Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/uVcQpkalsSPjQidSAkx2WzEEcqo.roa
File: uVcQpkalsSPjQidSAkx2WzEEcqo.roa (raw, json)
Hash identifier: CnTRAnul5XqLUlj4QVJm1Fjp7aUTwiuALsKfwhZoYwA=
Subject key identifier: B9:57:10:A6:46:A5:B1:23:E3:42:27:52:02:4C:76:5B:31:04:72:AA
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 143E
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/uVcQpkalsSPjQidSAkx2WzEEcqo.roa
Signing time: Mon 10 Feb 2025 14:34:44 +0000
ROA not before: Mon 10 Feb 2025 14:34:44 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17714
IP address blocks: 203.78.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 23:44:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5182 (0x143e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:34:44 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=B95710A646A5B123E3422752024C765B310472AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c3:1f:0b:c0:4e:0d:bc:de:8b:8e:23:9d:14:
15:6c:2b:4d:55:c2:2b:e4:d3:5c:0e:e8:d2:f8:9b:
d9:6d:67:15:0f:06:ec:f4:59:52:25:6a:af:5a:a6:
1f:52:d3:44:a6:2c:0e:75:73:87:2e:f2:6d:0a:42:
2b:f1:60:85:6e:7a:a4:74:6d:8d:67:8d:f8:03:05:
3d:67:e7:b8:4a:44:b3:55:3f:58:be:40:21:e4:85:
13:39:6a:db:c5:e1:fd:1e:e4:40:dc:43:c0:fc:12:
89:8f:07:56:a5:40:0c:dc:05:c0:10:57:07:29:26:
6e:f7:0f:85:04:6d:93:a4:18:d1:76:a7:a0:a8:a3:
2c:60:fa:b7:12:59:91:ac:02:a0:de:d3:42:7a:e6:
cf:a7:8f:cc:fa:05:43:e6:fa:41:42:28:d3:a0:2c:
ad:53:cf:97:1f:f9:47:64:d4:36:4b:38:21:8f:e2:
0b:9a:d6:9d:99:6f:ce:37:63:8f:03:54:ea:ca:35:
a0:1b:95:f0:0a:2a:a8:fa:17:70:87:99:22:84:cb:
2b:7e:b5:bc:23:d6:f8:7a:a9:9d:0d:a5:f7:94:1f:
91:ef:90:fc:27:fc:55:05:9e:f8:51:1d:3e:64:11:
0c:78:be:8e:e3:c2:a5:a2:ea:8a:14:25:e9:68:d6:
cd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:57:10:A6:46:A5:B1:23:E3:42:27:52:02:4C:76:5B:31:04:72:AA
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/uVcQpkalsSPjQidSAkx2WzEEcqo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.78.180.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:76:ef:46:b8:28:35:c7:17:ff:40:2b:76:ae:5e:36:e4:cf:
71:ac:00:36:21:e2:e7:a6:49:68:1e:e8:f8:7f:f1:45:f1:ab:
30:33:ba:2a:13:dc:8b:62:fe:c2:82:3e:5b:fd:21:64:9f:a8:
61:e4:91:e0:03:8a:92:4d:c7:f9:9b:7e:29:24:86:f1:d4:9c:
5b:4b:23:0d:ff:bd:09:25:23:22:86:6e:9f:b9:42:a8:9e:8f:
f8:81:07:96:5d:d1:4c:c2:ef:3a:92:f0:dc:e3:4b:3c:7f:b6:
05:e5:51:09:7e:07:d0:ad:bb:8f:a1:a4:50:c9:86:65:1c:b0:
10:69:ed:21:31:12:b1:26:a7:a6:82:86:b1:71:a3:ac:f3:18:
29:13:21:cf:8a:f2:94:e3:af:48:95:7d:93:6b:cc:ca:d2:fb:
d1:3f:97:ec:c2:ca:73:3f:aa:e3:ed:22:46:ba:eb:78:12:3d:
17:9b:cd:f4:ce:32:98:f4:bd:65:6f:56:93:c7:76:fa:d6:8f:
8d:37:81:13:36:90:25:23:d8:58:59:29:eb:a2:90:e4:dd:60:
75:c6:d1:49:7f:2b:09:46:b8:6e:fa:8c:ca:9e:b3:7b:4a:00:
83:53:6b:6b:75:86:64:c9:61:f8:69:82:44:40:08:df:f2:6d:
fb:50:a6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:21:55 2025 by rpki-client