Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/ZLha6M2UVPUONcX4BQF8hojodRY.roa
File: ZLha6M2UVPUONcX4BQF8hojodRY.roa (raw, json)
Hash identifier: SfPijyME8mZSlKnKnipNu/Pyuf3QjOqY9vBlTAJwDRI=
Subject key identifier: 64:B8:5A:E8:CD:94:54:F5:0E:35:C5:F8:05:01:7C:86:88:E8:75:16
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 154D
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ZLha6M2UVPUONcX4BQF8hojodRY.roa
Signing time: Tue 11 Feb 2025 23:44:31 +0000
ROA not before: Tue 11 Feb 2025 23:44:31 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 142005
IP address blocks: 210.61.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 01:22:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5453 (0x154d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 11 23:44:31 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=64B85AE8CD9454F50E35C5F805017C8688E87516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ea:94:54:00:43:f3:bf:e5:71:35:ff:8f:1f:
92:73:93:88:ab:fe:7c:4a:90:93:52:af:c6:13:6d:
5e:56:76:d3:19:b5:f3:6e:7d:ec:6a:2d:41:e8:c1:
56:f3:0a:86:03:ac:a7:9e:39:7e:49:96:84:ba:f1:
72:d9:d4:46:6e:d1:d8:1a:a8:0e:4d:d7:5f:44:67:
06:be:d8:b4:c0:aa:d9:3f:69:7f:d2:00:6d:f3:b0:
ed:ea:ce:9b:18:0e:e4:7c:27:20:ce:c4:b4:38:b9:
9a:8b:ca:9a:f4:f7:bb:ae:4b:7b:be:75:c3:75:d1:
61:b4:3d:65:ae:b5:b9:a0:17:bb:91:80:03:3f:9c:
79:d6:45:aa:45:1c:2f:ef:02:9b:44:42:86:4b:76:
62:93:3a:03:a4:3e:7a:05:29:06:be:b8:9a:e1:11:
e9:06:94:c8:cf:12:6a:b3:33:ce:a9:e9:44:fd:9e:
77:c3:34:57:86:a5:79:4d:22:97:f5:09:e0:7b:55:
4a:04:f3:5c:2e:09:80:06:4f:fe:9a:b6:96:a7:8e:
0b:70:a3:d5:c1:63:4b:56:6b:14:5e:d9:05:5b:71:
fe:df:46:99:b9:6f:99:59:08:13:90:b4:dc:99:36:
04:55:6e:d9:dd:35:96:23:00:b0:e1:0f:64:e1:ce:
9e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B8:5A:E8:CD:94:54:F5:0E:35:C5:F8:05:01:7C:86:88:E8:75:16
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ZLha6M2UVPUONcX4BQF8hojodRY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.61.3.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:d3:8b:6e:2b:46:38:ef:16:3f:a4:6e:42:7c:0f:a1:ae:cc:
09:a8:9d:b9:fa:2d:13:9f:0a:dc:25:e1:be:24:92:8f:47:07:
8b:7b:24:2c:c9:6f:68:26:52:24:c1:f5:3f:31:ff:28:ac:d7:
4a:96:09:b3:cb:29:33:5f:71:91:23:37:a7:4c:e2:a9:b9:ab:
60:a3:c9:d2:3e:e5:eb:a5:9d:cc:8d:62:e2:be:26:37:5a:10:
2d:94:6c:10:74:ec:27:78:65:9a:dd:67:ab:94:5e:f0:3c:c8:
d4:9d:0f:49:bd:ee:2d:93:d3:b9:f3:80:ad:48:c9:15:6d:23:
df:cb:10:8d:88:b6:7e:ed:4a:2b:46:4c:f4:02:bf:c5:52:67:
5e:c2:13:70:f6:7d:bd:a5:cb:f0:9b:7d:66:99:41:0e:ad:06:
c7:95:d6:2f:28:85:b1:5f:7e:e4:6f:b3:b8:b5:63:e5:a7:66:
9b:8c:3a:63:4b:96:51:06:a2:3f:69:60:0a:13:d6:72:c1:65:
ef:00:97:f7:02:6d:3f:aa:f7:0d:4e:16:fc:ac:b6:94:6d:c2:
3e:23:e0:b4:bb:09:4c:f0:80:f7:f0:84:c4:e8:06:e8:ab:3a:
0f:b9:de:b4:03:47:89:f2:7b:56:e5:9f:51:0e:e6:97:5a:2f:
e2:1d:ac:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 15:51:18 2025 by rpki-client