Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/A7cedtB0yzx1y_alDEiyxwB2y2Q.roa
File: A7cedtB0yzx1y_alDEiyxwB2y2Q.roa (raw, json)
Hash identifier: grR9En5+YYB0TV44pdFUBZE3do2ty7RVt+CE8nNX1Mo=
Subject key identifier: 03:B7:1E:76:D0:74:CB:3C:75:CB:F6:A5:0C:48:B2:C7:00:76:CB:64
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 17C7
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/A7cedtB0yzx1y_alDEiyxwB2y2Q.roa
Signing time: Wed 12 Feb 2025 01:37:03 +0000
ROA not before: Wed 12 Feb 2025 01:37:03 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 220.132.0.0/14 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Aug 2025 09:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6087 (0x17c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 12 01:37:03 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=03B71E76D074CB3C75CBF6A50C48B2C70076CB64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:90:54:c4:01:65:37:f6:88:c2:aa:bf:8a:ee:
c8:84:c3:34:cf:d7:bd:e5:47:0a:8d:18:f3:f6:a7:
75:d4:93:16:a5:c4:ff:b6:11:89:a6:33:d9:4c:64:
6c:9a:80:be:29:f3:d6:4b:1c:51:a7:ff:35:63:9c:
4d:56:37:54:a2:d8:a6:4a:8a:9e:68:31:66:48:bb:
11:e0:e9:c4:8d:26:03:9a:cd:7c:d4:56:9a:6a:05:
88:76:c3:b3:56:aa:2c:c9:72:25:70:40:b6:e6:f7:
73:64:8c:19:d7:e0:e5:32:02:7e:a5:25:60:5f:51:
82:8a:12:c5:ed:65:73:50:ce:d7:ca:b6:71:d5:0a:
87:4c:20:84:58:20:ed:02:b5:55:2f:75:75:1f:74:
29:ac:6a:a8:12:91:68:f4:a6:29:7d:d5:ac:ec:ad:
32:c2:00:72:54:0d:94:ff:b0:7d:ce:3a:58:28:ef:
61:f7:43:b8:af:3d:e8:05:c5:1b:52:24:8d:e4:8e:
b6:9b:9c:22:46:a6:e0:d7:08:21:3f:b5:7e:03:af:
db:33:22:c8:e8:61:49:b7:49:e3:71:26:47:51:71:
4e:a5:86:07:e9:c4:16:a4:c2:95:82:86:b5:9c:24:
ed:af:c4:32:9d:3e:23:ab:49:1b:43:41:13:cd:e5:
cb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B7:1E:76:D0:74:CB:3C:75:CB:F6:A5:0C:48:B2:C7:00:76:CB:64
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/A7cedtB0yzx1y_alDEiyxwB2y2Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.132.0.0/14
Signature Algorithm: sha256WithRSAEncryption
23:1c:51:ce:29:35:7a:3b:85:70:7d:4e:c3:65:b4:07:94:2c:
3a:ba:02:60:c9:11:f0:5b:3e:af:8a:07:60:39:84:5b:55:f7:
46:94:5f:c1:c1:53:e9:1e:65:81:9e:0a:ed:39:3f:e2:1a:9a:
8c:3d:5a:44:f1:4e:e7:1f:71:e4:9e:58:bc:99:2f:ba:8b:f6:
15:82:77:55:77:33:4a:23:87:c1:67:d5:64:78:31:bc:93:bc:
97:39:88:ff:68:a3:7c:2e:5d:0f:a3:cd:1e:8f:24:89:d0:e1:
b0:b2:8e:57:c2:6b:64:cc:ac:27:20:15:49:56:50:8d:b7:12:
67:21:23:28:22:35:25:0c:26:fb:03:5f:2a:60:b2:8b:79:68:
2f:72:a8:93:42:da:80:e7:ea:fb:d8:a0:57:09:f2:21:96:e6:
3a:05:79:b8:f1:50:98:c2:18:61:7c:84:9f:0c:d1:1d:23:f7:
f2:e6:39:ab:f0:a2:2e:4d:ea:bd:9e:1e:b9:77:2b:3f:c0:cd:
5d:3e:81:d9:3b:43:12:bc:2d:0c:50:81:e6:e8:88:24:ca:96:
0a:0d:f9:8d:30:a0:36:13:01:24:f8:22:f5:50:b2:5f:4c:5a:
8e:61:54:7b:1e:35:a5:5d:a6:01:10:b1:89:8d:ca:8f:b7:08:
6e:38:de:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:47:14 2025 by rpki-client