Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7Ik98LRo5eRERB2pf_0qBmp6FzQ.roa
File: 7Ik98LRo5eRERB2pf_0qBmp6FzQ.roa (raw, json)
Hash identifier: 96HdjNsf0Z9LWpczU1xayxFMZWKmuiLu4Ytch2+ElWw=
Subject key identifier: EC:89:3D:F0:B4:68:E5:E4:44:44:1D:A9:7F:FD:2A:06:6A:7A:17:34
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 22A3
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7Ik98LRo5eRERB2pf_0qBmp6FzQ.roa
Signing time: Mon 26 Aug 2024 05:34:12 +0000
ROA not before: Mon 26 Aug 2024 05:34:12 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24165
IP address blocks: 49.159.248.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8867 (0x22a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:34:12 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=EC893DF0B468E5E444441DA97FFD2A066A7A1734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1a:13:43:6f:8d:fd:64:03:fd:41:79:10:ff:
05:5b:63:af:16:1c:88:99:34:c1:79:d6:7c:21:07:
fd:9f:94:2b:62:32:6e:12:69:71:a1:37:fd:93:a6:
eb:07:4f:7f:88:da:24:ba:de:92:ae:81:43:fc:aa:
b2:68:10:b7:09:ff:8c:f3:ef:63:47:34:89:4a:97:
e7:9a:fb:9e:df:88:95:d8:b0:5e:85:be:5d:cb:17:
ad:92:65:35:59:1e:74:7d:39:41:d0:8a:e2:bc:fe:
33:1a:dd:db:92:e1:08:d9:d2:c7:2f:a0:57:31:fc:
51:3a:51:90:fa:99:d4:eb:84:c0:99:94:4f:19:c1:
49:55:36:08:e5:32:31:3b:94:bb:4e:e0:d7:08:09:
43:e4:cf:14:50:c5:27:6e:1e:3f:42:ea:e1:94:cf:
8b:ee:bb:25:92:67:19:89:73:a1:be:68:90:f8:ce:
7c:1b:91:d5:98:27:15:cc:d5:0e:5f:03:32:9a:19:
d3:97:83:73:f5:aa:7f:75:75:51:5a:f9:c1:75:f3:
6e:05:dd:c2:f2:3c:d3:89:9b:1e:9b:71:8d:a5:d3:
13:96:19:83:4e:2c:73:be:fc:d6:53:b3:af:37:e1:
e8:2e:75:93:a5:c6:91:32:68:62:26:8b:0f:9b:f7:
9b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:89:3D:F0:B4:68:E5:E4:44:44:1D:A9:7F:FD:2A:06:6A:7A:17:34
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7Ik98LRo5eRERB2pf_0qBmp6FzQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.248.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:d0:48:66:6a:90:bc:8c:c1:5d:fe:7d:4d:d8:ff:0d:ea:8d:
88:2c:70:cf:bb:92:16:88:07:fe:7d:77:e6:c0:65:4b:d7:27:
af:15:f1:06:df:3e:a9:1c:e8:91:66:21:0f:b2:58:e0:4d:c1:
57:f8:95:16:19:52:f8:fa:a0:1c:84:59:44:58:da:6a:02:d9:
42:51:e5:9b:9f:51:3e:ab:e5:4a:54:d8:41:53:ca:08:83:19:
a9:28:ca:49:16:8e:32:75:fa:f9:7c:5d:ff:54:90:1d:de:9b:
cd:ef:21:c4:4c:cb:9a:8b:b4:0c:90:52:90:d5:fc:7e:23:8a:
f3:47:50:18:bd:98:71:0a:c3:07:33:20:12:5d:90:43:f2:ed:
c9:ee:db:06:d8:3b:0d:0f:12:2d:47:35:f2:d3:9c:58:b8:47:
10:82:8c:bc:86:cc:0e:b4:02:7a:33:13:e3:ee:ac:21:e7:17:
1a:7e:3b:f4:cf:ee:5a:1f:e7:7b:67:04:a0:41:95:5e:7a:52:
8c:21:6c:7f:ac:aa:6e:a6:32:79:a8:99:ab:92:d2:e3:63:2f:
bf:5f:52:51:6a:12:23:19:56:29:21:c8:de:1e:64:97:82:35:
db:61:26:bf:b8:f5:37:19:f2:cb:c7:62:05:ed:6c:54:94:65:
22:cc:5c:37
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIqMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw
NTM0MTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEVDODkzREYwQjQ2OEU1
RTQ0NDQ0MURBOTdGRkQyQTA2NkE3QTE3MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDWGhNDb439ZAP9QXkQ/wVbY68WHIiZNMF51nwhB/2flCtiMm4S
aXGhN/2TpusHT3+I2iS63pKugUP8qrJoELcJ/4zz72NHNIlKl+ea+57fiJXYsF6F
vl3LF62SZTVZHnR9OUHQiuK8/jMa3duS4QjZ0scvoFcx/FE6UZD6mdTrhMCZlE8Z
wUlVNgjlMjE7lLtO4NcICUPkzxRQxSduHj9C6uGUz4vuuyWSZxmJc6G+aJD4znwb
kdWYJxXM1Q5fAzKaGdOXg3P1qn91dVFa+cF1824F3cLyPNOJmx6bcY2l0xOWGYNO
LHO+/NZTs6834egudZOlxpEyaGImiw+b95tPAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU7Ik98LRo5eRERB2pf/0qBmp6FzQwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzdJazk4TFJvNWVSRVJCMnBm
XzBxQm1wNkZ6US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx
n/gwDQYJKoZIhvcNAQELBQADggEBAI3QSGZqkLyMwV3+fU3Y/w3qjYgscM+7khaI
B/59d+bAZUvXJ68V8QbfPqkc6JFmIQ+yWOBNwVf4lRYZUvj6oByEWURY2moC2UJR
5ZufUT6r5UpU2EFTygiDGakoykkWjjJ1+vl8Xf9UkB3em83vIcRMy5qLtAyQUpDV
/H4jivNHUBi9mHEKwwczIBJdkEPy7cnu2wbYOw0PEi1HNfLTnFi4RxCCjLyGzA60
AnozE+PurCHnFxp+O/TP7lof53tnBKBBlV56UowhbH+sqm6mMnmomauS0uNjL79f
UlFqEiMZVikhyN4eZJeCNdthJr+49TcZ8svHYgXtbFSUZSLMXDc=
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:39:18 2025 by rpki-client