Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/pf0UeI6m2keN7Ksi2Rs8rIhySf4.roa
File: pf0UeI6m2keN7Ksi2Rs8rIhySf4.roa (raw, json)
Hash identifier: YsXSXhzAr32Hf2JBMyUgvFFNRyJnykfEDK68XZjv4tQ=
Subject key identifier: A5:FD:14:78:8E:A6:DA:47:8D:EC:AB:22:D9:1B:3C:AC:88:72:49:FE
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1186
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/pf0UeI6m2keN7Ksi2Rs8rIhySf4.roa
Signing time: Mon 26 Aug 2024 05:17:38 +0000
ROA not before: Mon 26 Aug 2024 05:17:38 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 210.242.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 20:35:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4486 (0x1186)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Aug 26 05:17:38 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A5FD14788EA6DA478DECAB22D91B3CAC887249FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:dd:a9:73:3d:70:9a:e1:42:ea:f2:6c:ad:b4:
41:9e:97:ee:98:a3:91:cd:94:65:30:47:35:19:ba:
29:61:12:2e:ec:a2:7a:b5:b1:fa:6f:92:c1:7a:67:
cc:9c:2b:ef:99:c9:09:44:41:06:3a:f6:e7:a8:9d:
1d:9d:ad:34:ca:7e:50:1f:77:1b:f9:c2:a9:9a:c3:
87:63:01:3d:c6:a3:71:67:76:92:d1:6e:47:d2:13:
f1:13:08:df:61:9c:19:04:d5:37:3b:cd:58:47:98:
84:51:35:39:15:38:0b:84:4f:94:b5:cf:9b:f3:46:
75:7c:e2:ed:55:99:81:aa:5b:82:f7:c6:ab:9d:6b:
99:70:50:70:09:68:57:e4:b1:cf:26:be:2e:a1:ba:
73:fe:0a:31:d4:c0:d7:e0:40:b0:1a:2e:42:5a:46:
59:52:74:f3:8a:e7:de:ac:cb:1e:40:58:4d:67:3f:
28:b8:2e:70:03:9a:30:74:63:1f:07:8e:fd:00:7a:
ae:f8:ec:91:72:4d:d2:2f:16:c0:06:34:19:dd:b2:
c5:60:25:d2:8a:73:89:f8:40:0c:56:76:0c:2d:a4:
50:24:c9:a7:e7:a4:17:fc:6a:f7:fc:31:c5:13:46:
92:af:27:c4:c4:53:e4:c9:14:a4:a2:25:7d:46:27:
f4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:FD:14:78:8E:A6:DA:47:8D:EC:AB:22:D9:1B:3C:AC:88:72:49:FE
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/pf0UeI6m2keN7Ksi2Rs8rIhySf4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.242.0.0/16
Signature Algorithm: sha256WithRSAEncryption
36:f8:8a:5f:1e:3f:c8:dd:62:d5:61:53:7b:39:19:31:1b:fa:
0d:fa:20:b1:c6:eb:f5:11:56:1a:3e:1d:94:e4:99:76:55:f5:
90:fb:e5:5b:48:82:1d:be:bb:1a:b3:f0:81:aa:22:df:59:53:
df:c9:81:80:14:9c:a4:6c:34:54:cc:99:45:02:72:8f:91:91:
2c:d9:0c:c4:bd:58:33:e5:6e:32:3b:2b:f1:3c:2c:34:79:17:
78:00:6b:07:e7:17:93:7a:bf:0f:9f:eb:e5:ae:7f:c8:55:3a:
37:b4:0f:fd:34:92:26:38:ec:09:bf:78:3b:db:36:4d:88:9c:
68:38:aa:c0:09:de:32:c8:0b:fe:75:27:85:b9:bc:b5:41:a2:
15:f5:66:c3:b1:92:10:7c:11:79:b7:db:19:63:a2:0c:ea:d1:
f1:b0:38:7a:43:38:be:d4:1b:83:7d:68:39:6e:49:38:07:2c:
d5:25:25:7d:fa:e4:a8:df:4b:ff:65:b1:76:58:08:5b:cd:22:
a1:7a:60:bb:0e:e5:19:01:9e:a0:af:83:f5:39:59:3c:8e:c5:
78:4a:c9:18:29:b0:ea:1a:e9:04:70:ea:63:0e:62:37:a1:a8:
fa:b0:0a:a2:ae:0d:9d:22:0c:f7:2c:53:8b:73:99:cc:0a:ce:
e3:bc:6f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:38:44 2025 by rpki-client