Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/qK-nBAIckAQZ4ymtEVNVyLkcmOc.roa
File: qK-nBAIckAQZ4ymtEVNVyLkcmOc.roa (raw, json)
Hash identifier: F/F+LQdiW1fSdGG7RnpN8XbOd/CBVAUI1+c6b8wkeHQ=
Subject key identifier: A8:AF:A7:04:02:1C:90:04:19:E3:29:AD:11:53:55:C8:B9:1C:98:E7
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1582
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/qK-nBAIckAQZ4ymtEVNVyLkcmOc.roa
Signing time: Tue 11 Feb 2025 23:44:43 +0000
ROA not before: Tue 11 Feb 2025 23:44:43 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17714
IP address blocks: 114.30.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 01:23:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5506 (0x1582)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 11 23:44:43 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A8AFA704021C900419E329AD115355C8B91C98E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6d:4b:45:7f:39:88:54:ae:a0:74:db:f3:a9:
ba:ff:c2:0d:3c:7c:b1:91:a7:a6:89:20:8c:0c:55:
bb:ea:4b:d6:fe:66:52:4a:fb:93:de:c7:bd:bd:2c:
de:ed:05:02:e0:dc:05:54:c9:98:64:4c:05:7a:01:
4c:8e:98:7c:61:e2:a1:01:2f:b1:4d:60:a1:a9:aa:
c0:b0:88:44:db:d6:9a:5f:4a:53:9c:2d:f4:eb:53:
1e:1d:38:e1:14:95:0e:ef:22:00:18:b1:4c:e9:8e:
46:6f:03:e3:73:4d:32:33:47:30:f1:0e:7e:a6:7d:
37:28:6d:6d:e9:9c:8e:c8:dc:ae:b4:0b:85:e7:90:
70:74:19:11:46:3b:02:7e:f9:0b:7e:75:e2:76:f5:
b5:b3:2b:43:f2:fe:59:a6:8c:f4:18:80:e8:94:25:
e0:37:09:d5:63:73:5d:0f:22:45:1c:e2:3e:12:64:
7c:9c:5e:da:cb:07:ba:d0:ad:41:14:58:70:96:2a:
74:76:0a:26:3a:98:36:af:55:6b:a5:8d:ed:ce:70:
0e:6b:98:14:fb:5a:ba:ef:3b:0d:13:eb:07:b7:e1:
b6:49:b6:ce:56:35:81:f0:28:6c:c6:b5:0d:d1:0a:
94:15:bf:37:b9:b1:05:67:bc:19:1f:85:8b:77:b0:
36:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AF:A7:04:02:1C:90:04:19:E3:29:AD:11:53:55:C8:B9:1C:98:E7
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/qK-nBAIckAQZ4ymtEVNVyLkcmOc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.30.35.0/24
Signature Algorithm: sha256WithRSAEncryption
83:2d:2a:3f:ff:45:6f:fa:a2:0f:5a:59:59:dd:a9:2e:3c:d7:
6e:5c:29:05:4d:a0:95:73:a7:f1:32:fc:24:a9:0d:07:a9:e1:
6e:4c:15:5b:11:b8:dc:ae:3f:54:27:ea:53:a6:03:93:f6:fa:
31:01:b8:8a:30:d8:27:43:87:25:86:68:35:98:ac:b5:fe:b5:
7d:0a:b7:5c:cc:8a:2b:35:2f:39:1c:a7:64:ae:8f:de:d7:4c:
4b:2d:4f:1a:4e:5c:bc:ad:ef:a7:1b:82:91:8f:e4:e5:8c:41:
90:82:59:b3:0c:ac:70:82:b5:68:46:7f:86:ce:a2:3c:ce:63:
05:5b:01:93:81:66:97:6f:82:b5:dd:42:08:eb:05:a8:4e:a4:
29:b3:97:ac:a5:89:53:ec:9b:dd:57:75:25:fb:f7:5f:4b:27:
47:eb:64:a3:91:2c:2d:42:58:11:fd:c8:18:72:26:1e:ba:e7:
52:9f:4a:49:49:5e:89:7a:54:25:55:e8:d1:f8:75:45:0a:dd:
97:fa:93:cf:5d:08:89:58:ef:25:17:eb:c1:4d:4a:a2:0f:68:
56:bb:6a:21:18:95:cf:42:17:68:42:28:8b:65:0c:e7:3a:3d:
f2:0f:09:a2:49:9b:d2:bd:70:f5:a4:18:4c:0a:d4:b7:ba:ea:
72:4a:60:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:15:33 2025 by rpki-client