e:48:d7:c5:6e:e4:a6:9d:4a:1b:
fc:b2:ff:04:e9:94:36:e8:88:46:10:9a:5c:99:61:
44:f6:26:44:29:1a:f8:9f:9c:17:aa:1b:96:6d:d8:
4c:dc:19:54:bf:b8:7f:9c:bf:f7:81:27:81:62:09:
4b:da:c7:f8:c4:67:12:0d:57:d1:25:71:59:9a:2c:
16:d1:f6:85:a9:85:a2:74:1f:65:4d:d6:c3:81:bd:
de:cd:38:1f:06:9f:b6:82:14:9a:45:ce:e8:d7:54:
b3:28:5a:47:78:0b:1a:6b:72:a3:d6:9b:93:19:42:
f6:5c:9a:02:cb:60:a2:4b:6c:9d:5b:0f:dd:e3:63:
49:7d:2b:74:b5:e6:f6:6a:78:31:0c:74:af:d4:53:
69:ff:de:63:57:66:f9:97:19:4a:f4:b3:e8:fd:21:
47:cd:fe:40:1d:bf:81:2c:db:0b:77:20:26:d2:8b:
aa:37:2b:f3:88:87:77:d2:9c:50:87:ae:31:94:ee:
a5:86:e7:52:90:3f:d4:ee:44:52:6d:ec:87:93:75:
3e:b0:0d:a2:dc:c0:36:bf:b3:e7:40:62:f0:df:a1:
d9:b6:64:0f:d9:0b:b4:d1:11:c8:9a:ca:60:8e:8b:
ac:26:88:66:e3:ee:12:c3:1f:c1:b9:3f:16:d4:32:
30:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:83:34:C0:79:10:4E:4E:B9:13:F2:88:CD:E7:76:45:5D:E0:19:6D
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/eYM0wHkQTk65E_KIzed2RV3gGW0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.168.0.0/13
Signature Algorithm: sha256WithRSAEncryption
4b:d4:a7:e1:d2:10:3f:61:eb:b2:9a:9d:e3:a2:0b:59:ef:52:
f7:ec:52:44:27:52:ed:a6:e5:e6:13:e9:34:68:f7:fd:83:68:
2e:97:55:7f:17:21:ce:73:8e:f7:d8:fa:54:19:b9:b2:be:57:
fc:6c:d2:0a:40:b2:da:35:ce:b4:33:fd:52:54:40:03:df:da:
19:ae:ec:a7:a2:89:29:5d:8c:06:5a:4a:8c:74:39:74:3c:10:
55:64:c0:3d:5e:9f:49:b1:8d:63:17:d1:d3:65:d0:de:8f:67:
45:05:2d:d1:0a:34:ef:9c:e6:23:eb:cf:ac:81:73:2f:80:4e:
c3:37:ac:79:a9:5f:bd:40:21:17:11:fb:6c:8e:dc:89:00:84:
c5:88:15:cd:75:64:cb:9f:4a:36:7b:fd:3e:ba:e5:47:e2:38:
5c:55:a4:f1:ec:de:21:be:6a:f0:94:b2:ae:8e:cc:04:2e:4a:
c1:e3:8f:f4:47:30:90:b9:4a:e9:0b:a1:f6:3e:f2:ca:a6:a8:
f8:48:4e:4b:45:f6:a2:c0:a7:15:c9:ad:6c:30:f4:74:c9:03:
f7:1a:bc:5d:e4:a8:47:72:40:7b:65:62:7f:56:7e:d0:2e:d8:
ff:2c:d6:f7:ae:6c:af:dc:70:77:6a:2d:bb:af:57:8f:f7:5e:
22:c3:0f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:34:12 2025 by rpki-client