Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1603PpU_tS0vQsKJQHyhFihRCbI.roa
File: 1603PpU_tS0vQsKJQHyhFihRCbI.roa (raw, json)
Hash identifier: xVcMTOjdiuRYCJl+K7Bm5aO/CtBJdWLLVbWtJAt1Rp4=
Subject key identifier: D7:AD:37:3E:95:3F:B5:2D:2F:42:C2:89:40:7C:A1:16:28:51:09:B2
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 22B6
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1603PpU_tS0vQsKJQHyhFihRCbI.roa
Signing time: Mon 26 Aug 2024 05:34:17 +0000
ROA not before: Mon 26 Aug 2024 05:34:17 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24165
IP address blocks: 122.100.64.0/18 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:18:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8886 (0x22b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:34:17 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D7AD373E953FB52D2F42C289407CA116285109B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:56:4e:3e:04:b2:0f:63:6f:31:c2:9c:f1:6a:
2b:91:81:28:8e:f9:a1:a1:69:ce:a8:ed:21:26:fb:
c5:79:00:30:1b:a7:1e:ac:44:7f:89:0a:b4:f2:6e:
19:1c:80:de:61:c9:d0:65:c8:03:12:3c:f6:f0:24:
14:14:d9:ae:34:bd:94:b3:8a:2d:14:4f:6c:52:e9:
58:ff:e5:22:4c:c2:ac:10:a9:d4:bf:b1:a5:12:c5:
3f:69:84:bf:31:38:15:4e:2b:bf:02:06:94:43:0d:
c4:42:16:d6:01:f0:10:9c:f7:3a:71:3d:2b:13:8c:
57:c6:9d:f8:26:08:2b:ab:2a:c9:a6:02:51:fb:ea:
41:95:79:eb:2a:af:3c:68:f2:9e:b4:00:4c:b7:d8:
a1:be:ca:5b:a6:c3:bb:b8:e7:ad:be:8d:e4:d4:ba:
1c:f7:6f:69:37:db:13:ed:a1:fe:fe:3a:65:f7:bc:
89:3c:ac:ee:38:20:10:06:ce:45:f1:d6:cd:42:1e:
9a:5a:1a:1d:a3:b7:65:96:10:c3:59:98:eb:ad:9a:
07:5f:3c:19:52:d0:09:9c:12:be:ed:7a:9f:b8:3e:
8e:ac:45:1a:3c:63:7f:b8:04:cc:40:01:b3:20:fc:
85:9c:a6:ef:9c:a5:09:6d:32:74:07:0a:2d:50:4d:
08:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AD:37:3E:95:3F:B5:2D:2F:42:C2:89:40:7C:A1:16:28:51:09:B2
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1603PpU_tS0vQsKJQHyhFihRCbI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.64.0/18
Signature Algorithm: sha256WithRSAEncryption
3f:d2:5f:0e:1e:59:72:f4:f3:82:5c:c8:2e:37:5c:6e:53:d5:
cd:05:36:e3:7d:bf:27:da:52:e6:59:fa:ef:19:c8:ea:4b:75:
ff:25:35:d0:52:48:a2:bf:9c:75:93:09:01:53:33:dd:d5:a0:
9a:4f:e8:4a:f1:45:b4:15:b7:a0:0a:a6:f3:47:cc:72:94:5f:
f2:7a:5d:d1:d3:59:a6:a0:77:10:7a:a1:1f:96:17:1c:36:87:
50:79:cc:08:00:b1:55:5d:cf:02:45:79:c7:b9:0f:69:70:b8:
64:83:96:13:91:4a:9a:14:a6:25:33:c2:2a:cf:81:fc:f7:a9:
46:0f:82:65:f9:cd:10:53:d1:88:06:f3:5d:3c:cf:0f:d5:6f:
44:3b:9c:9a:85:91:49:12:c9:b7:6b:4d:6e:10:88:87:1b:f3:
d1:df:24:f2:2c:1b:a5:1f:39:82:a2:0c:b2:f7:3b:7d:ed:21:
82:1c:a4:da:3b:11:bb:39:51:05:06:f8:d4:59:dd:3d:63:e9:
60:52:e3:3e:35:5e:8f:c4:58:0c:2b:00:30:4f:0b:fe:fa:7f:
98:b5:f6:6a:cc:1d:11:b9:4e:04:c1:5e:75:87:0d:0d:36:ea:
e5:e0:3f:ac:70:f9:f0:3e:17:5b:be:9b:17:8a:ea:ab:00:00:
dd:56:8f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:28:40 2025 by rpki-client