Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0gkFGYzD0SLw4EfsrolHZtmNt5Y.roa
File: 0gkFGYzD0SLw4EfsrolHZtmNt5Y.roa (raw, json)
Hash identifier: DAncr7SNXZk73gSbQUUFxO8gpFI8JXE0EIk34V84QSc=
Subject key identifier: D2:09:05:19:8C:C3:D1:22:F0:E0:47:EC:AE:89:47:66:D9:8D:B7:96
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 22BC
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0gkFGYzD0SLw4EfsrolHZtmNt5Y.roa
Signing time: Mon 26 Aug 2024 05:34:19 +0000
ROA not before: Mon 26 Aug 2024 05:34:19 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24163
IP address blocks: 180.218.224.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:18:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8892 (0x22bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:34:19 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D20905198CC3D122F0E047ECAE894766D98DB796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3a:26:d6:21:9e:55:18:31:c4:1a:cb:1a:d2:
d9:d3:a9:41:5c:4a:9c:33:df:0b:40:ea:5e:66:07:
c7:1a:84:96:18:aa:42:03:3a:fd:c6:d5:23:ad:4e:
29:ab:96:2c:d3:28:a4:b2:c5:1b:5e:1f:7b:55:a7:
de:e3:0b:64:cb:d9:a9:3f:c0:7b:9c:fd:00:3e:0e:
1f:17:29:ef:17:19:37:55:8d:4f:f7:9b:41:66:7a:
b4:45:68:e0:40:75:03:b7:81:97:50:c6:d5:c8:fc:
17:31:05:80:33:0e:14:ee:96:f9:a1:9f:66:22:55:
f4:9b:c5:bb:8a:e3:e2:42:e8:4d:bf:42:3b:db:64:
b6:77:a6:25:28:b4:38:ad:10:38:5a:aa:32:3f:fa:
e3:0b:5d:6e:57:6a:7d:9a:30:bd:f3:92:de:8a:17:
e1:0a:45:47:cd:7b:d5:0f:99:80:40:e3:68:cc:27:
ca:86:43:78:b9:1d:d6:05:77:a9:f0:19:07:b6:19:
54:17:49:fc:ee:01:7d:95:32:dd:88:71:d9:46:44:
36:f2:79:12:0a:fa:7c:9f:81:2a:49:e4:d7:82:48:
f8:39:8d:36:75:5b:90:07:f9:22:af:a5:32:d1:6f:
31:72:28:6d:8b:64:c8:a2:8c:59:f3:07:a2:2e:e6:
87:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:09:05:19:8C:C3:D1:22:F0:E0:47:EC:AE:89:47:66:D9:8D:B7:96
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0gkFGYzD0SLw4EfsrolHZtmNt5Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.224.0/21
Signature Algorithm: sha256WithRSAEncryption
40:a9:2e:69:45:f6:0e:ae:cc:c9:97:13:3e:ba:5d:c9:e3:4e:
e1:a5:5f:7d:3b:48:e4:42:10:42:d9:52:af:67:fc:c6:2d:5e:
3f:fb:9f:51:5d:3d:7b:95:f8:ac:56:99:c5:1d:50:c9:fb:6a:
a8:df:19:1b:d6:ce:ee:c7:17:77:f4:a0:03:b1:f6:15:d0:01:
40:b7:c8:88:cb:5d:48:b9:83:f4:ee:3d:7d:be:0b:16:b4:6c:
88:e6:59:ce:29:bf:ef:67:c2:0c:16:ed:2c:fe:61:b3:72:e4:
be:34:27:a4:c9:a1:12:ec:9c:47:af:79:8b:7d:1b:78:18:75:
eb:18:83:b4:3d:d1:27:69:ff:e8:e4:c4:04:6f:f6:39:95:aa:
9a:23:c8:1f:1c:ee:63:2a:6e:96:5c:5d:64:3d:19:04:8b:2d:
d6:14:2a:58:c7:fc:8b:f1:d6:cd:3e:ac:5e:2f:3e:ad:15:f3:
68:17:f3:69:d7:26:73:a7:20:d1:d8:c1:f7:5c:2b:a0:f7:d1:
78:17:77:84:0b:d6:0b:f6:67:68:53:44:61:0e:dc:c5:b9:5a:
c7:ee:30:b7:93:70:03:c3:42:a7:3c:b3:7a:1c:d2:2f:c7:6a:
98:5d:ba:22:6c:a7:be:3e:b4:11:6a:18:d0:20:59:e2:4f:e4:
71:e9:27:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:33:39 2025 by rpki-client