Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8zBjT_dUYZR8hZ-I7s3PnR7qmqo.roa
File: 8zBjT_dUYZR8hZ-I7s3PnR7qmqo.roa (raw, json)
Hash identifier: fXQkRCWYyu37KBGxTOlfJA8/fSvcNhcwU5tY+2TC54U=
Subject key identifier: F3:30:63:4F:F7:54:61:94:7C:85:9F:88:EE:CD:CF:9D:1E:EA:9A:AA
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 221C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8zBjT_dUYZR8hZ-I7s3PnR7qmqo.roa
Signing time: Mon 26 Aug 2024 05:33:41 +0000
ROA not before: Mon 26 Aug 2024 05:33:41 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 122.254.36.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:17:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8732 (0x221c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:33:41 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F330634FF75461947C859F88EECDCF9D1EEA9AAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:16:e6:af:5d:43:b1:09:04:47:da:80:6b:97:
a7:06:fd:75:53:c7:57:f6:b6:03:e9:86:09:87:cb:
bd:eb:c4:b0:1f:0e:03:8e:d9:1c:df:9f:10:0d:35:
42:72:c9:46:63:2a:4f:05:7d:91:a8:61:cf:d5:17:
7a:80:ab:93:53:24:f7:de:80:6c:af:db:48:65:87:
f6:ae:63:59:71:4c:33:ca:05:5e:76:ee:a1:06:15:
d6:1f:1c:bd:dc:f1:72:15:86:34:47:52:26:01:c6:
bf:16:11:40:3f:be:5d:28:c9:d5:20:a6:df:20:f3:
dd:6c:bd:a8:61:73:f3:33:f2:75:54:4e:a5:99:59:
5a:f5:63:d3:68:92:ed:09:75:43:80:47:2a:f0:8d:
44:f5:14:78:e4:21:b7:6c:40:cb:30:7d:a1:5d:3d:
d2:3d:47:87:0a:88:64:c6:cc:a0:e0:8d:a2:ea:ce:
c8:f1:b5:9c:ea:29:70:e1:4a:fd:d0:65:d4:63:ca:
db:50:fa:6c:72:c5:f1:7b:0e:63:a4:db:be:c5:6e:
ba:23:80:fe:cf:93:9f:f1:c0:30:c6:53:e4:d0:4e:
e9:8e:c4:5f:65:b8:77:6f:e1:c4:51:16:48:46:ad:
74:37:b8:34:d4:59:bd:50:a1:7b:6e:ba:46:6a:f0:
26:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:30:63:4F:F7:54:61:94:7C:85:9F:88:EE:CD:CF:9D:1E:EA:9A:AA
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8zBjT_dUYZR8hZ-I7s3PnR7qmqo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.36.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:eb:3f:8d:18:8e:a6:7d:e5:8a:91:14:6c:12:38:e4:78:5c:
a3:f3:d3:a4:3a:6c:16:b0:d5:a7:e3:ae:a3:b4:8e:45:0b:ed:
22:da:bc:3b:20:0b:0f:97:e9:29:ae:bd:c6:8e:06:bb:20:8f:
c0:d1:d9:06:ad:84:65:c5:01:cb:a3:76:fa:c2:cb:51:f4:89:
d3:51:25:c2:db:f2:91:17:1b:79:01:49:cb:53:b0:b8:b1:ae:
de:4a:f3:66:b3:09:f3:16:31:e3:bf:f9:51:7a:e8:4a:32:2b:
8f:36:2e:92:10:0a:40:54:55:e6:f6:c5:ff:dd:38:0e:2a:dc:
90:aa:ff:5c:5e:5b:e6:88:a4:3f:77:91:80:02:49:68:84:2b:
ff:87:b7:4d:5f:d6:1c:b9:4b:dd:e0:b0:c2:3e:27:e1:02:e1:
98:0e:eb:e7:b5:6d:2d:31:e5:86:d1:30:c0:31:f3:d5:97:ae:
ef:31:75:f3:67:da:f8:7f:de:d8:c0:a1:01:c1:4c:9d:7f:e2:
b5:e9:7d:30:95:30:4c:7a:24:88:ee:2f:22:d3:75:1d:99:c0:
5d:a7:e8:07:62:67:6f:38:0f:57:7f:90:f0:01:9b:39:40:72:
6e:5f:4d:aa:bc:f6:14:ea:df:ea:fa:93:ab:b6:b0:c7:af:3b:
c1:df:af:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:21:42 2025 by rpki-client