Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6OGYmbyYUbrsWkwEGEHTN1iBFEw.roa
File: 6OGYmbyYUbrsWkwEGEHTN1iBFEw.roa (raw, json)
Hash identifier: umps1C2s2KY5Wd4rX6pjVPygYhLcXkh9rNerxCOQT00=
Subject key identifier: E8:E1:98:99:BC:98:51:BA:EC:5A:4C:04:18:41:D3:37:58:81:14:4C
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 220E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6OGYmbyYUbrsWkwEGEHTN1iBFEw.roa
Signing time: Mon 26 Aug 2024 05:33:37 +0000
ROA not before: Mon 26 Aug 2024 05:33:37 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24165
IP address blocks: 49.158.232.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:17:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8718 (0x220e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:33:37 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E8E19899BC9851BAEC5A4C041841D3375881144C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8e:71:6c:de:51:6b:dd:3e:45:9e:44:1e:45:
c8:2c:73:7f:71:cf:f5:28:44:5d:94:2f:43:34:ac:
04:01:af:aa:62:4f:37:3d:31:77:aa:60:5c:07:77:
cc:71:a8:27:f7:f0:02:15:96:f3:03:9a:4a:0e:28:
b4:00:5d:50:32:79:81:a3:72:ba:eb:79:3d:41:dc:
b9:f9:5d:04:f9:1a:34:8b:2d:19:de:73:31:88:f1:
ba:07:4d:cf:09:7c:16:50:b7:8a:48:40:44:a8:0e:
a0:2b:75:4f:91:a1:f5:fe:a9:43:4e:df:fb:72:65:
1a:37:21:51:ef:1b:f2:32:0a:64:a9:3f:5d:78:ae:
16:46:c2:11:5c:f7:b5:eb:38:0f:c4:2f:a0:4f:c7:
d7:02:09:46:fe:9a:a8:e8:ca:ad:92:ec:11:16:8e:
4f:a1:f0:55:da:7f:a4:38:30:f7:06:fa:4a:0b:93:
47:b3:b5:0f:28:f4:22:91:ed:7f:cf:e0:c7:89:d1:
f5:2a:81:e1:a8:50:20:c9:9b:39:5b:47:82:80:f0:
ca:cd:79:3a:9e:ac:f2:4d:74:b3:6b:f8:66:de:17:
f3:f2:74:16:e4:22:0c:d8:9e:35:9d:96:16:65:20:
ea:a7:4c:66:5d:6b:57:3f:1d:7b:f6:66:fc:76:8b:
1b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E1:98:99:BC:98:51:BA:EC:5A:4C:04:18:41:D3:37:58:81:14:4C
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6OGYmbyYUbrsWkwEGEHTN1iBFEw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.232.0/23
Signature Algorithm: sha256WithRSAEncryption
30:ef:f8:b9:7c:7f:bc:79:34:42:85:b2:8f:58:6c:22:a6:a9:
d0:68:b4:5b:dd:fa:a6:7e:5e:d0:a4:de:89:25:df:cc:b8:48:
d2:8f:66:e7:0e:0c:24:7b:8a:6c:4e:76:92:13:fd:12:55:40:
bc:21:81:fc:fc:18:e2:48:49:23:2a:7a:d2:5d:cc:72:bb:7d:
46:8b:f4:76:df:cb:68:ac:32:81:52:42:68:da:fc:9c:1a:c2:
68:c9:be:48:a6:d8:cd:2a:d3:63:88:c6:7e:40:89:3a:0d:be:
9b:56:14:88:56:11:54:96:c4:f8:fe:4f:0e:95:df:80:d6:b9:
58:b2:8a:e9:d4:a3:90:85:a8:09:55:21:5b:41:a1:57:63:ee:
8a:28:b5:25:2e:d2:43:d2:53:4f:40:5f:53:fa:ba:03:77:fe:
ff:57:1d:50:02:82:36:8e:84:f3:8b:c7:15:6b:44:00:a0:e2:
39:42:b9:2d:03:f0:37:e2:86:61:c3:0d:63:37:98:69:34:51:
fd:7f:99:67:65:7f:35:3e:47:08:2d:a4:85:07:13:f1:c6:36:
22:b5:f6:65:2a:bf:f7:24:20:c8:2d:08:2b:af:68:9b:7a:86:
18:a6:99:4c:ac:39:df:f9:06:03:5c:e1:06:9e:36:cb:cd:b9:
5d:82:1c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:28:41 2025 by rpki-client