Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/hmYrGWR15G7vuQotjVzYP2eJo3E.roa
File: hmYrGWR15G7vuQotjVzYP2eJo3E.roa (raw, json)
Hash identifier: r9ANcdFZVVLlvsXocDkfiE9fuKFSlwT5fU+QAhy7Tbc=
Subject key identifier: 86:66:2B:19:64:75:E4:6E:EF:B9:0A:2D:8D:5C:D8:3F:67:89:A3:71
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 152D
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/hmYrGWR15G7vuQotjVzYP2eJo3E.roa
Signing time: Tue 11 Feb 2025 23:44:23 +0000
ROA not before: Tue 11 Feb 2025 23:44:23 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 21859
IP address blocks: 210.61.201.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 01:22:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5421 (0x152d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 11 23:44:23 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=86662B196475E46EEFB90A2D8D5CD83F6789A371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:08:8f:72:44:05:50:dc:3a:5e:3b:36:7c:bc:
d9:55:ba:c5:1a:83:31:26:9c:b9:69:f7:5b:07:34:
84:ab:21:d7:cd:e8:de:76:0f:53:3e:6f:31:c2:19:
0a:73:8c:bc:98:5a:b9:4a:50:08:4b:07:ee:12:5d:
7f:2e:ec:69:09:19:6f:65:10:e6:c4:22:3a:be:32:
6c:72:dd:26:54:c1:0f:48:f6:c6:9b:83:de:34:9c:
79:7d:8b:c8:a6:01:37:19:2a:9a:b7:03:a1:93:ea:
af:7b:32:b6:28:eb:07:3d:5b:b3:cb:45:6a:c2:18:
ee:e5:8f:9e:f8:ea:ee:01:b8:dc:e5:ad:81:60:73:
2b:50:d4:54:fc:ac:9e:38:7a:b8:c9:97:cb:e7:71:
93:45:f6:44:09:04:d6:a8:b3:a5:bf:49:48:c6:af:
4a:81:84:4a:42:d8:1b:95:b9:42:bf:a3:02:00:11:
ee:a9:5c:49:8b:32:00:d7:70:a4:9a:b4:bb:2e:a0:
be:f0:89:18:c7:56:60:24:c4:9b:c3:09:09:9c:83:
b2:1a:4c:37:48:af:f0:1b:df:0a:1c:3b:39:fd:1e:
f9:c6:a5:a5:e8:5a:19:b8:4a:a7:46:a0:93:7c:a6:
de:ce:4c:e0:94:e3:d3:83:3b:5b:1e:ae:27:ae:33:
3e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:66:2B:19:64:75:E4:6E:EF:B9:0A:2D:8D:5C:D8:3F:67:89:A3:71
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/hmYrGWR15G7vuQotjVzYP2eJo3E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.61.201.0/24
Signature Algorithm: sha256WithRSAEncryption
42:9d:11:ed:96:44:29:15:59:f8:d9:ab:21:19:9a:ef:9e:83:
de:e2:60:ed:ea:c5:b9:84:9a:6d:0c:45:39:e0:57:27:07:a5:
bf:44:52:65:1c:21:df:b7:9b:a8:e4:b7:ba:23:2e:e5:1b:ea:
31:b8:d1:66:6f:fd:c5:14:64:e0:10:b1:4b:8b:0a:07:df:87:
30:4d:48:a4:e1:45:4f:c3:10:fb:a8:3b:13:12:bf:65:75:65:
8c:d4:75:be:6a:5a:96:c6:ba:cc:4c:25:f6:5c:95:b9:74:e9:
49:69:51:07:f6:6b:77:45:8a:d2:c7:ff:d1:a8:7c:e7:26:6a:
02:9a:4b:76:06:33:63:95:e1:03:e3:4a:a4:21:95:5e:46:a7:
7f:b0:cd:c5:75:75:f5:95:0c:31:dd:23:8b:c7:28:c3:69:00:
07:22:7e:4d:6d:3d:b5:ea:b2:f5:d0:51:0b:c9:1f:92:ae:a3:
9f:75:cd:61:a5:f4:da:eb:1f:9f:98:74:56:41:12:d3:ee:8c:
ad:e2:52:a0:10:e2:ff:5e:7b:8a:3e:e9:0b:c0:73:87:5b:bb:
46:ff:e1:c7:79:b2:c3:36:b4:5e:69:f1:34:57:11:e4:e4:5e:
a6:cc:fe:40:c3:71:5a:32:3b:1b:42:23:51:fa:ec:e4:ae:d9:
a7:0e:2c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:21:44 2025 by rpki-client