Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/nau6SKjvi65M7-16enmyerrb9GY.roa
File: nau6SKjvi65M7-16enmyerrb9GY.roa (raw, json)
Hash identifier: /z7a9m2SZwkQ4azxFV+JJaKuRQji+LFx5nPaUGd0Xs4=
Subject key identifier: 9D:AB:BA:48:A8:EF:8B:AE:4C:EF:ED:7A:7A:79:B2:7A:BA:DB:F4:66
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 14CA
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/nau6SKjvi65M7-16enmyerrb9GY.roa
Signing time: Mon 10 Feb 2025 14:35:17 +0000
ROA not before: Mon 10 Feb 2025 14:35:17 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 60.249.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 23:44:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5322 (0x14ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:35:17 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=9DABBA48A8EF8BAE4CEFED7A7A79B27ABADBF466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:60:d7:5c:0a:fd:a4:ce:4c:b6:3e:0f:9c:04:
53:a4:97:e9:e6:84:06:f4:a3:fe:cb:d5:30:84:c4:
4f:3d:0a:e7:82:d1:4b:31:55:48:dc:35:0c:1c:6a:
59:3c:c4:a5:6e:56:3d:b4:52:30:13:c8:c4:46:23:
aa:72:00:e9:52:c1:9a:74:28:ed:60:c3:92:c9:ff:
4c:45:38:1d:82:85:0b:91:4a:1b:0d:35:db:75:bd:
b2:1a:90:d2:02:5e:52:cf:cb:d1:ec:46:d4:e3:dd:
3f:98:b4:bf:63:24:18:34:7d:92:2e:23:43:78:21:
63:49:74:af:7f:9e:99:d5:38:94:a8:0d:36:2c:4c:
b8:2e:27:2f:55:1c:0e:88:63:74:a6:52:40:5f:93:
d1:b5:dc:4e:02:0c:06:bc:31:19:b9:db:bd:1a:70:
e1:98:2d:ec:0f:68:6c:e3:5a:69:c3:0a:a1:3b:1e:
76:c1:7e:bc:b2:a3:8b:b8:9e:e2:2f:ad:72:ed:3c:
92:98:6f:df:fe:cc:cf:93:b5:64:f6:55:47:a5:34:
be:aa:62:38:ce:89:53:22:5a:db:5a:a1:26:f5:86:
05:0d:72:92:76:cf:41:05:b9:26:c3:58:ab:d7:6c:
e5:5e:c9:3d:39:65:74:6c:cf:be:1f:b1:89:9b:3a:
85:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AB:BA:48:A8:EF:8B:AE:4C:EF:ED:7A:7A:79:B2:7A:BA:DB:F4:66
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/nau6SKjvi65M7-16enmyerrb9GY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.249.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7c:15:b3:53:c2:ec:40:be:33:0b:15:a0:5e:14:16:6d:bd:2b:
e9:4c:46:c1:ed:ea:b9:a5:00:35:a5:82:f8:25:ba:87:ba:f2:
1e:3c:06:b9:80:a3:d6:ba:21:28:30:41:ba:99:99:7d:e9:0d:
fb:04:c2:d5:c6:d1:ed:ac:ad:2f:f6:29:92:b5:f4:42:2d:78:
32:09:3f:d8:aa:45:fc:0e:91:80:b8:b3:78:78:46:3e:45:36:
ff:b2:d0:d8:d7:bc:40:74:3a:81:3b:c8:2e:86:2b:ae:1b:b5:
35:57:4b:9b:fd:ca:93:78:44:51:bb:c5:12:4e:fc:d9:48:13:
c5:4d:d4:c6:8d:c2:63:6e:29:51:61:2a:ab:02:1b:3c:fc:f4:
41:a2:e2:52:a6:c4:07:83:10:58:35:04:47:af:45:19:27:02:
cc:dc:ea:a4:56:f5:d0:00:5a:9e:84:f8:8e:76:2c:69:1a:fd:
0f:8c:b9:fd:73:76:89:2f:40:78:43:5b:52:4f:35:99:8f:39:
3a:02:2c:eb:28:bb:04:d9:a5:ee:ce:b7:a0:9d:71:9f:60:e6:
55:98:c4:9e:63:60:8a:1d:7f:72:a3:2c:c2:fa:b1:52:73:3a:
82:d0:11:86:1b:4a:f8:71:15:9b:a6:8d:f9:2f:d3:b9:02:93:
55:b3:04:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:28:12 2025 by rpki-client