Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/oTfYVXgaqDAyaOWVxm-0nn1g2uI.roa
File: oTfYVXgaqDAyaOWVxm-0nn1g2uI.roa (raw, json)
Hash identifier: qGA93M2c3qaRoG3WbtW17NDjKonZ6n+T0C6zjhTrOFM=
Subject key identifier: A1:37:D8:55:78:1A:A8:30:32:68:E5:95:C6:6F:B4:9E:7D:60:DA:E2
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1466
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/oTfYVXgaqDAyaOWVxm-0nn1g2uI.roa
Signing time: Mon 10 Feb 2025 14:34:52 +0000
ROA not before: Mon 10 Feb 2025 14:34:52 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 210.241.224.0/19 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 23:44:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5222 (0x1466)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:34:52 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A137D855781AA8303268E595C66FB49E7D60DAE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:05:74:e1:f7:52:c9:90:95:ea:85:e9:d5:63:
95:4c:d5:e1:42:6b:2e:ab:ba:d0:38:f9:62:c7:ad:
e9:eb:83:be:3d:db:6e:46:ac:5f:e9:e0:a8:04:c8:
15:d1:76:ca:46:fc:71:f7:11:af:1e:e7:8a:94:76:
c8:da:b8:bb:65:e8:fd:05:23:46:b6:de:88:c7:09:
c7:93:36:15:d7:77:a0:cf:c1:a9:44:9f:6b:c5:c2:
e2:50:d9:c0:a4:9a:3d:b1:d2:f4:19:4b:1f:38:1e:
83:4f:11:2c:3a:de:bb:70:23:a2:f2:8f:90:cc:08:
c6:77:21:e9:97:4e:9a:52:a3:aa:6e:24:1f:22:fd:
8c:ad:33:3f:35:ee:02:24:c3:3e:0c:af:6e:1c:2a:
73:16:16:ab:ac:68:e8:37:f5:1e:45:fc:88:d4:cd:
76:fb:3f:27:d5:0e:03:f7:62:a9:77:f7:88:5d:0e:
00:5a:5f:85:ca:f8:a8:82:e9:b9:8d:f3:c4:9d:65:
ba:ba:d7:60:49:76:ba:46:19:b6:2c:e1:4d:02:eb:
1e:25:94:d5:3b:be:be:e7:05:8c:6d:8c:07:b0:b6:
1e:a3:26:0b:d9:3d:31:ae:b3:2e:16:b5:9b:49:ae:
e4:86:dd:cb:24:18:d5:2b:3c:99:ac:bc:01:77:8f:
21:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:37:D8:55:78:1A:A8:30:32:68:E5:95:C6:6F:B4:9E:7D:60:DA:E2
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/oTfYVXgaqDAyaOWVxm-0nn1g2uI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.241.224.0/19
Signature Algorithm: sha256WithRSAEncryption
bb:c8:64:d2:3f:10:eb:69:d3:d1:55:04:ba:98:05:24:85:e6:
de:2e:22:16:e6:55:34:b0:d1:89:06:04:e1:49:51:b5:44:cf:
6c:1d:f8:e6:dc:bd:08:74:19:d9:d6:30:12:ed:f8:b1:43:10:
f0:63:dd:9e:4a:f2:fb:d7:32:18:8f:c9:12:69:f0:f5:5c:ed:
b8:15:54:35:28:60:bf:0e:89:60:59:05:85:24:91:bd:02:35:
44:c4:6b:cf:7f:74:ec:91:6e:3c:98:f9:7f:df:91:23:3e:ee:
c0:92:50:91:43:25:77:1c:14:5a:6e:da:f1:18:e0:73:e5:4e:
5e:8e:ea:3a:c1:6e:31:f6:1a:df:73:19:53:2d:bd:2b:db:fb:
22:6a:84:cc:1b:75:65:10:9a:f2:ab:d8:b8:e2:46:65:66:06:
73:14:72:81:2e:fc:22:bc:bb:5c:df:db:0b:ab:bc:3f:f3:dd:
b3:1b:40:47:f4:0f:2d:cb:6f:de:a4:6b:2e:77:96:e3:52:21:
27:fa:f7:4f:d2:f8:11:48:04:e8:e3:01:c9:cc:10:2f:3d:d5:
ac:5f:17:81:1e:86:60:3f:36:69:91:53:84:8c:5e:43:f2:30:
dc:bd:ea:f7:d2:e5:bd:ea:06:b4:c0:81:ad:19:f2:ca:f4:52:
df:1a:b0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:21:56 2025 by rpki-client