Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/yCNTciUD7vNLmNnozDjVLmhDF9A.roa
File: yCNTciUD7vNLmNnozDjVLmhDF9A.roa (raw, json)
Hash identifier: BWT6zKyw4lJspD52Vyt/GauVw1/wy4fPU/a2pKCdx3k=
Subject key identifier: C8:23:53:72:25:03:EE:F3:4B:98:D9:E8:CC:38:D5:2E:68:43:17:D0
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1508
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/yCNTciUD7vNLmNnozDjVLmhDF9A.roa
Signing time: Tue 11 Feb 2025 23:44:15 +0000
ROA not before: Tue 11 Feb 2025 23:44:15 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 7481
IP address blocks: 210.62.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 01:22:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5384 (0x1508)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 11 23:44:15 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C82353722503EEF34B98D9E8CC38D52E684317D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b6:fc:8c:61:1d:ed:f7:e4:56:8f:ba:2e:03:
be:05:e2:8a:79:da:1f:fb:9b:a0:7f:ae:b3:83:1e:
88:b6:38:32:34:2f:cf:b6:c0:75:c7:2b:15:14:1a:
f2:7b:68:98:5b:fa:5a:d4:e8:96:e0:96:2b:9c:ad:
d6:fe:60:ba:5d:18:16:df:b1:dc:f5:92:7e:1b:ee:
43:e0:92:b7:e6:17:c6:3f:14:11:ad:01:77:0b:b1:
1b:63:b4:88:7e:df:6a:c3:2a:38:37:43:ba:1d:f2:
84:50:c7:17:69:ee:bf:2b:e7:3d:c2:fa:18:8a:b9:
4c:5a:bc:ef:48:3b:0f:e4:d3:fd:58:8a:85:7d:bb:
b8:ea:92:fc:b8:ed:b1:87:37:61:2e:56:d3:e6:38:
90:54:b8:ec:c9:b9:ae:91:80:45:ab:59:c0:54:06:
f4:8b:e7:11:46:98:f2:6c:4c:7b:3e:fe:fe:56:81:
82:63:f2:53:bc:7d:df:46:88:82:18:23:2a:be:81:
6d:fb:67:3d:6e:46:18:87:f2:14:fc:9f:48:5d:e8:
a2:da:4b:99:0a:73:f6:bb:73:52:2c:04:d2:1b:0e:
bf:fe:66:80:c3:8d:e2:e7:a4:d4:3a:4e:89:fe:1b:
a5:6a:70:a1:e8:dd:25:cd:7a:06:f8:1b:9e:85:54:
94:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:23:53:72:25:03:EE:F3:4B:98:D9:E8:CC:38:D5:2E:68:43:17:D0
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/yCNTciUD7vNLmNnozDjVLmhDF9A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.62.255.0/24
Signature Algorithm: sha256WithRSAEncryption
51:28:21:e8:f9:cf:3a:19:2e:3e:54:c6:a4:3e:6d:66:8a:31:
bb:a2:d2:a0:97:6d:02:9f:e1:c2:13:44:a2:c6:6b:78:85:7f:
e5:85:0f:7e:a5:f4:12:c7:53:31:b7:1b:e8:aa:c1:4f:1e:85:
5a:69:b8:8a:17:20:35:86:a9:5f:01:32:e3:a6:46:17:98:05:
4c:bc:fd:3b:97:6c:e2:ae:f7:f1:5f:5a:38:66:83:c5:2f:23:
26:dc:61:ce:6f:90:23:f8:ea:f4:91:05:11:dc:bc:5b:fb:25:
a7:f4:01:86:fd:39:48:68:f2:5e:2a:51:8d:a7:d6:b1:de:cb:
2f:43:e6:86:49:ba:0f:80:23:fe:53:e2:39:e6:4c:f2:b6:15:
f1:89:6d:f1:c6:91:aa:1d:02:f9:85:d8:91:50:cd:d4:bd:fc:
72:4c:ba:77:d7:3f:9a:d6:b0:31:82:7b:d6:41:7e:87:40:de:
52:06:be:ec:ab:1b:43:d4:ce:c0:aa:5f:97:65:ac:8e:b2:79:
a7:3e:f5:ed:b8:fd:7d:02:6a:38:e8:c9:f3:93:fd:1d:60:38:
03:cf:38:88:47:22:70:49:a1:db:58:fa:df:b6:fd:3c:95:b3:
1a:c7:c3:b2:2c:40:ae:d6:f3:18:86:37:d7:0f:4b:7d:bf:88:
27:60:b7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:27:45 2025 by rpki-client