Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/7baxJd9fkD6fG5OqMtzqawCEpOU.roa
File: 7baxJd9fkD6fG5OqMtzqawCEpOU.roa (raw, json)
Hash identifier: 0TtdA8xecJBwqVjt6Xee54jZUSVpY57CGc2JtyFj0vk=
Subject key identifier: ED:B6:B1:25:DF:5F:90:3E:9F:1B:93:AA:32:DC:EA:6B:00:84:A4:E5
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1519
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/7baxJd9fkD6fG5OqMtzqawCEpOU.roa
Signing time: Tue 11 Feb 2025 23:44:19 +0000
ROA not before: Tue 11 Feb 2025 23:44:19 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 203.74.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 01:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5401 (0x1519)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 11 23:44:19 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=EDB6B125DF5F903E9F1B93AA32DCEA6B0084A4E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:08:b4:db:95:85:0f:ed:6b:ba:b9:e5:38:ea:
76:b1:b6:cd:47:c2:88:07:2e:19:3b:4b:36:3b:5d:
f3:0d:0c:62:a6:89:03:f8:2f:cb:78:76:49:21:07:
97:c1:8b:41:4e:43:fb:9b:09:07:a2:94:7d:aa:5f:
df:8d:38:36:80:8e:db:ca:45:6b:9e:f4:40:ed:a5:
62:bd:b5:03:7a:94:39:62:44:a7:15:c4:ba:1c:55:
84:0d:41:6c:a7:b8:7f:83:11:80:93:f4:71:f9:f7:
56:dc:08:64:08:6c:eb:46:2e:0b:18:1b:93:04:bb:
de:23:0a:b5:de:bb:03:c0:09:ec:ad:e2:01:5a:aa:
b2:df:a2:a4:db:80:1e:5b:e7:a5:22:56:7e:4b:57:
1c:9d:e4:9d:d5:26:cb:a1:2d:05:75:4e:d1:d1:dc:
bb:3c:0f:c3:31:1c:61:0c:15:a7:b3:dc:aa:0b:8c:
36:2b:76:c6:5d:94:de:83:df:35:50:c3:15:f0:b4:
a6:8a:48:38:5f:ba:0a:a5:6b:b1:e5:6c:33:d2:a6:
a6:9d:98:9e:7d:be:5a:a3:cc:a4:fa:de:98:70:1f:
5e:1a:00:f1:78:24:07:47:79:9a:80:14:26:26:d4:
e1:b5:2d:aa:0b:4f:97:7e:db:39:78:63:4e:ca:0c:
7e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B6:B1:25:DF:5F:90:3E:9F:1B:93:AA:32:DC:EA:6B:00:84:A4:E5
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/7baxJd9fkD6fG5OqMtzqawCEpOU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.74.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2c:5d:31:3c:78:70:3b:bf:59:7d:47:2e:fd:3c:72:97:7a:04:
93:88:9c:bf:63:a0:63:4a:0a:12:e6:82:8f:99:b4:61:ea:10:
f5:24:50:9c:e5:46:79:20:11:71:19:32:5e:f2:a4:fb:aa:72:
e0:31:7c:c3:17:bf:fd:55:5c:a3:e9:e9:e3:73:36:d8:3f:8c:
db:e4:13:47:bb:9a:f8:d8:bc:4d:59:be:e4:9b:d1:90:4b:ff:
bc:39:a2:41:8f:42:7a:60:aa:0d:54:91:c1:bd:bc:4a:5f:09:
90:29:dc:69:d7:60:d7:58:3c:ee:fa:2f:0f:cc:73:7e:78:19:
10:dc:1e:22:ac:6e:9a:8f:07:5b:08:d9:8f:f7:80:d6:bb:19:
e6:1f:78:1e:8f:ad:13:56:c2:4c:d8:d5:43:bb:94:9d:54:8a:
c7:56:de:e8:09:36:99:5f:da:35:d5:49:54:42:08:79:ff:1a:
27:ac:36:4b:07:8b:c0:bf:ca:cb:93:56:e2:29:e4:b8:5e:8b:
7a:34:79:03:a0:a5:ea:13:66:16:5c:85:ad:45:e3:45:a6:2e:
d9:88:17:67:57:44:e7:87:f5:b0:0f:b7:48:c4:ab:cc:f2:69:
7c:27:8c:e0:d6:14:72:75:da:ae:14:10:44:38:e4:f4:ec:77:
36:b4:0c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:27:45 2025 by rpki-client