Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/znxnkkVsL0kb-hd14y1TTR12MLs.roa
File: znxnkkVsL0kb-hd14y1TTR12MLs.roa (raw, json)
Hash identifier: 5JEbCjML5SGgsbkl6R1LY0yfRv7E/fcQ+UyUKr+ocj0=
Subject key identifier: CE:7C:67:92:45:6C:2F:49:1B:FA:17:75:E3:2D:53:4D:1D:76:30:BB
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 144B
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/znxnkkVsL0kb-hd14y1TTR12MLs.roa
Signing time: Mon 10 Feb 2025 14:34:47 +0000
ROA not before: Mon 10 Feb 2025 14:34:47 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 122.120.0.0/13 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 23:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5195 (0x144b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:34:47 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=CE7C6792456C2F491BFA1775E32D534D1D7630BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:89:4f:d7:b2:68:c6:2b:11:d0:71:a6:c1:b3:
e9:38:34:42:eb:49:53:90:11:41:5a:17:eb:04:fd:
8d:3b:84:74:b0:ab:f4:a3:57:87:ea:5f:8b:fb:22:
42:2b:93:26:7b:8f:0b:86:f7:d4:a2:b0:26:16:c0:
e9:11:1e:bd:ea:58:5d:77:e8:07:ef:c1:fb:25:7a:
33:a6:f2:4e:80:d5:23:db:e1:88:e4:8a:93:ff:07:
44:07:03:37:19:2a:b3:bb:d8:a9:9a:fe:8b:79:00:
fc:aa:d1:06:73:17:42:2f:da:bb:2d:ed:cc:fb:2c:
34:2f:e4:8e:b8:f4:7f:14:76:0d:c7:01:17:56:34:
55:bc:ed:8b:8b:42:52:8a:06:20:c0:99:0d:84:49:
ea:e0:64:00:f0:50:9f:e2:11:5d:19:9d:6c:d3:2e:
7c:89:f0:55:98:00:30:e3:5c:34:3a:67:1e:6c:11:
29:6c:b5:0a:a4:f9:87:c4:8a:4b:b6:f7:82:7b:6d:
1d:69:be:e2:dd:69:ae:84:f8:c6:c3:b8:ca:d4:85:
ff:a4:3e:87:23:57:9b:f6:b4:b2:da:98:cd:c2:fc:
56:cb:36:6e:c7:df:d9:99:1c:a7:bc:95:2c:c0:43:
a1:ba:b6:49:d5:d8:85:f3:7e:d1:70:88:08:d0:da:
e4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:7C:67:92:45:6C:2F:49:1B:FA:17:75:E3:2D:53:4D:1D:76:30:BB
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/znxnkkVsL0kb-hd14y1TTR12MLs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.120.0.0/13
Signature Algorithm: sha256WithRSAEncryption
26:a6:6f:f0:93:3f:4a:9e:ea:36:a1:f6:1a:d9:55:64:83:86:
80:8f:c7:d1:c3:53:97:b3:78:73:73:71:f5:b9:b2:e4:8b:8b:
41:98:0f:20:9e:57:17:68:4f:6e:b5:eb:98:8b:ec:8c:1a:be:
f6:52:95:a7:69:fb:c1:b5:b6:bd:39:0e:ec:b0:2d:4a:ee:17:
62:a2:75:c6:2d:f4:1d:8f:ce:fa:27:34:7d:76:ca:e6:f1:00:
da:0f:80:0f:ab:e0:4e:fe:14:d9:e3:17:ff:68:27:9b:94:c8:
7b:96:33:84:56:da:ef:ce:5b:46:02:c7:d2:6a:c9:f6:2c:53:
34:8f:44:b1:e4:ca:fa:a8:22:cf:b0:9a:3d:01:fc:68:33:c5:
c0:2b:32:76:7d:58:6b:83:88:6f:87:b2:5f:40:01:07:6c:84:
92:5d:25:ba:8d:69:6a:59:b6:86:ba:5d:e6:79:3b:a6:1b:0a:
e3:21:e3:6f:47:2e:cd:b3:ab:1b:48:92:fc:3d:77:7b:a7:a0:
f2:67:26:a6:1b:6d:75:f9:95:3f:6d:a7:29:57:b5:fe:98:34:
86:d1:b6:23:86:be:4e:c4:12:6c:8c:d2:94:62:8c:57:26:6a:
25:1a:52:b9:83:cf:13:1f:83:0b:cb:5f:5d:ae:04:10:5b:05:
7a:5d:02:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:30:15 2025 by rpki-client