Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/BJrcTIVMv7hja1PvC91hpp4B8ZM.roa
File: BJrcTIVMv7hja1PvC91hpp4B8ZM.roa (raw, json)
Hash identifier: Fa68Pv7fcObPJhsO9GQF1oxl8xRp+Fu60sMrptszoPs=
Subject key identifier: 04:9A:DC:4C:85:4C:BF:B8:63:6B:53:EF:0B:DD:61:A6:9E:01:F1:93
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1460
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/BJrcTIVMv7hja1PvC91hpp4B8ZM.roa
Signing time: Mon 10 Feb 2025 14:34:51 +0000
ROA not before: Mon 10 Feb 2025 14:34:51 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9505
IP address blocks: 175.111.224.0/20 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 23:44:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5216 (0x1460)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:34:51 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=049ADC4C854CBFB8636B53EF0BDD61A69E01F193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:57:8d:5e:33:77:cc:b2:40:35:f3:30:f7:44:
b6:4f:50:a2:92:17:86:79:d4:1e:09:2a:bc:bb:d9:
06:c1:f7:68:00:d4:3b:48:dc:14:a6:e3:02:19:e0:
08:f9:0a:ed:12:c0:3f:87:90:d9:6c:0e:02:d7:5f:
75:b8:60:1b:af:76:82:d0:bb:dc:7a:e6:e9:5b:fc:
9f:80:b7:6a:ae:fa:c0:43:55:27:02:63:3f:b4:54:
f2:87:42:43:68:22:79:49:02:d9:22:93:94:00:8f:
14:ec:ec:9a:95:fe:73:d3:9d:a5:0a:54:db:3d:c5:
15:bf:cc:a4:f5:40:f2:04:7e:3f:d4:b5:22:fb:76:
8d:45:02:96:76:59:b4:47:ad:b9:94:11:d2:1d:52:
a6:ac:70:ae:84:77:52:4a:a3:1d:41:60:17:93:fe:
f4:4f:62:54:2c:b3:71:40:70:31:a0:33:6c:aa:54:
5b:a8:42:18:f1:fa:a7:43:16:1f:25:4d:d2:51:c4:
57:f2:13:56:1d:f1:f0:c2:f5:23:4c:f5:d6:25:46:
ed:1a:92:d8:d0:53:f8:d9:d0:88:3f:e7:8b:8a:24:
d6:cc:09:71:be:49:2f:8e:7c:91:ff:6d:a7:0b:9f:
f6:5d:e7:ba:56:0a:77:85:b9:01:70:f3:57:f4:61:
3c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9A:DC:4C:85:4C:BF:B8:63:6B:53:EF:0B:DD:61:A6:9E:01:F1:93
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/BJrcTIVMv7hja1PvC91hpp4B8ZM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.111.224.0/20
Signature Algorithm: sha256WithRSAEncryption
57:7f:f8:7d:c2:aa:44:31:c4:f9:7c:e2:0b:e0:da:79:15:f0:
e4:c5:69:18:b3:13:e0:09:66:0b:e6:51:6c:5a:e8:4f:ea:53:
e0:9b:d1:24:0c:71:95:c7:a0:68:69:63:d0:78:43:98:a2:77:
16:1a:a6:20:23:3d:1a:f9:63:5b:d0:0f:ee:3e:ea:d7:96:8d:
e5:b7:3e:72:e0:38:3b:bd:76:e4:40:4a:a5:39:75:ac:9a:63:
c4:ac:fc:a4:5e:cd:28:b2:43:63:b5:4c:8f:de:b2:aa:e9:7d:
69:b1:b6:7f:97:9c:a8:e6:fc:56:52:30:94:d9:3c:b2:b5:3b:
90:4b:3d:be:86:c7:31:8c:35:62:dc:73:1b:5d:01:9f:00:da:
af:71:e9:b1:dc:6d:64:cf:f3:48:b6:f0:fb:d1:00:16:3d:d7:
e3:b3:67:35:1c:15:6e:64:bd:d7:9f:49:74:42:fc:69:c2:8f:
35:89:71:01:46:7f:74:3a:d4:f5:f2:a8:50:24:f8:0b:2f:87:
1e:6d:36:0f:5e:3f:a5:46:47:f0:82:91:f3:50:d1:6d:b6:83:
42:e7:bb:2c:d1:06:f6:0c:be:1e:e8:c8:6b:1a:0b:71:94:e4:
a9:f7:c7:7f:87:7f:c7:a0:0a:f0:9c:1f:93:dd:e4:e2:18:5e:
23:ab:e6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:51:22 2025 by rpki-client