Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/kv4b65VLZb0VLj0SnSyx21pViXE.roa
File: kv4b65VLZb0VLj0SnSyx21pViXE.roa (raw, json)
Hash identifier: 9PqZvAHV+SDzgwVU2PMPW+U2SUO5l0CZqBayRoJR7KI=
Subject key identifier: 92:FE:1B:EB:95:4B:65:BD:15:2E:3D:12:9D:2C:B1:DB:5A:55:89:71
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1536
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/kv4b65VLZb0VLj0SnSyx21pViXE.roa
Signing time: Tue 11 Feb 2025 23:44:25 +0000
ROA not before: Tue 11 Feb 2025 23:44:25 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 220.128.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 01:22:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5430 (0x1536)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 11 23:44:25 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=92FE1BEB954B65BD152E3D129D2CB1DB5A558971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:61:c6:77:68:5c:f6:11:73:7c:d4:fc:70:26:
3e:71:10:e7:42:58:46:66:66:18:ba:49:3c:a9:df:
0f:5c:04:d5:77:ee:00:c8:09:79:c7:25:2a:86:b7:
4a:50:7f:c2:a2:a3:1b:ab:19:b0:ce:4c:24:20:8a:
24:1c:80:bb:4d:72:65:13:2f:53:ba:b7:0f:eb:a7:
d6:f0:9f:e5:0f:75:92:d2:2d:c2:2b:2b:99:4a:e6:
d4:d6:90:29:05:48:ee:e0:63:a1:3f:d4:f9:67:a4:
62:e3:89:63:3b:a4:68:16:36:b9:27:da:32:91:ae:
44:c5:43:c4:f5:2e:c5:a2:ac:06:11:76:fa:68:3a:
9f:f9:81:23:be:33:b1:bb:93:11:a1:61:d7:3f:9f:
86:8e:c7:9e:6f:b9:58:e9:be:35:4b:bc:f9:f2:4b:
f5:38:30:f3:8b:cc:39:d5:ad:62:f4:9b:a6:96:bd:
dc:97:e7:3a:22:1b:b9:8c:ed:80:ec:eb:30:9d:c0:
ae:8d:59:df:4c:18:dc:6a:2a:2e:dd:14:ec:5f:de:
48:c9:dc:39:4a:a6:21:bb:44:1a:69:f2:76:3a:f9:
df:ed:d7:8a:1f:1a:5b:3f:40:3e:34:06:9a:c0:6d:
7d:2a:88:26:0e:d9:e4:c3:8c:8e:ef:c7:c4:00:15:
33:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FE:1B:EB:95:4B:65:BD:15:2E:3D:12:9D:2C:B1:DB:5A:55:89:71
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/kv4b65VLZb0VLj0SnSyx21pViXE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.128.67.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:ab:57:9d:7d:0c:c3:fc:26:08:52:8d:cb:16:78:d0:75:13:
2e:61:8a:59:f3:8d:3f:1f:4d:58:72:16:2b:d3:32:c3:48:c1:
1c:5a:b4:5b:12:34:78:0a:b9:66:c4:b2:a1:b7:3d:33:2a:c0:
a7:9e:0b:80:6a:2d:8c:72:db:4f:81:6b:9f:af:0e:ce:6a:ac:
b3:1c:6b:40:40:74:4b:df:d3:33:b1:b9:46:54:5a:1b:a0:50:
26:48:bb:d1:73:da:ee:55:9a:96:d0:d5:e4:4f:b3:e2:6c:9e:
8d:63:3b:97:4e:be:6a:f2:9d:12:8d:8f:2b:7b:5d:2e:e5:f6:
fc:57:0b:08:87:aa:03:e7:2b:40:90:54:34:55:3c:be:46:1b:
47:f2:e8:3b:32:9b:09:4d:88:8d:77:93:a9:d6:9e:5a:19:2c:
fe:ea:74:3f:a0:2c:52:fc:9c:20:a9:15:90:c7:07:fb:84:81:
c7:df:5f:61:20:3b:72:af:c0:e4:3a:92:b7:77:62:23:f2:c0:
69:8c:cb:ca:5e:78:59:32:c0:5f:70:fd:86:8b:e7:ea:08:9a:
79:13:fe:5f:c5:77:3a:57:6c:d7:e7:93:f3:b3:a0:e0:1e:e0:
b5:81:4e:f5:65:e9:c7:c9:ca:57:1a:9f:3c:50:73:2b:a0:65:
8b:c8:aa:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:31:38 2025 by rpki-client