Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/5uSVZeYDOH9FCeG7U7K4Pda2UIw.roa
File: 5uSVZeYDOH9FCeG7U7K4Pda2UIw.roa (raw, json)
Hash identifier: yLzEqrBRyQ1zVuzB21fPQvuTs+1fkc8qNwdUYidhhgU=
Subject key identifier: E6:E4:95:65:E6:03:38:7F:45:09:E1:BB:53:B2:B8:3D:D6:B6:50:8C
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1594
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/5uSVZeYDOH9FCeG7U7K4Pda2UIw.roa
Signing time: Tue 11 Feb 2025 23:44:45 +0000
ROA not before: Tue 11 Feb 2025 23:44:45 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 1.160.0.0/12 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 01:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5524 (0x1594)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 11 23:44:45 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E6E49565E603387F4509E1BB53B2B83DD6B6508C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c0:18:9c:fd:00:07:c1:87:0f:be:e4:de:d5:
cd:d2:d8:43:39:3d:eb:17:8a:ee:10:9a:fe:ab:f9:
e6:18:35:ab:25:9c:28:7f:af:7f:f8:9a:1d:48:16:
19:0c:ae:c2:55:f3:a1:aa:f7:01:23:a9:85:71:a4:
ed:91:4d:0d:f9:cb:d4:51:77:b0:76:54:ee:74:40:
1b:45:b2:0a:41:71:d8:18:aa:97:8e:43:28:d8:8b:
d2:18:9b:e3:e3:cf:0e:7e:72:72:d1:97:a5:25:39:
98:23:93:2c:8a:f3:b3:0a:b7:7c:92:6d:78:5f:fc:
4d:5a:77:76:63:7e:67:a3:23:0a:9b:08:b5:a4:3a:
3a:ab:ff:4d:45:d8:b6:31:50:54:8d:23:ef:4f:e8:
1b:e8:cd:9c:0a:b1:d6:c0:90:76:b8:0f:2b:54:92:
83:40:15:94:16:af:98:6a:9c:df:b3:86:76:1f:e5:
96:29:d4:40:7a:9a:2c:19:20:ef:6b:36:02:5a:bf:
50:31:d8:59:a8:bc:c2:7c:7b:7d:cb:e4:9c:0b:01:
c4:08:68:25:a8:f7:0a:cd:3e:2f:9e:10:6a:a9:c4:
e4:51:46:3f:4c:57:43:e6:41:99:51:42:d4:a1:ac:
a5:76:23:89:8a:31:a7:4e:58:19:aa:77:b7:1b:59:
ec:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E4:95:65:E6:03:38:7F:45:09:E1:BB:53:B2:B8:3D:D6:B6:50:8C
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/5uSVZeYDOH9FCeG7U7K4Pda2UIw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
1.160.0.0/12
Signature Algorithm: sha256WithRSAEncryption
94:be:e0:91:0a:a5:c7:84:d4:b5:32:fa:d6:fd:d9:9c:ef:9c:
83:eb:35:69:f0:58:8b:10:7a:e8:48:c2:4f:87:d8:1d:bc:03:
4c:a2:bd:bf:b9:7e:99:d9:c0:ed:36:b7:d8:9f:78:ef:17:82:
f8:2e:14:6c:f9:18:17:cf:9f:ed:61:e1:0d:b7:98:eb:63:f0:
c2:e3:d6:03:bb:41:f7:1d:06:03:e5:99:c8:73:30:c8:15:6c:
1e:70:b0:1f:af:96:62:9b:9a:70:33:f1:65:2d:5e:10:88:9f:
74:5d:c2:05:9d:4e:55:0f:fc:dd:57:1f:b4:86:d8:7f:a9:f9:
0e:40:5f:3a:1d:64:6c:8f:e1:38:05:4d:76:d8:96:fc:0b:df:
43:e4:07:3d:d0:bc:25:52:b6:65:4d:1e:a2:36:0a:67:f0:ad:
27:1d:53:19:7a:ec:ab:97:08:19:13:20:3b:11:08:cb:11:00:
e8:57:6a:43:2e:89:af:78:84:6a:49:ec:70:22:54:06:5c:e5:
94:1f:5d:cf:a5:ab:1f:23:75:4b:4f:1e:ad:2c:df:5b:7d:1c:
d6:56:d8:a4:33:d5:bd:4d:aa:5f:a5:30:63:43:8d:8e:cb:66:
13:0b:e9:00:bb:e0:58:9e:43:db:99:7d:8a:a0:ad:12:2d:57:
95:1b:48:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:40:42 2025 by rpki-client