Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/v7Ed7dK2MFrinuf6fqaFf91-YpU.roa
File: v7Ed7dK2MFrinuf6fqaFf91-YpU.roa (raw, json)
Hash identifier: nvPfzaMx11onYN2N7sve/C0veOIbIFvkLumlh36zsaY=
Subject key identifier: BF:B1:1D:ED:D2:B6:30:5A:E2:9E:E7:FA:7E:A6:85:7F:DD:7E:62:95
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 152F
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/v7Ed7dK2MFrinuf6fqaFf91-YpU.roa
Signing time: Tue 11 Feb 2025 23:44:24 +0000
ROA not before: Tue 11 Feb 2025 23:44:24 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 2001:b000::/23 maxlen: 64
Validation: Failed, certificate revoked on Wed 12 Feb 2025 01:22:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5423 (0x152f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 11 23:44:24 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=BFB11DEDD2B6305AE29EE7FA7EA6857FDD7E6295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f1:7c:73:79:d2:35:b2:09:28:65:df:45:78:
75:a5:8d:97:dd:d5:6f:ed:04:4d:0d:b8:d0:e5:9f:
37:4b:38:80:52:ce:8e:80:ea:90:1f:59:b0:ea:17:
54:60:05:b9:c5:80:ed:8c:18:05:be:f7:6c:b2:c3:
36:92:5a:4a:15:e6:97:a8:a0:68:ca:70:e8:28:10:
7a:2e:81:82:01:58:0c:3c:75:99:33:39:88:a7:ee:
7f:3e:0d:8f:ac:d5:f6:73:37:f5:fd:9b:bd:83:4a:
7c:07:4e:e2:3a:26:18:c4:9c:88:93:7a:0e:04:18:
04:15:6e:0c:22:e7:c5:5d:28:b9:09:61:c5:da:96:
12:6d:e3:21:00:6b:fe:69:c1:ab:2a:ee:63:9b:3e:
14:89:a1:60:98:69:f1:e3:b8:2e:6e:67:80:47:e1:
fe:37:c1:43:97:31:f2:60:1a:9b:fd:94:de:46:93:
93:7c:1d:c6:98:0b:7b:10:f1:67:f2:e6:0e:e0:c7:
45:56:76:3c:33:d8:6e:09:a0:f9:1b:f8:f9:86:d0:
36:61:40:45:31:e2:26:6d:65:8e:35:8e:6f:36:ea:
e4:22:6c:4b:69:40:58:09:74:ce:30:4f:20:49:9f:
77:9d:01:d3:02:8c:c7:96:a2:59:29:64:05:c6:9d:
f6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B1:1D:ED:D2:B6:30:5A:E2:9E:E7:FA:7E:A6:85:7F:DD:7E:62:95
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/v7Ed7dK2MFrinuf6fqaFf91-YpU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:b000::/23
Signature Algorithm: sha256WithRSAEncryption
5f:10:7c:93:8a:11:60:7b:6a:8f:04:98:ef:43:30:37:34:3a:
c6:79:8e:c8:c4:f6:aa:85:03:c0:a7:92:d9:5b:52:03:6d:b8:
55:6c:1a:fd:91:61:9e:a9:1d:f0:85:6d:fd:72:cc:18:56:f7:
b1:26:29:10:2a:b8:3d:0a:25:1d:de:11:1f:70:83:bf:4e:95:
3e:9d:ff:b9:49:9d:bb:b2:52:6f:c0:6c:b1:a8:86:f9:d5:3d:
18:17:77:f3:c7:e1:9a:f5:6e:17:1b:22:60:f1:43:bf:b1:7d:
c9:2f:66:b3:3a:6b:3b:9b:e5:4b:48:86:f1:b7:4f:99:40:52:
8a:2c:1c:88:2c:29:ff:74:88:87:f0:4c:3f:5f:8d:76:1d:2f:
79:42:51:7a:87:34:16:4c:0c:42:69:0f:8c:8e:f3:0b:80:f5:
94:b9:75:a0:cb:31:13:7f:23:29:66:79:46:8e:b6:8e:3f:ed:
20:60:2e:02:75:33:04:f7:c7:27:50:93:ba:2e:7e:f5:a9:47:
eb:4e:ac:db:65:f0:35:bb:05:61:ad:f8:b5:0f:5b:98:58:d0:
22:9d:b3:64:d2:6c:a1:e1:37:64:47:73:db:8b:3d:3b:b9:dd:
34:e7:e3:8e:4b:1e:17:1a:34:09:a7:d4:8e:0f:cb:bc:b3:98:
91:ab:6c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:26:34 2025 by rpki-client