Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/qMKpVSTCx6hMh18xUVYa-HVWZfk.roa
File: qMKpVSTCx6hMh18xUVYa-HVWZfk.roa (raw, json)
Hash identifier: 4q7HzzbozlcOwO7WTfOzjh0kb6g+3oH0blc7wzEmgY0=
Subject key identifier: A8:C2:A9:55:24:C2:C7:A8:4C:87:5F:31:51:56:1A:F8:75:56:65:F9
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 11E9
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/qMKpVSTCx6hMh18xUVYa-HVWZfk.roa
Signing time: Mon 26 Aug 2024 05:18:03 +0000
ROA not before: Mon 26 Aug 2024 05:18:03 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 20940
IP address blocks: 203.66.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 20:35:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4585 (0x11e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Aug 26 05:18:03 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A8C2A95524C2C7A84C875F3151561AF8755665F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:3b:8b:20:09:58:37:54:d2:72:40:b3:ea:18:
40:97:49:f9:5f:d3:c7:44:29:84:f2:3a:85:86:44:
39:e6:6d:3e:06:11:85:40:90:01:96:47:cb:15:e1:
28:e2:dd:df:17:a1:7d:64:28:82:5a:5d:46:e2:92:
56:44:6c:4f:d3:94:01:23:18:1b:9f:c4:b3:4a:6e:
65:41:ac:24:af:ec:ce:d8:ba:7f:b3:b8:fc:98:1c:
21:0b:52:b0:37:ea:22:49:a6:f5:47:01:63:43:7c:
45:37:fc:6c:61:3f:c3:68:ce:df:36:7a:93:b6:7d:
92:44:c3:2d:d9:58:57:83:c4:af:c7:a5:7c:eb:60:
a2:73:5e:c8:b9:8b:fd:43:93:0c:a3:7f:95:27:fc:
71:28:53:09:36:a1:a0:e4:f6:a3:fc:81:e5:7a:e2:
65:7e:0e:07:2b:73:63:e7:29:63:2f:d0:dc:d9:c1:
a9:53:9a:72:ec:e3:04:ae:ac:35:5a:d5:08:c5:d9:
9a:42:fc:0f:7c:58:42:8a:4a:53:05:06:42:76:e8:
0b:3c:8d:5e:45:44:aa:d0:f4:48:69:a3:22:8d:45:
d2:89:aa:4f:0a:ef:a6:74:6a:cd:dc:dc:ae:cd:ea:
18:54:4d:64:5c:bf:be:d3:36:9e:03:a5:7b:2f:52:
ae:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C2:A9:55:24:C2:C7:A8:4C:87:5F:31:51:56:1A:F8:75:56:65:F9
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/qMKpVSTCx6hMh18xUVYa-HVWZfk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.66.226.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:ce:98:ab:7e:88:ab:1d:08:11:90:60:55:0b:5a:2a:e0:27:
c8:23:83:12:70:cb:1d:42:5b:b9:e1:1c:5e:05:a9:8a:e4:98:
cf:c4:91:5e:ba:c1:5b:ea:a2:73:b3:33:a0:43:26:6e:72:8d:
d2:e4:4e:cc:4a:a4:50:9c:08:a3:0b:e0:38:56:bf:bf:a0:4f:
55:69:a9:93:c0:2e:2b:76:66:da:9a:51:ee:00:90:08:0d:17:
df:10:c0:5a:f2:83:56:fd:ba:00:95:e6:cb:a9:13:82:01:eb:
d6:86:dc:3c:e0:1f:b9:19:ee:6f:28:9d:17:4e:97:cc:8e:e4:
09:ee:b3:f9:c0:2f:58:a2:7e:c0:37:5a:80:68:b0:b4:3f:ff:
45:26:75:d0:16:48:f5:69:96:d3:c2:15:47:f0:a3:ca:04:ec:
ed:98:80:2e:8c:e8:bf:e1:cc:20:f5:e5:21:17:d1:9e:fe:9a:
c8:bb:05:0a:0b:2a:09:99:56:3c:5d:a2:47:5d:8a:ad:a5:9d:
6a:92:d6:41:66:59:9e:ed:b3:59:5f:40:b6:46:10:94:39:c6:
69:98:f6:cf:bc:63:da:a3:7e:04:7b:9c:e6:6e:94:0c:7f:a7:
ea:c0:24:1a:ce:36:69:e1:65:85:0a:c6:33:e5:90:c9:37:2c:
22:a7:1d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:38:16 2025 by rpki-client