Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/3DinPO0Z1QG_eNYm6fnxR8xleFg.roa
File: 3DinPO0Z1QG_eNYm6fnxR8xleFg.roa (raw, json)
Hash identifier: Vvp1qWA3OYC0l9mPaTBeD+06XPNu/w83fbj7l4HYsWg=
Subject key identifier: DC:38:A7:3C:ED:19:D5:01:BF:78:D6:26:E9:F9:F1:47:CC:65:78:58
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 155C
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/3DinPO0Z1QG_eNYm6fnxR8xleFg.roa
Signing time: Tue 11 Feb 2025 23:44:34 +0000
ROA not before: Tue 11 Feb 2025 23:44:34 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 198949
IP address blocks: 210.242.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 01:22:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5468 (0x155c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 11 23:44:34 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=DC38A73CED19D501BF78D626E9F9F147CC657858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f1:ac:f7:37:2c:22:28:8c:d7:41:6b:f6:13:
80:70:dd:03:84:70:50:16:a2:64:3c:79:c8:83:e4:
92:87:d1:d2:63:d6:5a:10:0f:20:3e:87:62:21:a1:
69:a5:f1:38:d2:9b:73:7c:7f:de:1d:34:6b:ab:d9:
80:25:22:31:f9:3d:e5:54:f9:c7:27:84:b1:02:7c:
90:95:9e:71:72:ff:0a:63:1f:0a:08:8e:d1:6f:df:
94:b7:53:2e:3c:7f:c4:10:b4:7d:95:68:3a:5a:15:
da:8b:94:c5:48:9f:44:e5:83:1f:bf:0e:25:18:9e:
db:d8:10:54:41:80:fb:46:de:13:71:d0:b8:f2:21:
e0:a7:68:43:d1:de:9f:13:66:6e:3a:3a:df:e2:2b:
cf:55:5a:43:be:51:f2:53:bf:44:19:62:f6:91:bd:
87:86:4c:ab:a1:01:ab:d9:e8:44:c0:ac:60:0f:7b:
7e:63:6c:83:f5:10:37:29:5f:84:46:49:28:80:f9:
42:85:be:48:39:72:48:e3:8e:92:b6:c9:d9:ab:68:
ab:3e:4a:19:c2:33:28:4f:0a:d6:27:0d:c7:d0:88:
e4:9f:ae:f4:15:73:20:43:fa:51:bf:e9:bc:4d:4c:
01:0a:8d:d6:ab:47:92:58:9b:d1:bc:a5:17:87:61:
7b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:38:A7:3C:ED:19:D5:01:BF:78:D6:26:E9:F9:F1:47:CC:65:78:58
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/3DinPO0Z1QG_eNYm6fnxR8xleFg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.242.186.0/24
Signature Algorithm: sha256WithRSAEncryption
00:bc:2a:f9:48:07:9e:35:60:42:2b:6d:3d:27:46:8e:9a:d9:
9e:6b:9f:f1:db:83:51:f9:97:66:f2:c8:7c:44:e3:fc:d6:84:
bb:b2:e3:d3:ce:35:ba:f1:54:33:2a:41:1c:68:6e:b9:a1:58:
80:39:38:ff:7b:b7:a3:15:cc:6b:94:54:ef:7c:66:54:92:c5:
84:ec:02:bf:cf:4e:3a:4f:6f:92:1e:51:05:b9:30:dd:aa:50:
cf:98:fc:cd:94:39:91:f2:1e:61:f3:cd:25:13:ea:60:db:76:
88:5e:22:e2:43:c8:74:95:2e:79:f2:54:04:62:6d:5b:ef:80:
a7:3c:4b:4e:d1:5e:a0:da:35:f2:4e:f3:08:d2:29:0b:34:13:
62:71:2c:89:bf:af:35:97:24:3f:58:93:f4:16:36:a6:b8:8e:
9e:8a:f7:a4:db:9d:46:17:87:f9:fb:e7:99:db:c6:1f:2d:df:
22:d6:19:7a:09:85:eb:13:33:45:49:9a:e3:61:4c:6d:30:0e:
55:22:2f:2b:fa:68:e3:9e:0d:bd:c9:bb:e3:05:b5:97:c7:0e:
9b:f9:39:b6:86:0d:88:cb:cb:96:96:2a:3e:0c:7f:c5:a4:f6:
5c:7f:b4:b7:39:ab:02:13:4a:40:3d:2d:ee:90:3e:01:80:3e:
ba:4e:f2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:14:10 2025 by rpki-client