Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ba_PkBmPULR1PdP5uZEqjgjT3nM.roa
File: Ba_PkBmPULR1PdP5uZEqjgjT3nM.roa (raw, json)
Hash identifier: PdiNHq9BaF3fe0OCqDwR/WFpZeCaOMdb4NNQfwVC66s=
Subject key identifier: 05:AF:CF:90:19:8F:50:B4:75:3D:D3:F9:B9:91:2A:8E:08:D3:DE:73
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 21B9
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ba_PkBmPULR1PdP5uZEqjgjT3nM.roa
Signing time: Mon 26 Aug 2024 05:33:17 +0000
ROA not before: Mon 26 Aug 2024 05:33:17 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24163
IP address blocks: 122.100.96.0/19 maxlen: 19
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:19:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8633 (0x21b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:33:17 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=05AFCF90198F50B4753DD3F9B9912A8E08D3DE73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c2:e6:3a:68:35:da:64:96:73:37:e4:34:df:
e2:49:cc:bb:fe:4c:ec:30:bf:34:c2:32:c1:ff:d9:
ce:f9:5c:3b:87:8b:71:a0:1a:36:d5:a9:31:b3:f8:
da:51:df:c4:0e:94:70:5d:9d:55:bb:eb:07:42:f3:
9c:c9:8a:cd:b6:6a:00:7b:90:14:e2:57:ba:33:f5:
da:9e:ff:3c:3e:af:4e:1a:0e:f0:8c:82:87:1a:21:
c1:eb:c5:ad:08:e0:68:af:27:72:11:cb:74:39:38:
48:9a:d5:18:1d:02:67:a7:05:29:25:57:5c:71:fe:
08:99:ce:ef:49:83:c8:9f:05:c3:3b:c1:2f:5e:f2:
a3:c5:22:e0:06:f2:4f:b6:86:26:f8:8e:21:38:30:
6a:9c:94:03:47:ba:47:34:34:96:fc:bc:ec:02:da:
51:45:3f:1d:ea:3f:d2:75:f8:e4:86:bc:1c:28:5e:
43:de:f6:e8:d2:a9:3d:cf:9a:56:9c:d0:f9:ca:ab:
c5:4f:91:72:3d:aa:34:a4:bc:ed:38:aa:20:bf:72:
ba:5f:96:c7:6e:4b:f4:28:04:4a:43:19:e0:30:be:
f2:c8:91:c4:c0:d8:53:40:d7:0b:75:d8:0d:61:b8:
b9:56:c2:f4:ac:3b:b0:fc:24:9f:8d:6c:a8:9f:8d:
19:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AF:CF:90:19:8F:50:B4:75:3D:D3:F9:B9:91:2A:8E:08:D3:DE:73
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ba_PkBmPULR1PdP5uZEqjgjT3nM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.96.0/19
Signature Algorithm: sha256WithRSAEncryption
0e:82:ff:3b:df:4a:8d:0c:6f:81:d1:4d:f8:c0:3c:6d:38:8b:
b5:04:4c:83:03:ec:b2:97:d8:33:f9:d8:e8:44:45:05:ec:31:
97:43:d5:35:31:ae:00:99:1f:75:3d:c6:bd:66:28:16:3a:55:
27:3f:ac:91:61:db:38:41:97:b5:2a:22:fd:63:0a:67:28:70:
4d:5c:d5:36:98:f8:70:2c:b6:ef:e4:a5:81:4a:2d:56:d8:67:
83:ec:8b:c6:f8:de:a8:89:d4:cf:e1:6a:8c:8c:37:22:1c:60:
3d:b4:4f:11:4f:84:33:bb:e0:60:39:8c:08:cf:ab:85:1f:ed:
02:fd:16:dd:cf:8a:3a:61:1d:f9:3f:6e:ff:fa:85:4c:17:69:
c5:4a:86:cd:4b:c2:e3:b6:e7:61:90:25:ce:65:bc:6b:e6:e2:
73:bd:4e:f9:76:d6:8b:22:23:7c:0a:79:30:3c:f0:5e:6b:81:
f4:17:eb:fd:37:6b:06:c4:16:f3:71:1a:d8:c1:f4:19:ff:13:
27:fd:fe:56:4c:e0:e6:ae:6b:4f:a7:4e:09:8d:9a:b6:67:fc:
25:02:6c:6d:d7:ff:25:85:6a:a2:da:fa:9a:3f:91:29:d5:c6:
72:3f:64:a4:9d:be:10:d3:b2:07:c8:e3:ab:20:df:df:ef:73:
81:78:7d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:39:02 2025 by rpki-client