Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/lWIRY_DpUBVNG3Ags1-nnkCP38M.roa
File: lWIRY_DpUBVNG3Ags1-nnkCP38M.roa (raw, json)
Hash identifier: 96UIj117ZAzX2OSQBBsDYZVTX5VN8dDZkhGeToho8nM=
Subject key identifier: 95:62:11:63:F0:E9:50:15:4D:1B:70:20:B3:5F:A7:9E:40:8F:DF:C3
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 14F0
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/lWIRY_DpUBVNG3Ags1-nnkCP38M.roa
Signing time: Tue 11 Feb 2025 23:44:11 +0000
ROA not before: Tue 11 Feb 2025 23:44:11 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17421
IP address blocks: 211.79.32.0/20 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 01:22:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5360 (0x14f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 11 23:44:11 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=95621163F0E950154D1B7020B35FA79E408FDFC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:39:9f:5d:f8:09:93:1f:27:12:97:47:07:92:
6b:f0:cc:bb:5f:1e:0d:b8:7a:bb:be:97:6c:8e:40:
8c:fc:b3:eb:89:41:3a:17:6e:0f:83:80:0a:dd:31:
5f:ce:f5:f5:9a:f3:f7:a6:88:17:4c:ed:e1:8b:a5:
b6:e3:d1:9c:6e:b2:55:13:1f:5c:24:e5:14:43:61:
01:81:3a:24:40:76:36:e4:5e:42:75:4d:b8:c7:5b:
5d:8f:30:cf:df:68:36:4a:71:95:f8:91:84:88:b8:
4d:90:d1:ba:81:9a:bc:ad:b8:46:f1:a4:7b:08:70:
e2:7a:1d:3c:a8:18:44:ec:2b:88:22:9b:2b:c1:63:
62:39:21:ea:5b:d3:c7:cb:8b:0b:fc:92:4e:69:ee:
01:42:a0:16:cf:7c:86:10:43:bb:f9:91:ea:60:a2:
cd:d4:36:a3:c4:f6:7b:42:c8:17:d6:f2:da:56:62:
ae:0b:8e:ff:96:ee:ae:79:8a:09:cd:4b:7f:e8:fc:
8d:3c:19:81:c6:68:23:4a:87:a6:46:fa:b1:95:1a:
5e:e3:b7:30:eb:4f:df:1f:05:60:f1:bf:55:52:d1:
c8:27:6e:5f:e0:6f:05:82:9f:56:c6:bd:88:03:2b:
6e:40:4a:69:94:1b:ce:9c:79:15:91:ae:72:01:0f:
fd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:62:11:63:F0:E9:50:15:4D:1B:70:20:B3:5F:A7:9E:40:8F:DF:C3
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/lWIRY_DpUBVNG3Ags1-nnkCP38M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.79.32.0/20
Signature Algorithm: sha256WithRSAEncryption
4e:04:24:94:b7:54:51:4c:43:16:e0:57:96:86:e6:a1:96:c4:
ac:62:cf:2d:31:a4:b3:88:34:c8:67:7c:40:b9:db:36:c4:7a:
a6:42:89:7c:5f:01:9c:bd:76:fc:95:9a:6c:21:6b:b6:94:10:
78:14:88:f1:5c:de:32:28:f4:5f:04:6e:49:68:81:09:c5:00:
3c:b5:74:59:ab:69:27:3f:27:f5:54:4a:ba:70:68:d5:db:f9:
69:dc:01:b7:41:98:b2:d6:75:da:3b:08:d8:6f:52:31:e4:83:
46:e5:4c:e9:4a:34:3f:3b:4d:2b:f5:21:10:c0:60:8a:ea:46:
43:e9:0c:38:d8:94:f3:59:8b:b2:42:ab:80:7f:d4:c8:ab:ea:
bf:7b:c8:f4:5a:8d:d8:97:41:d2:b0:60:82:85:92:92:e1:9a:
a8:e4:1a:92:53:11:15:a2:26:67:ee:c0:ef:f6:b3:d4:90:54:
f7:38:2e:4c:0b:30:31:44:f5:c6:67:76:38:ef:d0:97:07:9a:
0b:b3:c9:13:b4:ab:74:19:1a:92:44:bf:b9:76:45:0f:04:b8:
66:16:b4:13:5c:ef:04:60:39:be:93:3b:54:51:7b:ee:40:80:
a4:8c:65:b4:3c:5e:8c:65:67:a3:72:1d:7a:65:ca:9f:1c:a0:
a0:e4:35:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:28:27 2025 by rpki-client