Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/JsMNuxzU0Ltvhi2ckrz1VjYTz_I.roa
File: JsMNuxzU0Ltvhi2ckrz1VjYTz_I.roa (raw, json)
Hash identifier: 9tC9nYDr3WWIlDVGmR/bu+SI7vnnGhlWAUa7V3SLKr4=
Subject key identifier: 26:C3:0D:BB:1C:D4:D0:BB:6F:86:2D:9C:92:BC:F5:56:36:13:CF:F2
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1764
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/JsMNuxzU0Ltvhi2ckrz1VjYTz_I.roa
Signing time: Wed 12 Feb 2025 01:36:39 +0000
ROA not before: Wed 12 Feb 2025 01:36:39 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9505
IP address blocks: 220.128.48.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Aug 2025 09:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5988 (0x1764)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 12 01:36:39 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=26C30DBB1CD4D0BB6F862D9C92BCF5563613CFF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:70:6a:9b:c7:55:5d:9f:f8:47:f1:66:97:a6:
55:0b:d1:f7:ea:d2:fd:3d:00:73:6e:3a:1b:fd:20:
98:c5:10:84:8b:86:9d:14:57:89:d6:81:f3:49:da:
9a:8b:13:db:9d:1f:7f:18:76:5b:34:5f:f0:0f:76:
30:11:4f:4c:6e:dd:a4:ca:35:50:98:6f:0b:38:63:
68:7f:2d:a0:a9:98:36:8e:81:0f:b8:82:2a:21:6f:
15:14:42:68:a8:d1:d2:a6:88:69:3a:54:22:84:68:
a6:4d:1d:1b:00:e9:2c:7d:31:77:0d:3c:9e:f0:e4:
1f:eb:8c:d0:dd:87:1c:52:af:2b:d7:e3:ab:9d:b3:
35:04:38:f5:e9:c6:b4:1b:b5:b7:b2:b7:d8:5f:5a:
1c:df:93:fc:80:2c:95:63:e2:ce:40:8f:cc:53:07:
f4:93:ff:d5:79:fb:d7:79:83:f6:ec:c6:79:59:e2:
12:1b:9a:8f:b1:e9:da:f1:11:f3:bd:fb:71:b9:e8:
17:cc:5c:dd:fd:93:c6:17:49:de:56:0f:b3:59:c6:
56:51:d3:52:07:01:05:01:c1:6f:04:13:53:aa:37:
c1:bc:11:d3:4d:79:d2:9c:5f:0d:56:00:80:46:4a:
db:c6:6a:fd:42:e4:ff:d8:43:f3:a8:cc:22:61:d9:
c5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C3:0D:BB:1C:D4:D0:BB:6F:86:2D:9C:92:BC:F5:56:36:13:CF:F2
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/JsMNuxzU0Ltvhi2ckrz1VjYTz_I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.128.48.0/21
Signature Algorithm: sha256WithRSAEncryption
11:ad:99:1b:f6:a3:c2:c9:ca:66:c6:b7:72:0c:9b:80:9a:04:
93:68:b5:a6:a5:82:d6:dd:1f:d2:00:2f:36:81:e6:88:cc:03:
b2:89:4c:f1:8d:d4:59:22:89:f5:d7:a5:63:93:64:d6:24:65:
07:92:c7:a1:c4:1c:01:f8:78:83:c5:93:1f:79:29:32:fa:cb:
a3:77:04:e1:b0:17:58:9d:e1:1a:eb:bc:b2:74:4b:1f:b4:b7:
4a:7a:83:aa:3b:4b:68:0e:ba:b4:02:f4:e3:9b:7e:53:38:18:
98:ba:ed:9e:11:48:cb:50:6a:59:5b:15:ee:93:bd:fe:77:30:
12:8d:97:bc:41:b5:b5:a4:1b:db:ac:b6:a1:51:f8:0d:8d:48:
58:9b:41:0c:ee:11:7a:30:56:c1:eb:99:7f:00:9c:19:75:44:
4b:92:0c:2c:29:47:ed:f8:10:e9:5f:b7:59:5e:67:cb:e2:18:
9b:c9:99:8e:7f:16:88:e0:c2:66:e9:02:49:e9:9f:b9:9a:b1:
8b:b1:4e:71:72:0a:30:ed:0c:99:8d:61:35:e3:47:4d:09:ca:
7f:47:98:15:12:72:50:de:fb:fd:9f:fa:ae:fd:7e:86:6d:f8:
bb:64:e1:4c:96:31:b2:79:c4:43:f5:72:a1:d7:ae:59:e5:12:
c6:b4:68:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:42:17 2025 by rpki-client