Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/D3kBTi1ygRwM0OfWXs9wy9QseNo.roa
File: D3kBTi1ygRwM0OfWXs9wy9QseNo.roa (raw, json)
Hash identifier: wf1PUDcV0XKUr3TBZg+IRwTZh3gARG22bBV1HmrUG1M=
Subject key identifier: 0F:79:01:4E:2D:72:81:1C:0C:D0:E7:D6:5E:CF:70:CB:D4:2C:78:DA
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 154B
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/D3kBTi1ygRwM0OfWXs9wy9QseNo.roa
Signing time: Tue 11 Feb 2025 23:44:30 +0000
ROA not before: Tue 11 Feb 2025 23:44:30 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 20940
IP address blocks: 2001:b034:700:580::/64 maxlen: 64
Validation: Failed, certificate revoked on Wed 12 Feb 2025 01:22:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5451 (0x154b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 11 23:44:30 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=0F79014E2D72811C0CD0E7D65ECF70CBD42C78DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c1:ae:ad:56:3c:df:fe:c5:3a:49:ca:f4:97:
81:d5:65:2a:42:72:4e:f1:dc:e6:d4:63:9b:29:12:
c0:f9:a3:04:72:13:4a:fc:58:05:23:65:f7:62:d5:
04:a7:f9:b8:7a:cd:a6:17:5f:4d:d1:a0:04:05:db:
b9:53:da:51:2c:25:3e:02:09:9e:d1:24:84:80:ec:
11:15:b9:57:f9:db:a6:30:83:41:7a:4c:01:63:a5:
1c:dc:33:72:e0:5c:16:ef:a5:d7:aa:d5:04:3e:56:
8e:8b:ec:a7:ab:06:17:36:e2:dd:af:79:4e:97:0d:
42:45:b7:5a:09:4b:e8:6c:37:0f:f8:ac:bb:e5:5a:
ff:ba:b8:5f:6d:32:61:c9:7d:fa:19:36:1a:8e:06:
c3:4c:a8:18:ec:a4:b1:cd:08:4c:ac:df:3a:a2:54:
32:04:40:d5:09:b5:37:57:5b:6c:41:5c:9f:c0:4e:
29:54:14:a6:fa:a5:a6:67:3b:a0:14:1d:b0:78:c5:
24:a3:cd:60:70:f3:c7:50:20:8f:b3:59:00:39:df:
b7:e1:78:49:5f:42:44:67:23:34:26:53:bf:f2:8e:
71:5d:a2:06:54:df:75:0b:a8:9d:b3:4c:bc:f9:87:
a9:93:81:9f:7f:50:72:73:01:22:02:55:33:11:d0:
94:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:79:01:4E:2D:72:81:1C:0C:D0:E7:D6:5E:CF:70:CB:D4:2C:78:DA
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/D3kBTi1ygRwM0OfWXs9wy9QseNo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:b034:700:580::/64
Signature Algorithm: sha256WithRSAEncryption
70:32:ec:34:ac:36:c9:5d:f9:a9:96:34:dd:47:2d:71:04:bb:
7f:fe:7d:ec:bb:bf:32:f0:12:41:24:50:32:6d:a3:9b:16:37:
aa:a6:7d:61:94:7a:37:1a:83:7a:e0:ba:ef:b2:18:5e:94:72:
06:d8:d9:d9:d6:94:cb:21:a6:e4:ea:16:94:fa:42:02:69:07:
3a:a9:64:6e:b3:72:ed:a2:0a:84:a5:11:79:bb:c5:b4:47:5c:
af:67:e3:79:61:b8:aa:ea:0a:42:64:80:d5:7e:a9:65:c5:63:
a2:c0:23:d1:5e:f2:ae:82:4a:c3:87:db:43:da:d2:89:0f:75:
9d:b7:d5:c4:93:d2:bb:a8:5f:c3:c1:03:b5:af:77:5e:9c:6d:
48:90:83:6b:ef:d0:7c:32:30:d7:22:b3:81:4d:7c:e6:27:00:
8c:9f:ce:a5:e2:3d:08:e1:fa:77:95:db:02:44:4f:4e:b6:8a:
e5:3c:fb:06:79:29:ae:46:b5:73:0a:6e:78:3d:c8:28:d8:90:
e6:dd:2a:08:fd:d3:13:eb:33:83:db:a8:da:05:ec:95:69:4f:
e0:6d:cf:46:e5:e7:a6:29:84:5e:6e:43:34:ac:c3:28:4f:1a:
ae:ea:3a:38:cb:c0:f7:81:f9:ae:ec:04:57:3f:71:92:27:6f:
a9:37:9b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:02:00 2025 by rpki-client