Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/R0fSo1MdXvj76mWX_UjTYSQqUtY.roa
File: R0fSo1MdXvj76mWX_UjTYSQqUtY.roa (raw, json)
Hash identifier: +Pk5kQnVsca/0mArxZvGaGv160Dfb4zsk/B4HhCMPOM=
Subject key identifier: 47:47:D2:A3:53:1D:5E:F8:FB:EA:65:97:FD:48:D3:61:24:2A:52:D6
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1598
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/R0fSo1MdXvj76mWX_UjTYSQqUtY.roa
Signing time: Tue 11 Feb 2025 23:44:46 +0000
ROA not before: Tue 11 Feb 2025 23:44:46 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 198949
IP address blocks: 210.242.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 01:23:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5528 (0x1598)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 11 23:44:46 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=4747D2A3531D5EF8FBEA6597FD48D361242A52D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:45:a4:2d:8c:c8:00:f2:6f:ba:dd:b4:21:90:
87:23:c9:2c:7d:43:16:b6:87:5b:e3:12:cd:52:3f:
41:c6:6c:f5:b3:82:4d:d5:e8:c4:00:c7:8a:69:3c:
e2:8a:e8:2e:00:64:bb:03:fb:99:cb:32:6b:db:d6:
a4:9c:90:ff:27:f0:8d:08:ec:31:f2:68:1f:da:f8:
9d:b5:75:a5:bb:cb:b1:83:08:34:3b:ae:8c:dd:0b:
09:27:c2:92:fb:bc:2f:20:72:b8:7a:bf:fa:6f:ed:
d1:8b:2c:aa:7d:20:cb:c2:58:8c:e3:bf:7d:42:b1:
9f:66:7d:aa:9f:df:ca:7d:5f:7e:e3:04:4a:7c:61:
1f:23:73:96:02:c8:e4:1e:1b:0b:d0:fa:6c:11:66:
05:9b:4b:d3:2f:3c:60:ce:d5:cc:9e:f4:56:fc:fd:
fd:50:8c:0e:4e:8e:9c:b4:67:2b:a0:a5:a7:69:cc:
74:9b:12:60:c4:67:fa:e0:b4:9e:9a:16:e2:40:45:
2b:96:b5:4f:c7:b6:45:76:95:82:8e:78:d8:52:6a:
b7:93:a2:e9:9f:5b:07:14:67:2d:f4:a5:8d:b6:48:
ae:a7:a7:98:5b:74:54:25:52:bb:16:05:81:ed:94:
61:ef:0d:a1:88:e5:3d:0c:ca:83:71:9d:d1:cb:11:
3c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:47:D2:A3:53:1D:5E:F8:FB:EA:65:97:FD:48:D3:61:24:2A:52:D6
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/R0fSo1MdXvj76mWX_UjTYSQqUtY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.242.123.0/24
Signature Algorithm: sha256WithRSAEncryption
09:10:0f:f5:67:bc:11:d9:5a:b6:58:e9:62:44:6c:58:72:41:
d5:26:c7:87:ad:d8:18:76:1d:db:af:3d:ee:da:56:64:92:3a:
45:bb:a4:92:45:d3:00:1b:23:a1:65:fc:ed:d3:bb:f1:ef:ca:
d2:c9:a9:d6:2b:da:9d:fe:15:61:f8:78:fb:d0:74:34:c3:b6:
b5:e1:d0:ef:7f:c5:dd:91:91:66:6d:ca:34:41:e5:3a:95:c5:
89:1a:ef:95:ff:08:aa:06:17:bd:30:83:2f:32:74:36:fe:d6:
57:df:dc:c4:8a:fe:45:ec:bc:ab:96:04:46:6c:dc:1b:a2:3c:
39:78:5b:ad:5d:60:0f:cc:6c:8d:34:7e:1f:ee:64:04:1d:2d:
b3:dc:1e:26:32:a5:52:b6:77:f3:e0:08:d3:70:c5:e3:36:de:
9d:1b:f3:36:da:a6:9b:8d:8a:5a:8e:43:3c:5f:c7:51:01:12:
c1:32:95:85:70:ee:26:7e:9a:09:65:dd:a3:d4:d1:31:c2:f1:
49:c3:4c:eb:7d:92:80:a8:f0:da:23:a8:e5:e6:17:29:28:9f:
79:4d:8c:68:94:9d:d8:2a:10:8f:eb:de:b9:b5:93:75:07:a7:
9d:d5:c2:8a:fa:1b:91:96:5b:35:b1:6a:48:7f:70:39:0a:c8:
2b:aa:84:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:55:17 2025 by rpki-client