Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/vc5Y-DZW9OOiEYZ6BZtzQaDmtFE.roa
File: vc5Y-DZW9OOiEYZ6BZtzQaDmtFE.roa (raw, json)
Hash identifier: DX57+uXyr0hBWV4337STLM9RnE02D3bA25lcqcdKu98=
Subject key identifier: BD:CE:58:F8:36:56:F4:E3:A2:11:86:7A:05:9B:73:41:A0:E6:B4:51
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 148A
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/vc5Y-DZW9OOiEYZ6BZtzQaDmtFE.roa
Signing time: Mon 10 Feb 2025 14:35:01 +0000
ROA not before: Mon 10 Feb 2025 14:35:01 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 15133
IP address blocks: 203.74.4.64/26 maxlen: 26
Validation: Failed, certificate revoked on Tue 11 Feb 2025 23:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5258 (0x148a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:35:01 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=BDCE58F83656F4E3A211867A059B7341A0E6B451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:18:4b:c3:50:b8:93:61:88:30:2a:28:41:50:
e4:14:0c:25:f1:47:cc:63:88:da:f9:0d:d7:23:3b:
bc:17:c5:83:a2:48:7a:9a:e4:c1:7b:40:ff:5f:4a:
aa:e8:c5:d7:d1:2d:0a:ef:75:93:9c:77:55:c0:73:
1d:8e:33:af:7f:92:25:95:d7:ef:15:5a:ef:00:65:
14:91:f3:4c:84:75:0d:51:c0:fd:83:fe:c8:ff:e8:
ec:dd:f7:8e:06:bc:77:b4:af:d5:f6:33:13:75:81:
24:07:f5:5d:60:c9:8f:bf:bd:79:2b:67:16:e4:2e:
f1:f9:ab:d9:5a:fb:3e:a9:83:77:af:c2:f5:6f:8b:
b3:cc:35:b5:28:df:8f:83:65:8a:1a:e2:6f:1d:e3:
76:db:b7:be:e0:21:af:21:9a:f0:4d:3d:b5:17:a0:
04:aa:4a:cc:c3:6e:da:7b:f9:7b:9d:6c:ca:54:4a:
48:f6:94:d3:d0:e1:b9:30:ef:8c:b1:2b:4b:9c:97:
cf:59:22:eb:b6:e0:0d:8d:74:57:c9:72:64:87:16:
df:0f:50:d0:56:ca:87:dc:aa:ef:0b:68:94:51:c9:
68:18:b8:0b:12:ae:f8:a9:5d:99:ce:2f:35:c9:9a:
92:06:e4:df:fc:85:09:8d:c6:a6:13:38:2b:6d:0b:
30:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CE:58:F8:36:56:F4:E3:A2:11:86:7A:05:9B:73:41:A0:E6:B4:51
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/vc5Y-DZW9OOiEYZ6BZtzQaDmtFE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.74.4.64/26
Signature Algorithm: sha256WithRSAEncryption
25:5d:d1:85:49:d3:2c:95:ca:9a:ae:92:3d:a8:5e:21:3b:99:
fd:34:09:8d:70:f9:4b:b5:46:c2:a1:49:a7:35:94:37:eb:05:
27:d9:52:af:74:88:aa:31:81:25:06:d7:56:28:a8:01:b7:e5:
b1:37:9d:6e:f1:4d:8e:fa:87:39:98:a1:24:10:38:4d:1a:59:
74:ae:9b:ab:56:c4:79:eb:50:a9:be:90:93:37:d1:96:2e:f2:
36:31:22:b7:cb:07:95:d4:09:0a:39:5d:52:fb:c8:54:ba:c9:
7c:e4:76:0d:82:63:37:cc:9e:78:c3:a7:ef:52:f8:15:5a:33:
4a:b2:6e:ec:b0:01:88:e4:5e:92:28:47:38:2b:e5:94:05:cf:
d5:b7:2d:f8:93:75:10:b3:41:79:82:8d:65:e1:1d:8a:70:5f:
67:1f:d6:54:69:32:b1:46:e6:4e:10:c5:38:60:93:32:cc:cc:
92:eb:c5:cc:22:bf:7d:54:78:5f:0c:d9:d1:15:b1:fe:27:f9:
d4:6e:cf:dd:98:c7:27:6e:93:80:a0:b8:a1:72:b1:15:35:9f:
35:d5:08:bc:81:b3:b2:5b:a7:b5:85:eb:89:f7:7d:51:a4:d8:
ec:fd:42:a8:2d:03:d1:36:b4:ba:ba:03:9c:5b:30:ee:2c:ec:
d9:50:3f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:23:21 2025 by rpki-client