Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2yQXoxHNC1tEXCNN3ut0jzBhIRw.roa
File: 2yQXoxHNC1tEXCNN3ut0jzBhIRw.roa (raw, json)
Hash identifier: jrknQdcERRqUH57DLepA8z+0f4RJgtkQl3anDHzxDpY=
Subject key identifier: DB:24:17:A3:11:CD:0B:5B:44:5C:23:4D:DE:EB:74:8F:30:61:21:1C
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 226F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2yQXoxHNC1tEXCNN3ut0jzBhIRw.roa
Signing time: Mon 26 Aug 2024 05:34:00 +0000
ROA not before: Mon 26 Aug 2024 05:34:00 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 49.159.232.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:18:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8815 (0x226f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:34:00 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=DB2417A311CD0B5B445C234DDEEB748F3061211C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4d:66:bb:a2:38:3d:dd:b9:ee:61:22:a2:54:
3c:98:8b:6b:29:07:0a:2e:ba:1e:bd:a8:3d:fa:3a:
41:b2:7d:3a:f6:4d:f9:2c:5e:d1:1e:06:88:70:be:
2f:f3:ff:62:57:8a:0c:5c:62:f2:4a:55:88:f8:89:
01:2e:ac:f5:28:f6:e9:b0:4c:dd:f9:8f:11:55:5d:
45:e4:6a:03:c6:8e:93:22:9c:b6:c8:b4:33:1f:f9:
fa:9c:d3:31:82:11:d4:28:04:d9:e9:6a:fc:71:73:
98:77:d9:ba:4c:a6:86:1e:3c:3f:3f:25:a6:67:77:
de:01:e8:08:0c:0a:51:6f:bf:57:35:8f:43:68:ea:
ac:48:7d:12:da:f7:62:d1:ba:c4:65:54:7b:f6:39:
32:24:2c:c9:c6:45:c4:2f:83:e5:c7:e9:23:80:68:
68:b3:dc:f8:4d:d0:6c:79:94:59:92:be:93:ca:a9:
b9:a7:5a:ab:6a:37:bf:7d:7f:1d:e9:a8:e6:0e:45:
21:ac:cd:64:81:72:99:f8:2f:b2:27:46:a1:f9:19:
6c:b0:c2:1e:cc:bc:6f:80:42:7d:7b:f6:96:3c:d5:
ed:82:36:04:9f:71:c4:a2:b7:a9:cc:3b:c9:c9:3a:
c2:24:c2:0c:86:6e:93:b5:70:9a:70:5b:26:b8:2a:
79:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:24:17:A3:11:CD:0B:5B:44:5C:23:4D:DE:EB:74:8F:30:61:21:1C
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2yQXoxHNC1tEXCNN3ut0jzBhIRw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.232.0/21
Signature Algorithm: sha256WithRSAEncryption
74:2d:c1:37:08:c7:ad:57:17:5f:88:2c:f8:ff:f0:30:04:52:
70:f0:7f:15:21:04:7e:3f:3d:ab:a1:e6:c5:64:d8:60:cb:80:
af:8a:05:49:3a:11:f2:28:39:68:6d:ae:c6:4e:ed:98:20:88:
c8:25:df:2e:7c:d2:bc:56:ac:7f:42:46:d5:7b:2b:fe:f3:a0:
cb:73:bc:7d:bf:1d:39:c2:15:e7:fb:d7:a0:58:99:8b:32:17:
49:9b:9d:6e:d5:21:db:91:f5:0a:2c:62:ed:9f:fe:59:d6:25:
07:29:38:bb:aa:68:d2:97:5d:a3:78:e6:ed:bd:8c:b8:13:f8:
c4:9e:23:40:91:25:77:71:c5:1a:ec:8f:2b:28:73:50:96:5d:
0d:3f:c9:55:9c:a3:fc:63:c1:27:85:04:f2:db:2c:7e:ec:11:
49:ce:04:bc:4f:ea:ca:7d:fa:8b:96:7e:c5:02:dc:e9:0c:ce:
38:58:6e:f5:c0:c5:9a:d2:37:b3:23:be:d1:60:b1:d3:51:ea:
07:a4:d7:db:f3:a1:f7:7f:8c:fa:6c:52:ff:46:a3:f7:2b:ce:
f0:10:06:9c:b3:2d:95:c8:98:d1:e0:b3:83:8d:38:81:e1:50:
22:a3:1a:d4:bc:ad:1b:e0:b3:ef:85:0a:78:55:a0:c6:43:89:
6e:30:a3:0e
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIm8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw
NTM0MDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERCMjQxN0EzMTFDRDBC
NUI0NDVDMjM0RERFRUI3NDhGMzA2MTIxMUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDiTWa7ojg93bnuYSKiVDyYi2spBwouuh69qD36OkGyfTr2Tfks
XtEeBohwvi/z/2JXigxcYvJKVYj4iQEurPUo9umwTN35jxFVXUXkagPGjpMinLbI
tDMf+fqc0zGCEdQoBNnpavxxc5h32bpMpoYePD8/JaZnd94B6AgMClFvv1c1j0No
6qxIfRLa92LRusRlVHv2OTIkLMnGRcQvg+XH6SOAaGiz3PhN0Gx5lFmSvpPKqbmn
WqtqN799fx3pqOYORSGszWSBcpn4L7InRqH5GWywwh7MvG+AQn179pY81e2CNgSf
ccSit6nMO8nJOsIkwgyGbpO1cJpwWya4KnlRAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU2yQXoxHNC1tEXCNN3ut0jzBhIRwwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzJ5UVhveEhOQzF0RVhDTk4z
dXQwanpCaElSdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx
n+gwDQYJKoZIhvcNAQELBQADggEBAHQtwTcIx61XF1+ILPj/8DAEUnDwfxUhBH4/
Pauh5sVk2GDLgK+KBUk6EfIoOWhtrsZO7ZggiMgl3y580rxWrH9CRtV7K/7zoMtz
vH2/HTnCFef716BYmYsyF0mbnW7VIduR9QosYu2f/lnWJQcpOLuqaNKXXaN45u29
jLgT+MSeI0CRJXdxxRrsjysoc1CWXQ0/yVWco/xjwSeFBPLbLH7sEUnOBLxP6sp9
+ouWfsUC3OkMzjhYbvXAxZrSN7MjvtFgsdNR6gek19vzofd/jPpsUv9Go/crzvAQ
BpyzLZXImNHgs4ONOIHhUCKjGtS8rRvgs++FCnhVoMZDiW4wow4=
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:43:55 2025 by rpki-client