Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/swaBBlf16QzpyCPMyFICKm88hrY.roa
File: swaBBlf16QzpyCPMyFICKm88hrY.roa (raw, json)
Hash identifier: Jq1VqL7QKoqBqivSPCn5582zPshF74T0TCd6rKYUuH4=
Subject key identifier: B3:06:81:06:57:F5:E9:0C:E9:C8:23:CC:C8:52:02:2A:6F:3C:86:B6
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 11BF
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/swaBBlf16QzpyCPMyFICKm88hrY.roa
Signing time: Mon 26 Aug 2024 05:17:54 +0000
ROA not before: Mon 26 Aug 2024 05:17:54 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 23675
IP address blocks: 203.66.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 20:35:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4543 (0x11bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Aug 26 05:17:54 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=B306810657F5E90CE9C823CCC852022A6F3C86B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:87:55:7e:8c:ef:05:c1:99:c3:e5:91:19:5b:
08:64:a6:e5:f6:31:12:ff:c2:0f:f8:d7:f4:c7:45:
c9:0f:20:9f:6b:6b:f3:af:98:09:29:c0:0d:48:9a:
4f:aa:59:b5:93:e9:a9:ab:fa:be:56:88:e7:99:36:
04:22:87:d1:7c:e0:4d:ff:e5:8f:64:06:ba:7e:45:
9c:26:1f:68:21:1c:24:74:b2:50:ed:66:cf:cb:1e:
d2:9f:95:da:52:89:9b:cc:7b:b7:c6:0a:dd:ca:cb:
74:d5:d3:a6:48:b9:96:3e:7a:b0:f0:c1:cc:4b:1b:
6f:ad:3d:e0:a0:e3:bf:97:38:de:e9:52:f5:5d:71:
8d:fb:e7:97:3d:1e:30:3a:42:04:a4:54:6e:2f:e8:
cc:41:50:6d:70:e1:44:bc:e8:36:de:7d:f5:16:8a:
15:18:8a:4f:14:19:86:fd:fe:6f:d2:62:dd:cc:e7:
a7:43:c4:e5:31:e4:18:06:06:02:a0:8b:8c:af:17:
9a:7a:12:4a:90:34:f2:f9:17:f5:3a:e4:ba:6c:20:
ae:d5:d7:7a:08:95:bc:12:69:7e:36:89:22:2a:91:
d3:b2:ef:36:1c:ce:ee:e5:93:ae:57:b3:64:b3:88:
db:02:f1:d1:9d:a9:28:68:2f:df:28:a5:20:36:0f:
f0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:06:81:06:57:F5:E9:0C:E9:C8:23:CC:C8:52:02:2A:6F:3C:86:B6
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/swaBBlf16QzpyCPMyFICKm88hrY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.66.245.0/24
Signature Algorithm: sha256WithRSAEncryption
05:d0:fd:ee:f2:e8:f3:9c:98:3e:59:45:23:33:3e:e2:3d:f7:
97:a9:91:16:86:34:67:fa:e0:16:5a:5e:99:51:d6:33:c1:20:
32:cb:8e:a6:cc:0b:52:3c:56:1e:5d:a9:47:85:ca:9f:6b:e3:
4c:77:1f:2b:2e:e5:28:81:7e:9b:8c:60:1f:57:83:46:a7:89:
eb:02:e4:3b:d2:8c:72:ea:bb:6d:de:a6:8a:15:65:1b:f2:57:
e9:89:dd:da:38:15:33:cc:ac:f5:c6:ea:99:6f:67:61:01:7f:
c6:2c:ec:99:7e:70:53:af:fc:66:49:61:42:7d:e4:7f:ab:e5:
c9:92:d0:a8:79:4e:cb:2e:2f:71:22:9c:03:44:4c:55:58:09:
00:4e:8e:c8:ab:76:7d:69:c2:44:9f:24:ef:96:74:6d:1a:13:
31:38:ac:ad:0c:e6:d7:c7:53:3c:cd:bd:3f:7b:58:06:8e:0a:
af:69:85:f5:ee:4b:19:07:5b:3b:f7:33:0f:cd:bf:1d:31:be:
e8:1e:0a:74:c9:d3:c0:b1:45:2e:4d:be:03:ae:4a:ac:7d:4c:
3e:93:f2:71:28:f6:f0:c8:aa:c8:9b:d4:3b:f2:1e:39:6c:1e:
f5:ea:30:46:6f:a3:ac:97:3e:e1:af:6d:91:16:85:52:5e:a7:
df:7f:d4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:31:38 2025 by rpki-client