Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/vvdHRyPkfe__CnK1sKkVYSxTAhM.roa
File: vvdHRyPkfe__CnK1sKkVYSxTAhM.roa (raw, json)
Hash identifier: 9Mkv8cpD0ycPdlTv35wGWvUa3NgCHZ0EHNdxwEmtewI=
Subject key identifier: BE:F7:47:47:23:E4:7D:EF:FF:0A:72:B5:B0:A9:15:61:2C:53:02:13
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 142B
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/vvdHRyPkfe__CnK1sKkVYSxTAhM.roa
Signing time: Mon 10 Feb 2025 14:34:40 +0000
ROA not before: Mon 10 Feb 2025 14:34:40 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 1.34.0.0/15 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 23:44:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5163 (0x142b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:34:40 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=BEF7474723E47DEFFF0A72B5B0A915612C530213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:48:a8:87:f0:e7:09:ea:1f:84:b0:04:8e:f6:
4d:cc:00:05:24:83:fc:ee:c3:af:7d:73:7a:01:be:
42:d4:01:f2:da:89:42:48:41:bf:04:1e:a4:06:f0:
5b:f8:90:d1:40:2a:86:4e:2f:a7:26:50:ad:45:b6:
ef:2a:ae:9e:7a:7b:b7:b5:cb:9c:b2:63:7f:2b:a7:
0c:c2:9a:c6:f8:77:a4:a1:ec:22:f7:54:bf:73:62:
03:60:5e:b4:45:bf:84:57:fa:2b:17:01:31:54:04:
c4:8d:33:3c:23:6a:69:a8:32:50:6c:1d:e0:dd:f5:
fa:1b:01:06:64:7c:d3:d4:31:05:ef:40:36:10:e7:
20:85:cd:73:38:47:e4:24:ef:d5:af:30:fc:7b:f4:
98:63:67:a3:bd:22:36:4c:67:f1:18:6e:cb:7d:78:
ec:c0:66:84:16:c5:9a:41:e4:0b:25:06:ad:79:58:
79:84:8b:4a:d1:dc:22:7b:d0:bb:91:16:99:a0:f8:
40:de:f8:31:32:c2:49:5c:00:14:0e:f6:80:63:8c:
72:35:95:00:e9:3e:1c:4e:8f:2f:8c:9c:55:a6:83:
64:f7:25:4e:0b:33:42:d8:d3:07:01:f7:23:e2:49:
9f:3d:ff:27:9f:ea:1c:6c:c1:89:a8:5c:e5:25:42:
b6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F7:47:47:23:E4:7D:EF:FF:0A:72:B5:B0:A9:15:61:2C:53:02:13
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/vvdHRyPkfe__CnK1sKkVYSxTAhM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
1.34.0.0/15
Signature Algorithm: sha256WithRSAEncryption
26:ea:c0:77:3b:6d:31:fe:19:b7:e7:06:15:7e:b7:0b:db:c8:
f1:64:c3:ed:09:1f:09:f2:3a:04:b4:e9:7b:2f:d1:63:69:cd:
dd:79:fe:e9:57:a4:89:76:40:3e:5d:0b:0f:26:db:a6:04:1e:
cd:b7:75:89:72:cd:59:b3:4d:20:78:e6:23:e9:ad:ef:e6:ca:
92:9e:39:ef:69:80:b2:4d:93:f2:62:21:19:ac:05:22:ae:b1:
c7:d6:0e:87:4c:ee:56:c8:46:0a:97:f5:c8:ca:dc:a9:99:fd:
4e:48:1a:15:00:2f:7d:e7:7c:73:e3:27:c1:94:29:77:44:0c:
ab:22:d3:f7:d2:4f:82:80:be:5c:47:47:d7:3e:30:56:f6:2b:
bf:03:0f:11:1f:7a:3d:f2:81:9b:10:c9:3e:bd:17:77:f5:ae:
02:d0:84:20:98:de:00:5a:12:00:ee:61:25:8f:60:21:86:49:
4c:fd:76:21:f9:ea:8f:2a:4b:c2:e1:fc:e4:07:08:64:76:1f:
d5:41:a8:52:e7:00:a9:c1:bd:f6:95:60:fc:ce:d0:13:12:6f:
82:97:bb:b1:d9:1b:51:d5:8e:fc:9e:16:23:f5:74:37:11:ac:
af:b1:08:b7:ec:1a:c2:33:86:23:d9:1e:ad:e5:04:bf:a4:d3:
12:8f:82:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:34:27 2025 by rpki-client