Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/QV5DEvHtUtibXRZ4RI0n-RgT054.roa
File: QV5DEvHtUtibXRZ4RI0n-RgT054.roa (raw, json)
Hash identifier: w0GfWyqx1o2mk8DVGKDtk7GhI/4lbIvKAFPwMhlhdVY=
Subject key identifier: 41:5E:43:12:F1:ED:52:D8:9B:5D:16:78:44:8D:27:F9:18:13:D3:9E
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1573
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/QV5DEvHtUtibXRZ4RI0n-RgT054.roa
Signing time: Tue 11 Feb 2025 23:44:40 +0000
ROA not before: Tue 11 Feb 2025 23:44:40 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 211.75.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 01:22:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5491 (0x1573)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 11 23:44:40 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=415E4312F1ED52D89B5D1678448D27F91813D39E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6e:ce:18:d0:c3:ce:9d:66:d8:d6:ab:74:c0:
a1:e2:b0:ba:d4:66:a2:34:06:36:26:32:40:4b:38:
86:3e:ca:5a:98:cf:f4:99:de:45:65:be:d6:47:c5:
6f:e2:5a:38:18:46:8f:8c:87:9a:66:a3:4a:8c:66:
12:9f:65:d7:06:c5:05:46:84:93:58:ba:52:0d:44:
0a:f5:b0:93:cc:a4:91:4a:55:89:8c:77:5f:89:57:
cb:24:df:ad:a4:5c:89:84:67:57:94:f3:17:df:48:
d7:a6:db:ad:40:ff:ee:65:37:e9:09:a8:c9:eb:92:
05:ba:9e:f8:6e:6a:d9:b7:1e:e6:ec:51:f4:56:66:
ea:c0:90:6d:c1:48:10:36:2a:e0:3c:b9:c7:da:34:
a1:6a:d0:8a:8a:00:c2:7c:f0:67:ab:dd:e7:b2:a5:
7f:1f:65:bc:54:cc:ae:1a:77:dc:3c:19:5a:ad:4f:
13:d7:87:0e:b5:1c:ff:cc:71:c7:22:b5:b0:8d:c8:
74:71:35:da:6b:d7:87:ad:f2:29:f4:ce:26:1f:b1:
d3:41:a6:94:2c:a8:09:13:90:c0:77:16:b2:1f:91:
06:c0:67:a4:82:07:b8:47:97:ac:be:be:d3:59:e9:
07:6e:86:d2:99:18:72:31:05:27:f4:4b:79:2f:a5:
42:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5E:43:12:F1:ED:52:D8:9B:5D:16:78:44:8D:27:F9:18:13:D3:9E
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/QV5DEvHtUtibXRZ4RI0n-RgT054.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
37:24:b6:1e:6d:b7:ff:a6:ab:b3:bd:65:dc:b2:14:3e:30:ad:
fb:ce:28:ac:2f:ca:fa:5d:03:f0:05:90:dd:60:fa:10:b5:f5:
cd:ad:2c:88:eb:3a:21:53:8a:a5:76:cc:64:cb:7b:e8:35:e8:
7c:5a:44:9b:67:9d:f7:9f:92:d4:88:31:7c:ec:29:f0:e1:b5:
93:ba:55:2f:7e:42:6e:46:33:d2:68:f7:df:4b:3e:60:a5:ac:
c0:db:41:53:c6:8a:ce:57:fa:1d:00:ab:25:af:ad:fc:1c:bf:
34:bf:cb:25:93:94:1c:d6:7c:13:df:0f:c3:aa:71:c5:83:97:
23:da:52:1b:c5:79:0d:16:4d:77:62:58:55:1d:6a:5b:7f:b1:
0f:13:07:88:fd:e3:d0:e3:b1:68:4c:5d:7c:6f:65:05:05:cd:
3a:01:60:77:a8:64:f4:30:7b:5f:cd:ed:47:fa:90:50:4e:1a:
34:c2:d8:aa:52:57:54:49:ed:61:9b:91:94:c3:62:21:44:39:
7a:b0:d2:d4:78:c5:81:a8:63:6a:8f:d1:f9:19:85:f6:36:99:
d8:5b:c9:c5:71:44:11:fd:30:72:d9:00:01:c7:c7:c3:23:4e:
57:19:8f:c2:29:02:16:f7:54:60:1c:1e:7e:95:32:e1:b5:43:
60:15:87:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:25:57 2025 by rpki-client