Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/m8qcdQyVZqFzDvFnNb7-Ren0UK8.roa
File: m8qcdQyVZqFzDvFnNb7-Ren0UK8.roa (raw, json)
Hash identifier: i630fsCHd4EkvAEQmAJtohMzXN/fbv4ytThV1/MvuP4=
Subject key identifier: 9B:CA:9C:75:0C:95:66:A1:73:0E:F1:67:35:BE:FE:45:E9:F4:50:AF
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 14FB
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/m8qcdQyVZqFzDvFnNb7-Ren0UK8.roa
Signing time: Tue 11 Feb 2025 23:44:13 +0000
ROA not before: Tue 11 Feb 2025 23:44:13 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 20940
IP address blocks: 2001:b032:104::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 12 Feb 2025 01:22:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5371 (0x14fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 11 23:44:13 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=9BCA9C750C9566A1730EF16735BEFE45E9F450AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c9:db:5e:17:bf:1b:41:6c:bd:c7:49:54:a2:
e3:69:14:0c:7f:f3:be:0c:35:be:13:f0:98:2e:21:
eb:b9:99:6e:21:32:a3:e5:33:c7:5b:79:49:eb:06:
bd:81:d3:87:82:a1:db:67:14:11:5a:98:62:c2:e0:
b8:ae:0e:b0:0c:e2:31:91:5b:32:eb:f9:3c:d2:31:
37:4c:e3:26:17:7a:21:ae:86:b3:b6:46:ca:fc:43:
10:6c:05:5a:c8:36:2d:26:a2:0b:9f:0a:13:5b:e6:
ab:88:5a:b1:a5:47:e2:74:95:26:a2:8d:cf:8b:d7:
c5:47:8b:c7:56:0b:39:8c:59:c9:28:9b:5b:05:9a:
45:a2:04:27:29:24:8e:2e:ed:5a:54:56:0e:19:8e:
11:fd:1f:f7:ea:0f:6a:be:b9:5d:50:ba:e4:15:c7:
11:48:af:e9:20:a4:4e:41:90:b6:cb:a0:b3:26:69:
d0:87:8b:d2:d4:89:d6:0e:11:5f:5e:cc:38:2b:d6:
0f:2a:a2:1f:24:2d:20:b5:e8:8e:cc:6d:9e:aa:2e:
99:5b:83:6e:35:1c:29:13:11:fc:2c:77:57:c9:e5:
83:71:1f:ef:7b:ec:fe:49:b6:c1:d1:34:a4:a8:80:
b1:06:5a:c1:ff:0f:d6:33:62:aa:85:8a:fe:ef:5e:
33:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CA:9C:75:0C:95:66:A1:73:0E:F1:67:35:BE:FE:45:E9:F4:50:AF
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/m8qcdQyVZqFzDvFnNb7-Ren0UK8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:b032:104::/48
Signature Algorithm: sha256WithRSAEncryption
a5:48:9f:12:4b:d3:2f:97:7b:14:88:a7:ca:3a:c2:65:df:96:
2b:5e:29:b7:42:f7:36:a2:7b:8d:cb:c0:10:3f:7f:41:c5:6c:
3f:5e:59:1b:16:e6:a6:eb:e9:51:9a:29:c0:cd:6b:67:e2:5c:
39:8d:5f:d2:a7:ac:c5:cb:92:c2:0d:53:91:3e:79:10:16:42:
5e:a7:be:4d:12:e6:95:25:ff:75:f0:95:39:66:6a:2d:2c:f1:
43:49:bb:c3:d8:64:f8:49:42:fd:e2:78:1a:42:af:c4:da:f2:
c3:9d:32:4f:ac:7b:2e:41:4c:d9:b0:b0:0a:15:e9:11:b2:b9:
0e:d6:03:fc:1f:80:c9:ba:fb:33:70:c4:8b:0d:7d:54:76:6e:
05:ce:53:7c:ec:77:ea:56:b9:1a:40:d4:e0:74:9d:ae:8a:5e:
11:96:af:01:1e:da:35:55:a1:55:b2:48:25:a4:60:19:e9:5f:
12:56:9a:e6:f3:04:fc:25:18:92:af:c6:60:20:0d:9c:75:0b:
6f:b1:4a:81:4c:b7:6a:7b:d1:f2:86:ea:07:13:74:65:86:ef:
20:4a:7d:87:69:76:fa:12:9e:98:ee:3b:05:af:85:de:bc:d1:
af:9d:ec:0a:07:c2:f3:75:68:b8:cb:a0:85:3b:fd:c2:ab:13:
08:34:35:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:26:16 2025 by rpki-client