Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/3qOkdfXs7PW36vI4oWr63ic016A.roa
File: 3qOkdfXs7PW36vI4oWr63ic016A.roa (raw, json)
Hash identifier: C8MKph6XjwUKEYF81e9Ro3nlX/+CmLdTTbNcO/NJsRk=
Subject key identifier: DE:A3:A4:75:F5:EC:EC:F5:B7:EA:F2:38:A1:6A:FA:DE:27:34:D7:A0
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 17CA
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/3qOkdfXs7PW36vI4oWr63ic016A.roa
Signing time: Wed 12 Feb 2025 01:37:04 +0000
ROA not before: Wed 12 Feb 2025 01:37:04 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 54994
IP address blocks: 203.74.117.128/27 maxlen: 27
Validation: Failed, certificate revoked on Fri 22 Aug 2025 09:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6090 (0x17ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 12 01:37:04 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=DEA3A475F5ECECF5B7EAF238A16AFADE2734D7A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:47:a9:24:85:91:56:47:34:f0:5a:8f:ea:6d:
ac:f4:07:eb:c6:ca:7b:23:ef:74:07:73:2f:c4:97:
e9:d2:ab:73:5d:26:02:10:41:89:34:e5:90:fc:24:
74:96:6d:42:86:42:45:e3:ad:73:28:e6:93:0d:fc:
ff:74:a3:b9:60:45:2e:7d:06:10:30:b4:67:bb:6d:
8f:d6:c0:15:d6:8d:8d:46:2a:7f:e5:eb:f5:d1:9d:
6b:21:ed:3e:f3:d6:2a:bb:c7:17:e3:54:e4:87:8f:
b8:a0:53:38:fd:8c:a0:79:80:fd:d9:67:b1:4a:24:
fe:28:39:a4:02:41:62:c9:e7:9c:64:16:27:2a:e2:
9d:d5:90:b4:0f:84:21:aa:fd:a6:6f:78:f0:a6:6d:
7d:9b:ae:52:60:e9:7f:f7:5b:ce:99:3b:37:1a:c8:
a8:86:59:55:45:75:b9:c4:21:c0:8a:cb:48:80:5a:
65:fe:51:66:29:3a:d6:24:3b:42:2c:71:0e:a9:e4:
ed:88:89:fc:8c:83:4a:f2:5b:a1:68:ef:72:3e:e0:
25:0b:9a:b1:18:0c:9f:51:1f:59:da:cc:18:59:1c:
a0:54:ed:82:24:42:48:95:f4:eb:c2:b8:18:f8:eb:
7e:03:1a:ab:84:97:cc:85:f9:64:f8:10:52:5e:ea:
4a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A3:A4:75:F5:EC:EC:F5:B7:EA:F2:38:A1:6A:FA:DE:27:34:D7:A0
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/3qOkdfXs7PW36vI4oWr63ic016A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.74.117.128/27
Signature Algorithm: sha256WithRSAEncryption
1e:6c:00:04:f6:a9:36:bb:13:23:86:aa:ff:0f:cc:5e:e5:26:
1c:ea:a9:d6:52:d9:50:66:21:85:a1:73:6d:88:dc:fa:bb:04:
b1:47:41:6b:a4:82:27:e4:24:be:79:65:19:55:43:ca:6c:f3:
dd:a8:b0:9b:53:06:67:d2:64:3d:ce:95:8a:35:ad:8b:3c:53:
c5:e9:5a:c7:7c:6c:55:08:01:bf:c6:67:ae:e0:71:00:df:98:
5b:23:6d:29:fa:1a:b1:b8:a7:6f:ce:c0:e0:d4:02:af:27:7b:
0d:f1:32:e4:6b:3e:b6:74:fa:54:c4:59:b8:63:ce:58:78:45:
5c:70:11:6c:30:27:eb:b6:9f:e7:0c:07:7c:e8:70:94:6f:86:
88:f6:5b:56:2a:98:77:e9:26:e2:06:ad:28:7f:b5:5f:9a:3a:
03:6a:02:89:61:f3:4f:94:cd:97:74:1a:7f:cf:35:7a:a9:17:
0d:2c:b9:15:66:a0:82:d6:ff:23:d6:cb:43:5c:c5:db:b9:1b:
3b:e4:5d:cd:c0:85:25:47:51:f6:99:e7:d7:5a:20:0a:64:27:
d1:7f:f5:ca:d5:21:bd:86:a8:d9:2d:3a:e9:f4:68:a2:04:e6:
02:b5:41:3c:16:30:27:7c:46:f7:38:58:85:0d:68:05:f2:2c:
31:03:3e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:47:47 2025 by rpki-client