Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/qcuVSVbxD6xQT0wwS75pTgcQRKE.roa
File: qcuVSVbxD6xQT0wwS75pTgcQRKE.roa (raw, json)
Hash identifier: T0YxSuXEFY9BuW3NsPEJi/dmhM4yx6WPriIK+8Gnpxc=
Subject key identifier: A9:CB:95:49:56:F1:0F:AC:50:4F:4C:30:4B:BE:69:4E:07:10:44:A1
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 14F1
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/qcuVSVbxD6xQT0wwS75pTgcQRKE.roa
Signing time: Tue 11 Feb 2025 23:44:11 +0000
ROA not before: Tue 11 Feb 2025 23:44:11 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9505
IP address blocks: 203.160.224.0/20 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 01:22:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5361 (0x14f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 11 23:44:11 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A9CB954956F10FAC504F4C304BBE694E071044A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5c:2a:f2:90:fb:ea:86:1a:fe:d5:2e:b1:c0:
34:b1:12:6b:a7:ca:47:82:e3:33:55:6c:fc:8f:04:
a9:cb:04:0f:dd:8c:34:f6:c7:bb:93:f7:34:dd:b7:
5f:79:bc:60:07:2a:a6:0f:3e:08:23:54:07:38:59:
42:a6:a2:cf:fa:a2:4d:3a:04:80:d1:54:d9:d0:9d:
1a:bd:51:93:9a:e9:fb:79:82:70:f7:03:5f:98:53:
53:92:48:bf:f6:3e:bb:bd:0b:1c:2c:20:1e:34:43:
d4:e8:ba:8f:5f:6e:4d:f3:b7:b9:9a:ec:aa:f7:72:
1a:f9:16:cc:74:c7:1c:a5:c1:f4:9d:e6:0f:09:3d:
e8:a9:61:c7:76:2b:08:99:46:a8:cf:89:39:81:fc:
44:5e:9a:7a:e8:20:21:39:d1:6a:ce:18:8f:ab:36:
12:88:21:02:74:7f:2b:c3:5e:37:34:e5:6a:97:14:
05:f9:76:23:58:28:14:d1:db:79:cc:35:96:21:1d:
b8:48:72:0e:ff:a0:3c:68:3c:d8:eb:39:f9:0a:9b:
cc:25:83:23:86:84:03:42:5b:b5:aa:09:6e:c3:df:
b4:92:d0:c4:8a:27:11:b9:2f:43:70:c6:a7:05:3a:
d5:b6:fe:85:de:3d:33:51:de:19:51:b1:f0:0a:1a:
54:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CB:95:49:56:F1:0F:AC:50:4F:4C:30:4B:BE:69:4E:07:10:44:A1
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/qcuVSVbxD6xQT0wwS75pTgcQRKE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.160.224.0/20
Signature Algorithm: sha256WithRSAEncryption
c7:00:0a:bf:66:c4:59:3c:46:e5:2f:58:26:a2:1d:f5:72:1e:
55:54:6b:fc:1a:a7:bc:6f:ea:c0:08:bd:c0:27:50:db:e4:f9:
d0:6c:e8:8b:b0:0d:d5:e6:d8:05:80:41:e5:1e:35:ac:87:60:
09:42:3e:b7:2f:10:d2:a0:16:1d:d6:b4:db:62:09:be:5e:43:
03:3e:14:05:5f:e8:c3:08:0a:b7:c1:ab:0d:e3:81:76:2f:1a:
57:11:ac:60:45:69:fc:18:f3:cb:d7:07:e4:97:ef:b9:48:1a:
1c:e6:d0:7b:01:c5:d1:2f:ef:17:fc:1e:b2:a2:1f:1d:66:0c:
90:b7:54:1a:75:21:80:c8:a0:60:18:28:3b:6b:95:82:0a:8f:
48:b0:1a:cd:d6:f5:67:60:b2:17:c5:01:6b:47:70:c1:ec:e6:
f2:66:e2:a0:22:2e:25:f9:ab:49:fd:85:19:a2:9e:e6:33:62:
8a:5f:96:6d:30:c8:0b:e4:bd:3c:1d:cd:b9:86:a5:61:0f:4b:
9d:bd:5a:85:02:26:b5:a9:4e:0a:96:d0:7f:9e:e2:8c:e3:9c:
6a:b3:a4:8c:87:6a:80:c2:e0:78:3e:d1:ea:88:7e:04:ba:b9:
53:21:5a:94:6c:17:fd:a5:3e:91:7e:bc:8c:41:ad:06:e9:9e:
b2:b4:32:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:37:14 2025 by rpki-client