Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/L8wS0_7wR73ahn6P0AS00XhWUgs.roa
File: L8wS0_7wR73ahn6P0AS00XhWUgs.roa (raw, json)
Hash identifier: wyTqREAWLz21zeChy3oXa3p+y7myzqaPoi+QMfKwcjw=
Subject key identifier: 2F:CC:12:D3:FE:F0:47:BD:DA:86:7E:8F:D0:04:B4:D1:78:56:52:0B
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1532
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/L8wS0_7wR73ahn6P0AS00XhWUgs.roa
Signing time: Tue 11 Feb 2025 23:44:25 +0000
ROA not before: Tue 11 Feb 2025 23:44:25 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 2001:b400:e9f0::/44 maxlen: 44
Validation: Failed, certificate revoked on Wed 12 Feb 2025 01:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5426 (0x1532)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 11 23:44:25 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=2FCC12D3FEF047BDDA867E8FD004B4D17856520B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:88:25:09:53:fe:c0:43:21:be:2c:0d:09:cf:
d7:f3:e1:2b:21:82:e5:45:3f:a8:a7:d7:31:51:2e:
99:92:a7:29:f7:51:cf:4a:92:e8:d4:e4:0f:1b:68:
d8:20:9c:ba:22:b9:30:ec:35:e0:5f:07:00:5b:d6:
48:b5:6a:9e:9e:d9:82:f1:e9:9e:3e:17:4c:ba:67:
fa:a2:bb:71:d6:30:82:b6:44:45:66:b2:b5:ff:34:
34:3f:84:44:ce:17:0b:6e:75:32:77:e6:0b:e6:9e:
e7:72:71:c2:69:aa:d4:99:55:2e:8d:2f:d6:ec:b5:
86:5a:11:21:d3:40:a5:cb:3a:d3:96:23:0d:39:e0:
92:19:df:19:c7:0c:49:18:39:98:06:e4:8a:00:29:
a5:53:ff:21:dc:64:89:22:2a:28:da:50:2b:2a:2c:
c9:4e:53:41:8a:79:a1:99:81:00:e5:e9:79:4b:29:
42:d8:40:1b:04:d9:17:e3:de:f0:7b:46:9f:56:9e:
3f:62:d1:de:aa:c0:be:41:d5:59:b9:73:64:81:e6:
a6:be:28:14:bf:b8:dd:d0:f4:99:15:b9:84:9e:62:
d1:92:1b:77:bd:1b:1c:8d:0d:81:09:66:55:04:52:
54:c6:2a:90:5b:12:02:45:bf:a7:6e:2f:c2:02:9f:
91:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CC:12:D3:FE:F0:47:BD:DA:86:7E:8F:D0:04:B4:D1:78:56:52:0B
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/L8wS0_7wR73ahn6P0AS00XhWUgs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:b400:e9f0::/44
Signature Algorithm: sha256WithRSAEncryption
9e:a4:ba:4f:ec:52:35:4c:43:03:9f:e1:c0:eb:0f:7b:63:14:
d7:09:ed:8b:5f:ee:6b:ef:f5:cb:b5:94:a6:fe:ac:7f:61:d3:
e3:93:d2:ce:f3:0c:8c:7b:9e:b2:4f:24:d5:a1:4a:89:58:09:
d7:e5:89:58:c5:bf:a2:8a:3f:4d:76:53:92:56:f7:98:45:d9:
1e:a4:e3:25:08:e7:10:7a:84:2f:21:12:49:e8:e4:75:f4:31:
da:03:87:c1:47:24:7e:2e:d5:2d:bb:ae:6d:7d:1f:6e:db:b6:
e7:8f:28:15:83:15:e9:0a:39:8b:1f:7a:5c:c2:4a:f0:a4:02:
50:fd:52:14:1e:06:ff:b6:a5:7a:bf:3b:4e:ae:8f:7d:17:11:
8f:17:bd:70:ed:a0:c6:2a:c9:31:62:72:af:0f:3d:09:b1:c0:
31:e1:2b:c2:35:60:1e:c4:dd:d7:0a:2f:ba:6a:8c:bc:94:21:
48:4f:21:3c:5f:5d:c8:0b:38:80:18:91:c8:92:b3:fd:e2:45:
15:54:c6:68:d9:f2:29:c4:14:49:8d:41:8c:e6:91:ca:30:e6:
be:6b:d0:03:e8:cb:47:e0:f6:9f:cd:0a:1b:5f:d1:b7:b6:bc:
a4:bf:30:a2:27:92:67:e0:2a:42:d4:1d:2d:54:4d:83:0a:86:
49:24:ff:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:11:42 2025 by rpki-client