Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CBPDBpAl8ruAfdLAXwE8dSakttU.roa
File: CBPDBpAl8ruAfdLAXwE8dSakttU.roa (raw, json)
Hash identifier: AlhUJecvE8f+YgpilmLk5rQek3UJ7QvwFJbYwTvuPi8=
Subject key identifier: 08:13:C3:06:90:25:F2:BB:80:7D:D2:C0:5F:01:3C:75:26:A4:B6:D5
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 22B8
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CBPDBpAl8ruAfdLAXwE8dSakttU.roa
Signing time: Mon 26 Aug 2024 05:34:18 +0000
ROA not before: Mon 26 Aug 2024 05:34:18 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 49.158.76.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8888 (0x22b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:34:18 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=0813C3069025F2BB807DD2C05F013C7526A4B6D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9c:ea:c7:03:b8:42:6a:cd:0d:ec:ad:d6:b1:
f8:b4:5d:a2:52:d0:ca:fe:44:8a:81:ad:a4:31:62:
30:53:30:da:b9:d7:27:6d:a7:54:19:7c:66:db:31:
95:a4:c3:f9:59:e9:d8:5b:26:49:4a:f8:4e:9e:b8:
13:29:88:28:e7:b7:69:d4:c3:b5:f4:86:89:dd:8f:
0b:d3:b9:b4:bd:40:d4:3e:d2:74:62:a3:d2:13:ba:
dc:b3:4d:74:90:e2:fa:d5:10:57:00:ac:f8:b4:99:
63:e9:1a:5e:f7:b0:5f:93:6d:b2:1b:8e:46:b5:9b:
b8:de:2e:c4:24:74:bc:8d:a1:7b:82:33:ce:b3:b2:
55:e3:d3:cd:23:07:79:86:7c:b0:03:e1:01:ed:06:
32:8e:63:c5:20:f7:1f:83:65:e3:b7:8d:58:d3:db:
ba:15:28:00:5c:30:98:59:f6:38:9d:c3:a4:d9:e0:
92:21:54:02:28:63:f2:f1:10:23:68:5b:17:ea:40:
8f:04:06:9e:1d:e9:75:6c:f3:57:89:06:ab:10:56:
29:f1:24:6d:49:38:26:6f:70:35:c3:cd:32:4d:fe:
34:dd:2d:ee:4f:e3:89:fb:38:87:0c:34:7c:5a:c5:
1c:8a:ce:f5:f8:89:07:20:8b:25:7d:06:a3:a2:0d:
f6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:13:C3:06:90:25:F2:BB:80:7D:D2:C0:5F:01:3C:75:26:A4:B6:D5
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CBPDBpAl8ruAfdLAXwE8dSakttU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.76.0/22
Signature Algorithm: sha256WithRSAEncryption
04:3b:7f:e3:90:94:68:71:ac:9c:bc:16:b5:08:fe:6d:86:ca:
8f:be:72:a0:02:bd:00:01:48:32:ea:f7:4e:d0:4b:6b:86:08:
2b:75:40:d6:db:56:50:54:23:c8:6e:47:9f:fa:29:22:f8:94:
b9:30:0b:c1:6a:8f:83:3d:93:68:2b:a9:d7:34:df:df:96:0d:
69:81:59:9d:7e:21:7a:20:ed:27:cb:66:c0:65:38:7c:cd:35:
4d:8a:6f:a9:6f:a5:bf:9f:ca:6b:ad:38:2e:41:31:e4:c7:dd:
5a:36:5a:b7:27:8d:40:7a:f8:16:97:64:42:4f:98:cc:da:ed:
ea:22:4e:97:8e:98:19:7e:36:d9:ef:87:a2:bd:bd:47:d7:33:
ca:61:41:7c:60:1b:84:f3:0c:d2:77:51:37:12:6e:ee:31:eb:
2e:90:41:d9:99:68:5f:3e:0c:da:e4:95:7b:08:ce:42:40:75:
72:18:11:bb:79:a7:1c:3f:e5:b7:2e:d2:5d:a0:8a:31:9e:7b:
03:d7:f2:69:c0:fc:30:b6:da:0f:22:7e:c9:88:8b:58:73:17:
55:00:ec:e2:7e:63:b6:eb:74:f4:4b:e2:d5:c2:49:c5:a6:71:
c6:45:5b:1d:3c:ff:72:d1:77:46:c9:b0:7d:0a:39:e9:ee:6c:
11:a9:92:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:34:36 2025 by rpki-client