Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/qoHDdNettTyUR9Flosg5tXh8ybw.roa
File: qoHDdNettTyUR9Flosg5tXh8ybw.roa (raw, json)
Hash identifier: q9niUnClgEdqbv+dwUZI10yyXWyKxUOG/0NqippUU/Y=
Subject key identifier: AA:81:C3:74:D7:AD:B5:3C:94:47:D1:65:A2:C8:39:B5:78:7C:C9:BC
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 158C
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/qoHDdNettTyUR9Flosg5tXh8ybw.roa
Signing time: Tue 11 Feb 2025 23:44:44 +0000
ROA not before: Tue 11 Feb 2025 23:44:44 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 43.255.92.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 01:23:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5516 (0x158c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 11 23:44:44 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=AA81C374D7ADB53C9447D165A2C839B5787CC9BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:35:18:b3:ae:cc:42:7b:8b:39:27:64:02:53:
c2:1e:ea:dd:98:6c:4c:bd:b8:04:74:b0:50:81:43:
e8:f2:27:9a:9a:30:30:cf:22:b5:18:47:3e:10:2a:
76:f5:7e:ea:6d:79:76:43:0f:22:f0:6f:22:11:63:
31:d5:a3:80:85:02:5a:3a:9a:c4:3f:59:26:84:ff:
f3:15:24:10:ac:83:5e:59:14:92:65:16:58:b9:ea:
e5:d5:dc:bc:11:a9:0e:6b:a0:a7:97:ee:59:dd:78:
a3:82:3e:77:21:94:a6:f4:1c:24:0f:33:f6:6f:c8:
1e:24:78:d9:4b:c2:9d:af:b6:d8:9c:0c:43:5f:99:
77:f6:69:16:75:f5:7e:79:65:96:c0:a1:98:c5:2b:
b5:51:51:d7:06:e0:23:f0:35:f4:d0:c5:41:47:5c:
af:38:82:93:74:30:7b:b8:02:04:9d:c0:e2:6f:60:
a3:25:e7:b6:82:0c:d1:d5:d7:0d:1b:97:32:9c:5d:
50:e7:1c:52:27:58:e1:7f:a4:84:1c:15:73:a3:c2:
1d:48:bf:f6:3b:23:16:46:40:32:98:46:c5:8f:73:
29:d4:ae:94:a5:d9:7a:95:c6:ca:ab:31:5b:30:9d:
f5:46:79:42:82:bc:ea:de:e4:71:0f:0d:96:f6:46:
30:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:81:C3:74:D7:AD:B5:3C:94:47:D1:65:A2:C8:39:B5:78:7C:C9:BC
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/qoHDdNettTyUR9Flosg5tXh8ybw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.255.92.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:94:3a:0d:a5:98:fb:58:1d:8c:85:35:ab:a0:2a:9d:53:e9:
29:20:84:da:59:a4:b7:99:52:af:61:0d:6b:51:db:b3:ca:de:
8b:fa:e8:d3:4d:e5:7f:4a:21:bc:4c:6a:3b:3c:dd:74:3f:7d:
b2:fc:5c:32:57:8d:b9:77:c0:6c:94:bf:66:1d:dd:15:3c:5f:
19:c3:94:4c:90:6a:90:ac:8e:19:06:28:65:19:ac:2c:3b:e5:
94:bf:65:0d:1c:d6:63:5a:b1:cd:43:0a:67:18:1e:eb:55:9c:
8e:59:11:f9:5b:e4:9e:40:10:3b:81:29:b2:04:81:eb:db:b0:
8a:84:d7:b1:79:2d:d2:b5:d7:b4:6c:a0:3b:1b:09:18:0d:bf:
9a:62:76:76:8b:4a:a0:b8:83:28:30:86:7f:d7:14:b9:e0:0a:
ad:10:16:7e:f3:a0:2b:4e:bc:6a:57:0d:01:ce:df:db:87:df:
ea:70:f3:d5:ce:8a:b9:58:32:4b:53:44:73:d5:9c:ba:d2:24:
8c:e2:9a:0c:a3:94:be:90:f0:79:59:4c:ca:ca:ed:ba:24:ae:
9c:7d:f2:ef:22:07:68:86:93:bd:bc:a8:f5:4c:64:cf:69:81:
f5:99:8d:12:27:49:1a:f2:ce:40:2b:8b:eb:c5:d0:ba:46:77:
f5:08:c8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:51:13 2025 by rpki-client