Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/WUfj-ka1orfJ0hGTg2aiEx11wfQ.roa
File: WUfj-ka1orfJ0hGTg2aiEx11wfQ.roa (raw, json)
Hash identifier: oq2uqpogoeN7r86xdhavluNzrfWCILdfjOG+Pgy8CWU=
Subject key identifier: 59:47:E3:FA:46:B5:A2:B7:C9:D2:11:93:83:66:A2:13:1D:75:C1:F4
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1545
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/WUfj-ka1orfJ0hGTg2aiEx11wfQ.roa
Signing time: Tue 11 Feb 2025 23:44:29 +0000
ROA not before: Tue 11 Feb 2025 23:44:29 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17421
IP address blocks: 114.136.0.0/15 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 01:22:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5445 (0x1545)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 11 23:44:29 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5947E3FA46B5A2B7C9D211938366A2131D75C1F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b0:2b:12:af:25:05:8d:da:b4:49:59:71:6a:
8e:8d:ec:d3:c4:13:e7:64:e5:75:ba:29:c3:22:0f:
3f:40:ff:80:98:ab:ae:c5:87:5b:bc:7a:04:46:7f:
75:c4:8d:4a:5c:ee:bc:85:1e:47:d5:82:00:d7:ce:
a0:53:78:9b:ad:3b:e6:69:74:dc:28:8d:fb:6e:11:
b0:2d:05:cd:69:21:ed:79:09:d8:0b:6a:e7:ca:93:
99:cb:7d:9c:c7:b7:06:72:34:3f:20:14:30:ee:1b:
b8:02:ab:f1:b5:9c:59:c4:6e:e8:0f:b7:75:38:2c:
40:af:0d:4c:0f:67:31:33:a3:a2:dd:30:f0:9a:6f:
07:5e:e0:08:51:fc:07:53:e0:59:f1:6e:c6:b3:a7:
55:9f:69:a6:25:49:9d:41:11:f1:80:1a:1f:6f:5a:
69:49:69:b0:8f:af:35:ab:47:79:23:fc:cf:86:61:
36:58:1d:f3:f2:4c:73:4e:0b:bd:9f:1f:f8:83:8a:
04:77:95:ca:58:66:c9:ad:3b:b8:78:41:78:12:b7:
99:7f:70:9e:9a:96:df:98:a3:dd:83:1a:11:91:f7:
11:f8:b3:96:6f:5b:7b:29:ef:02:00:5a:ad:5c:1b:
39:d9:de:85:ec:23:5e:49:06:cf:62:a2:e3:12:a3:
c9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:47:E3:FA:46:B5:A2:B7:C9:D2:11:93:83:66:A2:13:1D:75:C1:F4
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/WUfj-ka1orfJ0hGTg2aiEx11wfQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.136.0.0/15
Signature Algorithm: sha256WithRSAEncryption
ae:ca:b2:80:0d:46:a4:23:1a:3b:05:7b:1e:e0:92:fb:2f:d4:
4d:78:f1:42:7f:5d:2e:23:47:47:0b:c8:99:3f:b7:8f:e1:af:
ee:dc:52:52:eb:fb:33:8f:04:4b:20:6b:e4:16:01:98:4e:df:
0d:52:6e:69:d4:17:01:e3:15:57:bf:29:8d:10:b8:75:a1:82:
bb:63:64:24:37:7f:fb:22:53:94:e5:f5:b8:40:b2:32:70:14:
7c:ea:88:f1:bd:47:98:50:82:5a:85:7d:21:a8:e5:ef:b7:ed:
74:ba:60:95:c8:c0:ef:89:f8:ac:18:a9:a7:7e:e2:f3:50:c9:
07:db:1b:0f:4a:11:a6:64:0f:9a:f5:24:e4:b3:8e:73:39:39:
09:c2:f9:32:87:a7:7d:99:87:da:ba:45:16:56:69:33:02:6c:
c7:aa:00:cc:83:ab:98:21:62:a4:14:f1:d8:9b:7c:58:52:bb:
e3:89:d1:32:30:40:cc:f9:95:a6:bb:3f:3b:4d:7d:d6:bf:7e:
d0:3a:70:dc:82:be:f1:82:5f:be:e9:97:09:2b:2b:19:a9:85:
1b:4c:b0:5e:16:e1:c5:69:d3:94:26:72:08:d0:29:5f:55:fd:
51:ab:29:90:2b:43:3a:b4:ba:02:c8:9f:02:d3:d1:05:f6:40:
57:31:d3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:56:53 2025 by rpki-client