Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/iXgWQZIaoZGQchjYNvggQFf5R9U.roa
File: iXgWQZIaoZGQchjYNvggQFf5R9U.roa (raw, json)
Hash identifier: eDA/CxlyM2kN7XoiqxW5Fedx8Uy0pvJWOue3NS+TkKc=
Subject key identifier: 89:78:16:41:92:1A:A1:91:90:72:18:D8:36:F8:20:40:57:F9:47:D5
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1218
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/iXgWQZIaoZGQchjYNvggQFf5R9U.roa
Signing time: Mon 26 Aug 2024 05:18:15 +0000
ROA not before: Mon 26 Aug 2024 05:18:15 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 125.224.0.0/13 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 20:36:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4632 (0x1218)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Aug 26 05:18:15 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=89781641921AA191907218D836F8204057F947D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3b:cc:25:6c:d7:8c:f7:38:d5:a1:49:af:94:
7a:aa:e5:56:d0:9b:79:0e:7a:ef:d5:c2:68:c0:31:
db:5c:65:cb:67:3c:08:35:6a:e3:f8:ce:bc:14:9f:
22:24:1f:95:16:d8:c6:bc:9b:1e:95:9f:20:3e:a7:
aa:2e:88:41:0e:0d:45:1d:14:07:66:51:b5:89:d6:
a4:74:40:64:fa:c9:d2:67:36:5b:ba:ac:3b:14:1f:
38:10:a3:ef:1f:6b:6f:da:47:5f:7b:2f:58:29:f4:
20:ad:ac:1b:7d:6a:c5:08:7d:24:ca:65:43:9f:cb:
c9:9a:05:59:82:47:77:9a:e1:55:5b:8a:6e:18:cc:
a3:de:5d:4c:3b:75:30:6a:ad:c1:4c:b8:44:d5:8c:
7e:a0:af:ba:99:63:18:81:62:6a:f3:ab:6f:35:a9:
c3:60:7b:8b:11:84:e4:8d:80:ba:9c:b0:84:03:a7:
11:6b:03:06:3a:dd:75:24:87:89:51:d2:b5:81:c1:
ad:d7:e4:95:f5:06:91:1c:81:bf:91:6b:d5:b2:53:
b9:ae:40:c8:ea:04:52:14:9f:f1:03:12:4a:0f:ea:
76:36:1e:dd:d9:8e:6a:dd:56:cf:fd:68:ac:64:eb:
3e:f6:fa:1f:3d:3e:f3:95:dc:f7:b0:41:67:7f:d7:
30:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:78:16:41:92:1A:A1:91:90:72:18:D8:36:F8:20:40:57:F9:47:D5
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/iXgWQZIaoZGQchjYNvggQFf5R9U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.224.0.0/13
Signature Algorithm: sha256WithRSAEncryption
8f:a5:c3:21:d5:21:94:47:ef:23:2c:9b:9b:59:85:55:03:e1:
c9:17:fd:b0:f8:93:0e:1f:7d:97:cf:59:f1:2b:05:de:08:04:
12:92:74:45:14:ed:f4:2c:48:eb:06:f4:51:d9:45:bf:df:27:
fe:42:0e:c9:80:c3:f4:e9:81:5c:f9:4b:30:1e:86:6d:91:2f:
b5:fe:64:62:b7:cf:7f:20:56:37:37:51:02:81:18:50:b5:a7:
c9:db:c2:8e:37:c2:a0:78:51:f0:00:ee:8f:d1:96:ea:80:51:
bc:33:63:e6:25:5c:f4:49:79:f6:f0:b2:e7:7d:9d:9e:dd:27:
63:5a:50:ea:5d:7d:25:78:15:01:10:83:25:3c:e0:14:1c:ee:
a8:42:ea:65:45:77:35:e5:d8:56:44:9d:45:f2:2d:bb:a4:c3:
ed:fb:c5:3c:6f:d9:8b:39:f6:39:3d:85:9f:63:5f:14:e8:16:
87:7c:c1:a3:d3:23:8d:00:5c:7e:a8:50:39:fc:54:c1:cd:00:
54:32:15:7d:86:ce:8e:90:5d:5f:79:bd:89:bd:61:38:9a:f5:
8b:06:98:87:12:47:05:8d:54:a8:e1:3d:af:1d:86:dd:ad:43:
3c:af:c4:39:b7:df:5f:c2:90:1a:98:2e:a6:69:6e:36:64:c2:
bb:5b:bb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:33:25 2025 by rpki-client