Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/uXolkh8uwfyqHEU9u9ai4II79Xw.roa
File: uXolkh8uwfyqHEU9u9ai4II79Xw.roa (raw, json)
Hash identifier: 5KHfQZy1sxQTDVRV1XDO4ebKfZ3m3Aa0SWbTfh912UM=
Subject key identifier: B9:7A:25:92:1F:2E:C1:FC:AA:1C:45:3D:BB:D6:A2:E0:82:3B:F5:7C
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 145A
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/uXolkh8uwfyqHEU9u9ai4II79Xw.roa
Signing time: Mon 10 Feb 2025 14:34:50 +0000
ROA not before: Mon 10 Feb 2025 14:34:50 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 203.74.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 23:44:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5210 (0x145a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:34:50 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=B97A25921F2EC1FCAA1C453DBBD6A2E0823BF57C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:03:17:09:15:cb:5c:1b:40:ed:67:d1:2b:38:
07:6c:ae:5a:c3:5e:54:9f:3b:d6:24:d6:21:19:6e:
a1:90:b2:79:3a:26:28:a9:b2:21:90:01:c3:91:ca:
5d:79:06:b1:84:f9:01:64:ba:31:3d:95:f8:a1:51:
48:b0:0e:e4:8d:de:cb:06:e5:15:4f:3e:71:f4:12:
f0:38:6f:a5:34:80:e0:ea:b9:b7:5b:e7:c1:3d:0f:
dc:7e:3c:11:47:bf:e4:4b:d9:d1:b2:ab:ec:e2:f4:
83:cc:2e:c0:2b:2d:43:b6:bb:75:ca:97:a9:a9:d5:
e2:ec:82:5a:5a:09:7d:bb:87:95:02:3c:0c:58:0d:
5a:e1:45:7c:ce:e5:39:8f:05:da:73:7d:d5:15:cc:
d3:46:5c:7f:8e:13:49:a6:6d:38:c1:94:7a:89:05:
24:54:ab:e2:3b:93:ea:c6:72:ac:a5:4e:39:70:51:
64:1e:65:a1:06:c6:79:9b:21:b0:3e:2b:53:06:69:
a3:b6:7e:7a:35:6c:71:51:c9:a8:b2:07:37:7b:06:
af:76:fc:c1:d1:69:84:fd:51:4d:c5:92:ab:37:93:
26:30:d3:48:70:d8:96:3c:21:58:59:6d:61:66:a3:
26:b2:f2:1f:9b:06:be:1f:f9:2f:cf:99:48:af:ef:
3c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:7A:25:92:1F:2E:C1:FC:AA:1C:45:3D:BB:D6:A2:E0:82:3B:F5:7C
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/uXolkh8uwfyqHEU9u9ai4II79Xw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.74.0.0/16
Signature Algorithm: sha256WithRSAEncryption
78:de:39:91:29:95:3b:d7:7b:4c:91:e9:cf:99:1f:3e:ce:c0:
f0:59:83:89:48:94:c5:60:ce:d3:25:5d:ec:50:e0:f4:fd:47:
16:94:08:ba:8d:07:dc:4d:86:fd:b9:30:ba:57:ce:69:2d:69:
62:22:95:e0:32:9d:f0:1d:66:7d:9e:bb:93:82:93:80:f0:ba:
66:36:07:2b:52:5d:75:81:98:2d:43:1a:a9:9c:a9:e4:93:c7:
76:dd:bc:2c:f4:00:70:f9:fa:d1:7d:26:47:84:40:d3:d0:bc:
67:82:cc:d4:07:8e:b1:d8:8e:ab:83:66:ce:94:7d:e5:18:f7:
70:a3:ea:0b:8e:da:d8:f6:1d:f0:2c:2d:c6:b8:91:9e:8c:b2:
80:f9:5b:5b:b3:e5:e8:ad:20:76:c4:ee:99:e2:bf:d4:64:c5:
47:7c:3f:43:89:53:98:7e:3d:ca:cf:12:3f:3b:4f:4c:1e:97:
60:b3:2c:85:96:93:48:be:8d:d4:b2:92:49:0e:3f:a6:1c:81:
01:9d:56:cc:5b:63:18:5f:db:cb:92:3a:0d:1b:b2:5a:d3:1e:
72:06:19:de:7b:85:62:dc:ce:5f:44:8e:58:41:e1:53:d5:61:
4d:6a:ab:b1:0e:54:0e:e4:e0:8f:d6:6f:58:d3:b2:53:54:45:
22:53:a9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:40:13 2025 by rpki-client