Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/mfXVgb6pSUopkvkJ2QXaoP-5Jps.roa
File: mfXVgb6pSUopkvkJ2QXaoP-5Jps.roa (raw, json)
Hash identifier: iGtq206GFpEK23qOega+GgtwPQb7S1xR+FsDbx3TURM=
Subject key identifier: 99:F5:D5:81:BE:A9:49:4A:29:92:F9:09:D9:05:DA:A0:FF:B9:26:9B
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1448
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/mfXVgb6pSUopkvkJ2QXaoP-5Jps.roa
Signing time: Mon 10 Feb 2025 14:34:46 +0000
ROA not before: Mon 10 Feb 2025 14:34:46 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17421
IP address blocks: 111.80.0.0/14 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 23:44:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5192 (0x1448)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:34:46 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=99F5D581BEA9494A2992F909D905DAA0FFB9269B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5c:66:5d:7c:e6:6a:2f:0e:ec:6f:9d:b2:8b:
f3:1f:26:c6:c3:d9:e1:dd:3f:c3:b2:1c:e7:0f:61:
7f:e1:aa:7d:9e:c2:22:84:d3:34:f5:43:35:99:4d:
ff:2c:d9:5e:5a:49:f2:4d:59:3e:3a:ba:6e:27:b0:
2b:99:2f:1d:3b:af:c4:ee:b0:d8:6d:c6:bb:15:b1:
7a:93:10:6e:0c:e4:a4:59:fb:2f:67:e4:7a:8d:d6:
2f:95:71:2d:af:24:22:54:12:e0:2a:31:bc:e1:ef:
c2:7b:a8:f8:53:c9:b5:77:fb:4c:2d:19:fd:a8:1d:
42:ee:aa:92:48:02:ec:c6:56:51:65:ef:cd:9b:7f:
ed:66:6a:b5:50:5b:23:ea:29:57:94:78:67:f5:90:
4b:20:4a:1c:94:ed:a3:36:88:a1:48:e6:c8:28:2e:
71:84:78:52:69:cb:e2:3f:66:35:80:c5:0e:ed:0e:
ec:ff:ab:bf:91:6d:9e:f2:92:44:a2:3e:80:11:c9:
00:ca:ee:3b:32:63:70:cd:2b:14:2b:2b:62:11:4a:
15:23:83:50:c1:a7:16:0a:90:0f:ed:8d:09:ef:00:
12:31:83:4a:8f:3a:59:7c:f0:1e:1d:c8:0a:af:eb:
bf:ef:c2:3f:23:de:e6:13:4a:53:79:a2:98:14:63:
b0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F5:D5:81:BE:A9:49:4A:29:92:F9:09:D9:05:DA:A0:FF:B9:26:9B
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/mfXVgb6pSUopkvkJ2QXaoP-5Jps.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
111.80.0.0/14
Signature Algorithm: sha256WithRSAEncryption
2c:0e:6b:9f:ce:36:12:eb:7f:1d:3e:8e:ce:04:31:02:67:2a:
63:61:33:59:e5:48:4e:2d:65:a4:ed:72:52:fe:ac:9e:db:8b:
29:5d:78:d0:ba:ec:37:d3:60:94:49:41:af:7b:6a:7a:f3:a9:
5a:d6:70:47:3c:64:58:d2:ee:56:c0:e9:50:3b:e1:53:f2:2d:
50:cb:36:f0:ee:bc:c8:89:c3:68:8f:90:72:2d:78:35:7e:89:
9b:90:e6:f6:77:a4:ae:c6:59:3c:5e:95:79:eb:a6:cd:ac:29:
fe:af:1c:3b:ea:4c:8c:7c:c3:67:65:3e:9f:19:90:1d:1d:d9:
18:36:a5:f6:f3:a4:d8:97:f3:43:d6:ec:29:4a:3b:06:71:1d:
22:4a:d9:03:7d:c1:5d:6e:20:6b:83:8f:06:46:7e:58:d7:f4:
d8:35:7b:65:ec:c1:a9:9f:6a:d7:75:6d:9d:d8:45:fb:0f:b4:
af:59:f6:4a:f2:1e:b7:e1:a7:82:e1:be:ee:a1:1a:7d:9a:e7:
22:d8:35:6c:66:60:cb:b1:6d:23:3a:2d:a3:cb:43:4b:15:37:
61:13:24:fb:a0:46:fd:1b:8c:45:a1:ee:de:44:7f:2b:20:89:
d3:0d:89:f8:93:b9:58:06:33:88:2d:2f:ed:5d:a1:36:a3:69:
50:68:8c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:45:19 2025 by rpki-client