Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/vzG6_yVY6kNvAtonM4cGo8BCTjQ.roa
File: vzG6_yVY6kNvAtonM4cGo8BCTjQ.roa (raw, json)
Hash identifier: WjItyGknFIL+v5SI49GJ9bXJM6qIgQ52TF+Qnq8Wzg8=
Subject key identifier: BF:31:BA:FF:25:58:EA:43:6F:02:DA:27:33:87:06:A3:C0:42:4E:34
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 157D
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/vzG6_yVY6kNvAtonM4cGo8BCTjQ.roa
Signing time: Tue 11 Feb 2025 23:44:41 +0000
ROA not before: Tue 11 Feb 2025 23:44:41 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 23675
IP address blocks: 203.66.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 01:23:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5501 (0x157d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 11 23:44:41 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=BF31BAFF2558EA436F02DA27338706A3C0424E34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:73:f7:01:69:6b:0e:6a:14:40:eb:bd:df:dd:
43:ef:7e:de:83:cb:46:55:0e:04:90:db:4c:c4:dd:
84:fd:85:03:da:a9:9a:31:8c:16:81:c7:6e:b9:f7:
dc:b6:60:f0:1f:9b:aa:19:80:aa:9a:52:3f:98:0f:
16:9e:37:7c:c0:a9:4f:88:fa:fb:22:12:3e:65:7e:
87:6a:56:43:01:66:de:40:b0:51:d8:0f:96:2b:77:
17:23:11:97:47:53:4a:73:64:04:07:1d:f7:7b:1b:
93:4b:42:fa:8b:84:c3:13:7c:9e:53:5e:d9:93:73:
6a:af:3f:6f:44:f7:1e:04:76:fc:a2:3f:57:90:7a:
8f:a3:69:1a:f5:ec:a7:50:01:3a:1b:98:a6:59:28:
01:88:7b:a2:93:10:18:8d:84:e7:e9:b0:ea:0f:25:
1f:f8:5d:41:6c:99:76:3e:33:24:fc:62:b1:12:83:
97:b0:a3:92:54:af:87:61:d3:4f:ca:58:e8:b9:74:
48:0f:42:a7:85:87:8d:ac:dd:18:6e:b4:0a:43:15:
ae:a7:b1:b1:38:15:f7:b3:af:f6:b2:e9:7a:8d:3d:
1f:b3:20:4a:d4:bd:53:1e:54:26:54:44:6c:f8:cc:
56:3e:0f:df:6c:95:d2:93:a6:10:d0:41:63:2a:e9:
1b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:31:BA:FF:25:58:EA:43:6F:02:DA:27:33:87:06:A3:C0:42:4E:34
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/vzG6_yVY6kNvAtonM4cGo8BCTjQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.66.102.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:49:61:00:b4:70:eb:f6:dc:f2:89:1b:52:68:e6:f3:81:81:
36:9d:0d:9f:7e:31:e0:d4:45:bf:89:5f:9a:eb:7f:35:0d:f2:
77:7e:c5:cf:fd:f4:7e:1f:11:6f:fe:f1:9e:0b:f8:87:4e:7a:
cf:bc:1f:75:3e:42:b3:93:9f:00:63:65:48:01:65:1a:8c:3e:
e5:c6:da:e4:20:b3:fb:57:f6:81:b7:fa:83:ab:9c:07:85:f1:
ca:0b:63:86:ed:b1:8d:cc:ca:1e:4b:ad:22:c7:9e:2b:f8:32:
fb:ab:ac:ea:3e:0d:67:cb:80:42:b4:ff:f6:a1:c3:a4:7f:be:
ba:84:8d:05:1d:d7:a0:90:8a:36:b1:0c:dd:99:0d:56:d7:03:
57:5c:f7:06:9c:c7:42:f8:3a:a3:a8:82:e3:16:08:ce:3a:c8:
ff:d4:42:fe:fe:76:e0:16:50:83:c9:7c:be:dd:d3:de:11:51:
6b:cf:a0:0a:9c:6a:87:c9:cb:69:e2:c1:59:6e:7d:54:93:e0:
0d:04:1b:e7:3d:30:14:23:3f:b6:6f:03:86:dc:fe:6a:33:76:
68:ba:fe:28:0a:5e:a6:66:94:f6:c5:fb:d6:32:51:0a:9a:6f:
09:8c:e7:41:bb:c0:21:99:ba:55:ab:e6:f4:d2:18:57:bd:8e:
48:84:d2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:21:48 2025 by rpki-client