Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/6UR6HG3rDY-q9uUQhlxZEiXzyI0.roa
File: 6UR6HG3rDY-q9uUQhlxZEiXzyI0.roa (raw, json)
Hash identifier: 3qUP8dZJqmtUNQK2JoUfP919L8dsJN6rmPG7/csOikU=
Subject key identifier: E9:44:7A:1C:6D:EB:0D:8F:AA:F6:E5:10:86:5C:59:12:25:F3:C8:8D
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1568
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/6UR6HG3rDY-q9uUQhlxZEiXzyI0.roa
Signing time: Tue 11 Feb 2025 23:44:37 +0000
ROA not before: Tue 11 Feb 2025 23:44:37 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 800
IP address blocks: 175.111.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 01:22:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5480 (0x1568)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 11 23:44:37 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E9447A1C6DEB0D8FAAF6E510865C591225F3C88D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:03:4a:9f:e6:a4:aa:fa:0d:3a:28:67:73:10:
ef:92:8a:ce:e8:85:9f:85:70:60:73:b8:55:d4:7e:
bf:fb:ee:45:30:fa:c5:1b:98:6d:6d:ed:dd:35:c5:
8f:7a:da:7c:5c:f1:e0:d3:07:68:5e:66:89:b6:14:
20:1c:d1:36:c3:87:fb:d0:b6:fc:fc:af:12:72:6c:
6a:03:ed:bd:f8:14:32:89:26:ac:aa:42:5f:f6:c0:
31:5c:c2:7c:db:72:c2:28:b8:dd:5a:91:67:63:d9:
7e:ad:d7:73:e1:3d:b4:a6:c7:fd:4f:81:ba:af:6c:
1f:c9:a8:ff:f0:ea:bd:03:f0:fb:26:55:67:b9:b7:
e1:8d:50:73:8c:0d:0a:6f:ef:d3:02:95:bd:ca:e6:
bf:17:99:13:9f:80:e0:d1:94:f2:d2:b6:aa:60:bb:
f4:8a:f8:bd:10:4d:3e:36:81:04:80:e1:f6:01:5f:
b4:17:36:b4:c6:15:5e:9b:c6:53:6e:7c:67:9d:c1:
ef:6e:07:37:aa:59:e2:31:04:f9:96:2f:ab:45:53:
be:18:43:b8:db:38:39:37:8a:a9:32:dd:63:b4:1f:
94:b8:f7:f4:3e:2f:52:08:36:0d:41:8f:2d:1a:da:
e4:f5:5d:ba:c3:5b:e4:8d:9d:91:b3:75:65:7e:54:
13:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:44:7A:1C:6D:EB:0D:8F:AA:F6:E5:10:86:5C:59:12:25:F3:C8:8D
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/6UR6HG3rDY-q9uUQhlxZEiXzyI0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.111.237.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:08:1e:e6:2b:c1:3e:c4:ae:87:cb:48:25:75:db:fa:09:b9:
e5:29:07:ca:aa:20:2c:c1:d5:42:5a:08:81:9e:c4:59:fe:b7:
d9:a0:01:cb:e6:d4:1f:ee:c5:19:4b:00:4f:30:f9:68:ed:ea:
78:2b:2b:7e:74:83:40:06:97:5d:81:b1:a0:97:9c:30:1f:06:
b9:89:e1:b6:bc:f2:d8:92:f7:3b:d0:fa:b2:aa:05:eb:f4:4f:
f8:76:6e:c3:28:d7:64:60:e2:92:f9:48:03:a2:6c:a2:f4:f8:
6f:f5:24:f0:4f:78:75:58:50:01:2e:a1:a5:7a:48:3b:6c:8d:
f7:65:5a:75:96:aa:63:45:11:6f:e7:5b:01:82:76:28:c8:3d:
ca:cc:b1:44:59:cc:72:d7:48:74:64:60:7c:26:ff:c9:60:b4:
37:46:f2:15:4f:08:c2:4b:e4:cb:d3:ab:18:b7:12:e6:6f:b6:
ab:a3:af:fd:c6:96:b5:96:af:ca:e7:84:70:e5:95:c1:3b:cf:
02:60:26:33:53:3c:b5:9a:94:08:8d:2c:87:60:1c:ab:fc:87:
95:9a:7d:39:60:f0:ae:55:85:89:b1:24:cf:b7:f6:ef:98:26:
e3:9f:d5:7d:79:95:e8:11:81:86:25:5e:e2:7a:fa:44:af:d4:
22:dd:6d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:42:10 2025 by rpki-client