Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/l2GIpjod9Pl9DBmh91QTzUF58e8.roa
File: l2GIpjod9Pl9DBmh91QTzUF58e8.roa (raw, json)
Hash identifier: At6IitWmhfoCgNasWr1IsGGZ0UolrUei/+HdGTcwIrg=
Subject key identifier: 97:61:88:A6:3A:1D:F4:F9:7D:0C:19:A1:F7:54:13:CD:41:79:F1:EF
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 178E
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/l2GIpjod9Pl9DBmh91QTzUF58e8.roa
Signing time: Wed 12 Feb 2025 01:36:49 +0000
ROA not before: Wed 12 Feb 2025 01:36:49 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 220.128.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Aug 2025 09:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6030 (0x178e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 12 01:36:49 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=976188A63A1DF4F97D0C19A1F75413CD4179F1EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:76:dc:c7:74:c0:ac:51:b6:4c:3f:04:95:fd:
01:92:e8:47:5c:bd:1b:0d:10:52:04:da:86:41:ff:
b5:14:28:11:e4:78:f0:83:36:61:1d:66:c0:99:81:
26:1c:38:e6:d4:ce:a2:e6:86:22:2f:55:bd:2c:29:
fd:ff:cb:13:fe:a9:a5:7c:bd:c5:63:6b:19:11:bb:
ee:e8:0d:ba:a2:f0:18:d1:e3:f0:c3:b8:47:56:1f:
e7:54:f6:be:ff:39:8e:18:6a:c1:c7:63:76:df:17:
35:85:64:96:c8:0d:bf:80:06:b8:32:ad:82:dc:6b:
44:f3:3c:0c:8d:c5:7d:de:fc:bd:a6:f2:88:58:cc:
0b:f1:69:a9:88:fb:3e:79:b4:7e:ad:11:65:22:d4:
2a:8d:a2:f7:a3:3d:3b:e2:e6:96:07:fe:06:a5:af:
f9:e6:90:cf:33:f1:6a:e0:67:ed:17:8c:47:47:f0:
dc:79:c8:48:88:a5:26:da:31:b1:91:59:96:b6:1d:
64:3a:63:50:f5:aa:f3:49:8b:77:5c:d8:d0:8f:d0:
7a:10:19:19:88:e1:e1:b4:6e:42:82:58:f2:f0:d1:
6a:48:79:7e:20:bd:48:de:69:9d:a3:22:42:e7:8d:
a5:c9:e2:df:ee:5b:cc:c4:38:03:9b:55:93:9e:59:
49:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:61:88:A6:3A:1D:F4:F9:7D:0C:19:A1:F7:54:13:CD:41:79:F1:EF
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/l2GIpjod9Pl9DBmh91QTzUF58e8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.128.80.0/24
Signature Algorithm: sha256WithRSAEncryption
79:2f:e2:64:49:3a:a0:2c:28:aa:ec:cd:2b:f8:a1:67:6b:ab:
20:a0:30:16:b2:37:ad:9b:02:56:34:4b:61:be:d4:43:ce:e0:
17:23:b0:f3:8c:17:79:04:34:fe:d6:62:fc:05:de:04:8f:f7:
71:f0:ce:6c:ca:76:d4:69:be:f0:d3:cb:dc:e9:b7:91:d5:fc:
1f:2c:2f:1a:76:2a:54:21:6f:9e:7c:ef:52:20:fd:e0:7e:50:
a9:a0:a6:bd:d3:7a:bb:f2:5e:39:c5:13:2a:fe:fb:f3:60:2d:
59:92:8d:d4:fd:16:58:af:91:60:57:de:7b:12:8e:48:43:a5:
32:28:43:ef:af:9b:9d:60:43:0c:78:23:e8:ab:b2:ed:3f:68:
7f:23:5b:01:72:b4:46:85:18:e1:0f:b2:cb:7a:ed:cb:08:27:
88:51:7f:6b:8d:74:08:f7:2f:19:11:bf:af:bf:a7:5a:59:3d:
6b:e1:b4:50:9d:b6:df:ee:09:08:8a:63:61:0b:2b:4b:ee:cc:
ab:e7:8b:d6:bb:24:e5:63:68:60:1f:4d:8f:07:66:39:8c:8d:
37:f4:43:0e:41:4b:33:17:0b:fb:e4:0b:b4:bc:04:2c:0e:51:
cf:40:13:97:29:c1:00:80:5c:7e:18:28:8b:18:e4:66:2f:ba:
eb:c9:55:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:45:02 2025 by rpki-client