Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/87Pt4JjRBaDqtxV2KgPEjSCXD0Y.roa
File: 87Pt4JjRBaDqtxV2KgPEjSCXD0Y.roa (raw, json)
Hash identifier: mam+c3T81C2F/FOMFaE1sxtywxf4uJF6vhNWfgHiwGQ=
Subject key identifier: F3:B3:ED:E0:98:D1:05:A0:EA:B7:15:76:2A:03:C4:8D:20:97:0F:46
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 2172
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/87Pt4JjRBaDqtxV2KgPEjSCXD0Y.roa
Signing time: Mon 26 Aug 2024 05:33:01 +0000
ROA not before: Mon 26 Aug 2024 05:33:01 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24163
IP address blocks: 211.76.52.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:18:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8562 (0x2172)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:33:01 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F3B3EDE098D105A0EAB715762A03C48D20970F46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bd:66:80:05:c5:0d:04:35:27:15:3f:ed:cd:
2c:7b:c7:8d:53:b6:9b:1a:55:10:01:e0:85:85:53:
44:81:19:2e:a1:61:7f:9a:a9:58:4a:de:cf:ff:81:
3a:b6:ac:cf:1e:e0:b8:31:f6:43:d6:83:50:95:b8:
5f:07:12:62:46:73:57:43:81:dd:b2:9b:5d:94:19:
7a:bd:9d:7e:8b:34:24:b1:df:9b:49:58:b8:f0:25:
36:5e:12:f9:44:29:b8:ba:82:9d:6b:4c:f4:9e:7e:
81:d3:1d:e8:eb:46:00:e7:7f:00:68:c9:ac:43:0d:
3d:c3:a3:60:84:0b:3c:9b:f7:8f:54:47:41:c7:1e:
1f:99:04:63:63:7f:c5:b4:0e:83:6f:5f:e8:bd:10:
ad:dd:90:a8:0e:a9:60:4e:8b:96:0e:53:3c:1a:53:
bf:1c:67:9e:2c:24:9d:80:25:ca:8d:bc:2f:84:7b:
31:fe:2a:8a:bb:d9:7a:d8:44:55:9e:27:33:8f:de:
89:29:63:fa:eb:c7:26:c8:a8:d0:38:da:9c:5b:ea:
73:35:d5:c7:4f:8e:99:15:93:52:b1:5f:cc:ed:0f:
1f:37:21:c8:73:a7:1f:ea:6a:9f:29:33:d5:07:8d:
fc:a6:81:32:ac:d6:6e:ca:cc:e3:7b:ac:b9:d6:77:
12:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B3:ED:E0:98:D1:05:A0:EA:B7:15:76:2A:03:C4:8D:20:97:0F:46
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/87Pt4JjRBaDqtxV2KgPEjSCXD0Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.52.0/23
Signature Algorithm: sha256WithRSAEncryption
03:3f:d5:ef:77:cb:46:08:14:3d:ec:89:10:50:a5:c5:44:32:
08:be:b7:ab:a2:c7:1e:1c:66:b7:f8:11:2c:48:1e:7d:79:4c:
e0:e0:cc:31:49:ff:4b:40:11:79:ba:ba:5d:fe:0b:4b:64:c4:
f2:89:20:3a:fa:09:05:8f:84:1a:e3:35:c9:d0:fc:b1:b6:a8:
24:f4:df:2f:f9:8b:b2:cd:d4:d6:7b:e3:53:3a:f3:ba:fe:f2:
03:47:0d:03:b3:bd:c4:4a:c7:fd:50:63:a7:18:e0:31:06:8b:
6f:3f:1a:19:43:aa:47:ad:c2:2b:e5:57:c0:87:dc:c8:b9:25:
3f:db:bc:44:3c:1d:a7:f2:d7:d7:17:36:0c:e0:35:6b:16:07:
04:84:6b:9d:5b:10:8d:3a:40:e5:ec:a4:66:fe:fb:d7:e6:73:
88:10:7d:ec:77:99:dd:27:5d:70:a1:2d:0f:02:33:ee:b8:21:
f5:38:e8:01:06:31:ee:a0:cb:02:c9:ac:a0:61:b8:08:fe:c4:
86:3b:e7:1b:69:cf:a1:3e:8c:5d:1b:fc:68:cb:b3:03:d2:eb:
d2:5a:6a:88:c7:be:0e:65:32:46:d5:d3:a3:5e:b0:90:49:0c:
e0:e7:bb:67:b5:ef:d6:38:eb:53:80:5e:b9:16:8a:26:ff:62:
d1:f8:4a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:29:45 2025 by rpki-client