Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/yxI1fnddBoKBnEVmAjOiOFrdu_A.roa
File: yxI1fnddBoKBnEVmAjOiOFrdu_A.roa (raw, json)
Hash identifier: ByiLEvcfEU8OPYgh6LrY0GXrLnqeiuujodK0JLzVFy4=
Subject key identifier: CB:12:35:7E:77:5D:06:82:81:9C:45:66:02:33:A2:38:5A:DD:BB:F0
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 14C6
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/yxI1fnddBoKBnEVmAjOiOFrdu_A.roa
Signing time: Mon 10 Feb 2025 14:35:16 +0000
ROA not before: Mon 10 Feb 2025 14:35:16 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 111.240.0.0/12 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 23:44:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5318 (0x14c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:35:16 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=CB12357E775D0682819C45660233A2385ADDBBF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:91:e4:41:4a:73:14:c2:d8:4d:6e:b5:4b:a9:
78:52:b7:2d:a4:2d:a2:1f:a9:4e:d5:d7:c9:d4:99:
3c:6b:09:3f:4f:b5:6a:8a:6a:58:08:3f:df:83:d3:
8b:e5:55:94:96:b5:06:69:8d:14:34:f0:cb:99:bd:
2c:ab:85:47:2e:d7:ad:d1:44:51:ee:43:72:62:02:
95:cc:56:39:4a:b8:eb:28:12:62:c3:87:77:c9:81:
b3:1d:95:5e:6b:25:cb:3a:42:2d:19:e0:4f:ea:4c:
da:40:11:bf:de:7c:15:61:6d:93:4c:be:96:81:a4:
df:25:5e:94:1c:79:45:98:9d:64:19:33:18:ed:34:
3d:ea:7b:72:f8:b3:1f:81:14:14:3b:58:b0:82:14:
22:b5:b6:8d:bd:cb:4b:4a:d1:c5:d7:4d:5f:c5:53:
f2:78:44:5e:95:d3:46:b2:28:1c:3d:46:bf:31:dd:
03:39:06:a4:54:b9:7e:bd:c0:69:b0:f0:d6:4d:a8:
d8:23:1a:d6:f6:a3:ff:3a:e3:4a:ce:d3:0e:ff:55:
dd:62:be:be:b4:56:32:bb:c3:fc:01:fc:af:5f:e4:
80:cc:0f:aa:db:f0:1f:bf:7d:c4:f2:2a:6f:46:22:
d6:15:3a:59:82:8e:e6:d2:46:9a:80:fd:29:00:71:
4b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:12:35:7E:77:5D:06:82:81:9C:45:66:02:33:A2:38:5A:DD:BB:F0
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/yxI1fnddBoKBnEVmAjOiOFrdu_A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
111.240.0.0/12
Signature Algorithm: sha256WithRSAEncryption
59:1d:bd:36:c6:a1:04:95:4c:e3:e1:d8:6c:3e:d7:3f:0a:06:
0f:1d:20:fb:2f:79:83:c0:86:e2:de:fb:72:30:d4:76:ce:52:
39:ab:3b:74:55:ff:52:7e:18:a0:31:f8:ce:11:6e:11:3c:38:
32:1d:26:81:3d:9a:15:69:68:eb:23:43:2f:4f:25:71:59:2d:
17:db:4d:19:de:f0:4c:b7:8a:26:d0:f8:88:2c:99:64:fa:a7:
c9:4f:ce:2c:b7:64:27:18:40:61:e2:b4:4d:1a:09:fd:6b:dc:
13:d3:7d:e7:74:65:46:15:ff:3a:57:24:65:94:87:e7:ce:75:
c9:0d:9e:6e:17:dd:11:f2:8f:dd:5e:ab:f9:48:f4:95:dd:44:
9e:17:c3:e8:fc:73:21:64:37:e5:72:cb:e9:36:fc:78:98:db:
6a:f4:71:ed:3c:9c:ca:e8:95:43:ea:dc:5f:0d:94:d4:59:ab:
7b:2a:07:3f:a5:0f:3a:54:8f:27:cb:c1:0c:ae:40:93:41:a1:
32:00:32:cd:38:88:d5:40:57:05:e0:be:3f:54:35:0f:a1:b4:
ef:79:28:73:e8:1c:67:7e:91:b5:d6:6a:55:70:48:d3:86:19:
13:76:44:01:06:3f:6f:a5:f4:d3:95:df:70:e2:37:7c:93:f5:
53:a9:9a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:43:31 2025 by rpki-client