Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/SIMvyMx9jjKB9S19uEvyhxW5Xck.roa
File: SIMvyMx9jjKB9S19uEvyhxW5Xck.roa (raw, json)
Hash identifier: 8zTErykeeQI3U6PRuUEVJyhDDVGJ8B+bSBGPCryIk2M=
Subject key identifier: 48:83:2F:C8:CC:7D:8E:32:81:F5:2D:7D:B8:4B:F2:87:15:B9:5D:C9
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 154A
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/SIMvyMx9jjKB9S19uEvyhxW5Xck.roa
Signing time: Tue 11 Feb 2025 23:44:30 +0000
ROA not before: Tue 11 Feb 2025 23:44:30 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 122.116.0.0/15 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 01:22:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5450 (0x154a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 11 23:44:30 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=48832FC8CC7D8E3281F52D7DB84BF28715B95DC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:04:b9:c5:1d:60:3b:d6:1c:1c:19:a7:b3:24:
f7:ac:60:59:f5:fb:16:1f:1c:f0:5f:fb:6a:0c:0b:
64:b5:8e:b0:05:10:db:76:d5:bc:b8:1b:bc:c0:4e:
f0:77:76:ed:24:00:f1:97:9d:62:2f:4d:cb:d9:11:
d2:9d:63:d5:c3:a0:3d:16:52:a1:03:30:d9:ac:a6:
59:87:3f:02:ca:b8:f2:06:f0:64:11:28:83:89:49:
fe:08:3d:7f:d2:61:5c:c9:bb:92:7c:49:02:9d:9e:
e5:78:1e:26:25:fe:8c:a5:22:d1:df:1b:97:4c:2c:
73:e0:e9:15:0d:6a:cb:c9:84:7e:e8:8a:90:1f:90:
be:8b:ce:46:05:5a:56:6a:82:23:a2:b7:14:84:d9:
5d:af:b6:fa:84:d9:fe:4b:31:a4:fc:6b:30:97:1c:
0c:9e:ab:fe:ee:41:84:d4:31:81:5a:40:71:95:d7:
47:9d:a9:53:e6:20:73:ee:18:24:db:38:b6:db:36:
7e:72:8c:ee:13:18:f6:e7:a0:09:d5:b0:52:c2:b4:
60:49:22:91:5e:1e:f1:86:d7:40:93:44:dd:f1:d2:
bb:77:4a:c3:52:dd:c5:69:af:2c:11:58:87:02:78:
c3:c9:43:56:36:eb:b3:de:6f:96:c2:fa:e4:9a:ba:
7d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:83:2F:C8:CC:7D:8E:32:81:F5:2D:7D:B8:4B:F2:87:15:B9:5D:C9
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/SIMvyMx9jjKB9S19uEvyhxW5Xck.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.116.0.0/15
Signature Algorithm: sha256WithRSAEncryption
90:23:0c:c0:13:75:55:3d:ca:0d:06:47:4f:28:c1:f0:2d:8e:
74:cf:e3:d8:4e:d8:37:8c:d1:ec:18:25:fd:5b:12:f6:8b:24:
2c:13:53:aa:9b:46:83:1b:14:69:1c:43:c7:31:19:e1:a2:c0:
7e:6b:c4:9d:7a:2e:8c:a8:4a:47:81:2b:f7:c3:e3:4f:3f:ef:
d8:a4:e9:1c:7b:5d:83:05:39:00:ee:e7:ae:cc:68:5e:74:49:
f2:6c:86:54:2c:c9:03:c4:db:88:e5:33:b1:05:61:a7:40:07:
f1:ca:af:17:ea:ca:f1:df:4a:60:cf:03:d9:4a:93:e5:50:71:
13:e4:e1:97:0a:1a:16:53:bb:36:eb:40:b7:19:09:23:10:4d:
e8:f0:6f:6c:88:10:74:59:52:22:16:76:54:cc:2d:fe:bf:47:
a0:0d:b6:95:00:75:29:2e:7e:1b:45:9f:da:52:6a:a2:49:09:
e4:b5:bd:1b:31:16:eb:18:9e:83:ba:33:4b:8d:f1:5f:e2:e9:
13:96:f1:95:a8:03:8b:56:a6:ad:37:a7:ab:80:09:60:c6:47:
8e:d9:bf:45:9b:fd:be:78:bc:61:e3:c2:cf:a5:1a:24:cb:34:
d8:66:76:c4:e6:85:a4:43:47:e3:bf:b9:c1:10:0e:95:dc:56:
b8:52:08:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:45:04 2025 by rpki-client