Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4hKeiLsCQ2wL8qfzVHDaBShwcys.roa
File: 4hKeiLsCQ2wL8qfzVHDaBShwcys.roa (raw, json)
Hash identifier: PK7Rl9+W2rgjE+cCrenTIiy0xctdPoIP7A6Wgh4KrlI=
Subject key identifier: E2:12:9E:88:BB:02:43:6C:0B:F2:A7:F3:54:70:DA:05:28:70:73:2B
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 2296
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4hKeiLsCQ2wL8qfzVHDaBShwcys.roa
Signing time: Mon 26 Aug 2024 05:34:09 +0000
ROA not before: Mon 26 Aug 2024 05:34:09 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 211.76.32.0/19 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:18:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8854 (0x2296)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:34:09 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E2129E88BB02436C0BF2A7F35470DA052870732B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:30:38:02:24:8a:27:30:45:18:70:21:11:53:
2a:8b:85:f7:d0:9a:a4:d1:b8:e8:58:ae:c1:4d:4e:
9e:3f:1c:6e:79:bb:07:54:40:4f:49:92:24:23:1d:
93:1b:b5:59:9d:42:7c:db:f4:42:62:34:bb:df:65:
2e:7d:87:a7:a3:b4:01:48:df:15:7f:df:3e:54:00:
05:27:7e:d6:b7:9a:72:c0:0d:d6:22:3b:46:33:7a:
7b:28:52:a5:32:ed:9e:aa:f4:ca:73:a5:7a:30:a6:
a0:13:1b:68:7e:e9:a7:15:96:f5:a8:82:fe:e5:c3:
8d:ee:6a:cb:d1:a6:ff:09:73:2a:1d:41:02:49:b3:
3a:e0:d8:76:dd:c4:70:20:1a:74:54:c2:82:b6:7a:
08:4b:ec:92:b4:51:7b:4d:d9:d0:fb:37:46:af:a7:
1e:d8:2d:f1:5d:cf:d4:2a:95:e2:58:c2:83:16:10:
d0:1c:25:bc:32:32:c0:b6:e4:f2:1c:6e:e8:5c:ef:
39:7a:bb:51:82:0d:a8:55:4d:99:d7:66:e9:0e:3f:
aa:08:40:64:60:ba:2a:a3:ac:ee:08:e7:5b:91:80:
ec:7b:19:3a:79:cd:26:73:75:b5:c9:00:2d:b3:01:
54:17:c5:5b:a1:75:52:5b:f5:6f:6c:5a:54:18:45:
6d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:12:9E:88:BB:02:43:6C:0B:F2:A7:F3:54:70:DA:05:28:70:73:2B
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4hKeiLsCQ2wL8qfzVHDaBShwcys.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.32.0/19
Signature Algorithm: sha256WithRSAEncryption
20:55:50:16:4d:3d:39:2f:86:7a:e4:00:4d:b1:b8:ab:98:c0:
3b:d9:0d:30:14:ec:83:65:02:3c:16:a0:ca:a0:0d:f9:47:56:
81:0a:cf:f4:cb:62:f8:cf:cf:ff:3f:29:55:a1:15:87:50:51:
c4:f0:e7:69:8c:be:cf:4d:c2:21:ba:19:67:c0:43:62:20:1f:
6b:22:f7:e2:09:08:d8:a3:77:84:33:6a:91:c6:9c:b5:a5:41:
9d:f1:af:dd:ff:e6:fb:e5:86:41:2c:7e:e8:f4:b6:c9:91:c9:
15:45:42:18:16:fa:65:34:aa:3b:78:d6:81:cb:39:87:f3:53:
07:27:7b:bf:55:f1:61:99:fc:aa:94:d6:6b:08:f3:61:e9:67:
68:9a:10:b8:99:3a:62:5b:ee:2c:bf:8e:57:34:2b:07:11:98:
52:af:f3:45:f6:98:56:49:0b:90:0b:bd:45:2b:74:e7:a5:04:
16:a3:80:a7:f3:45:78:45:1b:59:5c:1d:7c:3e:3f:3c:d1:3a:
fd:51:17:db:b9:81:09:c8:aa:6a:57:97:3b:57:fc:20:62:54:
fd:d7:99:cf:fb:9d:77:94:56:8f:46:fe:89:ca:03:a7:de:bb:
a7:c3:32:05:22:16:03:fe:42:e1:9f:44:19:f0:1b:b8:8f:a8:
27:57:03:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:21:36 2025 by rpki-client