Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/gUxiNTLSSQrfQTd2rtP03t86MCg.roa
File: gUxiNTLSSQrfQTd2rtP03t86MCg.roa (raw, json)
Hash identifier: 8y+KBWEs4n5xLNW+MNm9dZax1pSEaVC6dZJeTwoxlIs=
Subject key identifier: 81:4C:62:35:32:D2:49:0A:DF:41:37:76:AE:D3:F4:DE:DF:3A:30:28
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1440
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/gUxiNTLSSQrfQTd2rtP03t86MCg.roa
Signing time: Mon 10 Feb 2025 14:34:44 +0000
ROA not before: Mon 10 Feb 2025 14:34:44 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 20940
IP address blocks: 203.69.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 23:44:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5184 (0x1440)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:34:44 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=814C623532D2490ADF413776AED3F4DEDF3A3028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:85:5c:0c:75:91:3c:bc:5c:4f:9e:b3:20:c2:
72:77:ac:3b:1a:c9:59:cc:ca:92:c1:ad:f4:74:3d:
b4:4d:4c:a2:c2:78:ed:48:76:74:33:83:54:f0:4c:
f0:d4:5b:dd:e1:e7:a4:c9:16:b0:ab:63:35:c0:02:
ca:e0:96:02:96:1d:6e:7f:a2:92:04:ce:9f:f9:cb:
cf:bb:f6:86:13:1e:2e:7f:22:80:8e:3d:34:e2:2c:
68:6e:ff:34:d6:72:d5:fa:e0:21:fc:26:d1:28:3a:
e5:b8:e9:77:4b:47:be:af:56:0a:61:27:db:bf:8c:
f3:d6:0e:fd:d1:77:49:55:b1:7c:81:9b:fe:b3:34:
6b:8d:6b:7e:b2:18:87:c7:10:62:c2:8c:b5:28:e1:
6d:b6:95:b9:a0:cb:1e:bc:f0:a8:27:2d:15:72:e5:
9d:f1:19:de:29:e7:66:af:c9:e2:a9:f9:8b:04:22:
19:68:dc:cd:a9:bd:e3:7c:41:4b:f1:7b:0e:6e:ab:
01:ba:36:b7:c1:83:4d:88:d1:c4:87:2d:63:ff:0b:
f3:34:59:df:a5:6a:11:fd:d8:e1:69:66:ff:48:5b:
89:8f:a5:19:db:a5:4d:05:a0:c4:4a:9f:30:87:07:
bf:25:42:8f:6b:b1:85:46:39:27:23:33:15:c6:67:
f2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:4C:62:35:32:D2:49:0A:DF:41:37:76:AE:D3:F4:DE:DF:3A:30:28
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/gUxiNTLSSQrfQTd2rtP03t86MCg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.69.138.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:e8:27:59:5a:c0:a6:3f:b8:c4:c0:33:1f:7c:23:be:13:3b:
5a:5c:64:fb:f5:00:5f:dd:44:45:c7:30:d1:4f:b8:e3:c6:20:
c6:20:85:20:c5:85:96:86:c9:41:fa:af:0d:1c:86:c6:e8:d3:
55:ce:94:b7:fa:a5:04:a2:83:71:e3:cc:c9:0a:b9:ee:ee:e7:
25:1e:bd:04:82:e3:c4:72:42:6f:f3:21:a6:90:c8:1c:e0:c0:
03:39:3b:62:24:be:28:e1:8b:04:b8:d7:0a:be:c4:f1:43:8c:
f4:e3:f1:5e:a1:55:1a:73:bf:e6:9a:91:79:5a:2d:e4:fb:a9:
66:f5:33:4f:aa:63:91:8e:d8:1f:5a:b0:39:33:b0:ee:60:e1:
93:f5:e5:fb:a2:fb:73:ae:4a:7a:30:41:74:48:1c:f7:86:ee:
dd:3b:05:50:d3:87:5f:f6:b1:fe:63:08:7e:db:88:08:08:f8:
cb:32:3d:e8:cf:d6:0a:f9:bc:f4:bd:75:0a:65:3d:0b:1e:f3:
90:66:24:c8:b3:53:19:03:e9:54:04:b3:61:67:a5:f9:4c:10:
b8:f7:13:6b:48:43:79:29:f4:af:2e:70:b4:51:94:1e:31:e0:
0d:45:33:dd:d3:0f:a2:27:16:cc:be:99:b2:03:75:b4:15:d5:
b3:c8:d5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:20:03 2025 by rpki-client