Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CcmEbczd7gY33gqdl94lDZLRW4c.roa
File: CcmEbczd7gY33gqdl94lDZLRW4c.roa (raw, json)
Hash identifier: 2JbPTj0jQ7KGfNnTizc4C8hx/xtX1qtCBIUIu3EQTj4=
Subject key identifier: 09:C9:84:6D:CC:DD:EE:06:37:DE:0A:9D:97:DE:25:0D:92:D1:5B:87
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 2175
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CcmEbczd7gY33gqdl94lDZLRW4c.roa
Signing time: Mon 26 Aug 2024 05:33:01 +0000
ROA not before: Mon 26 Aug 2024 05:33:01 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24163
IP address blocks: 49.158.192.0/20 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:18:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8565 (0x2175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:33:01 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=09C9846DCCDDEE0637DE0A9D97DE250D92D15B87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f1:f3:1c:fc:4c:0b:0a:46:59:73:ba:2d:de:
1b:a5:e1:98:cd:05:e1:06:c6:db:34:57:17:48:de:
92:9e:79:da:ff:a9:8e:1a:65:2d:60:02:e3:00:0f:
ab:aa:64:d2:ee:63:b3:4b:01:cc:cc:b5:0a:30:0c:
94:bc:42:5f:e6:73:23:9b:90:1e:db:d0:37:ff:95:
8f:10:50:4c:02:3d:d4:1b:d6:43:e2:57:7c:3c:27:
75:a8:d6:b6:15:ff:6f:cf:6e:51:ba:2a:19:73:41:
50:d5:43:39:a5:b6:c1:31:55:e7:7a:7a:0a:3b:f9:
4a:b0:87:d8:1a:1b:93:29:df:e6:2e:e3:95:3e:e0:
17:dd:f6:d6:a9:a1:4b:62:60:56:11:6e:1d:17:17:
5e:0a:e7:3e:08:2c:e9:db:e6:9e:0d:df:6e:20:f4:
11:9b:dd:a1:9e:c5:08:99:a8:8c:01:b4:99:96:c8:
21:87:76:33:4c:2c:74:3f:98:fd:33:62:04:57:fd:
96:6b:74:38:46:e0:ca:8d:96:9c:8d:88:a6:b5:09:
86:e1:17:f8:ee:88:62:e5:69:05:f9:4c:4d:3f:46:
ef:45:f7:15:be:e4:c1:8e:a8:da:01:9f:66:c0:0d:
b7:56:68:90:21:4e:86:87:a6:39:86:4e:e1:72:96:
bf:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C9:84:6D:CC:DD:EE:06:37:DE:0A:9D:97:DE:25:0D:92:D1:5B:87
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CcmEbczd7gY33gqdl94lDZLRW4c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.192.0/20
Signature Algorithm: sha256WithRSAEncryption
6b:9d:0c:0b:ec:5f:7c:c9:92:f1:fe:92:01:3a:89:71:2a:1b:
12:b9:50:40:bd:e0:cf:b3:c9:cf:f3:9a:8b:4e:7d:5e:d5:22:
c7:a9:7a:79:84:1d:b8:99:63:ac:d0:87:68:9d:2a:20:5c:a4:
da:5a:5e:73:63:95:a5:4e:0b:ee:42:a0:b2:7a:ba:84:40:97:
f0:ae:ba:7c:ff:cc:dd:17:b7:7e:89:89:70:51:11:7c:ca:a3:
47:ac:78:aa:81:65:3a:c8:e3:72:39:05:3f:bd:10:ee:4f:bb:
95:4f:3c:5e:fc:3d:53:aa:38:c7:47:8c:40:e5:e0:cf:f3:c3:
ea:1d:49:12:97:9d:37:7d:bc:b3:ac:19:ed:7c:fe:5f:4f:06:
e7:49:b7:7b:0e:13:17:57:35:00:b2:3b:9d:2c:04:75:c0:e7:
1d:ce:90:21:a9:c9:fa:c1:4a:62:7f:d1:d4:e7:e9:8f:40:54:
ad:0c:c1:7d:ee:cf:32:b8:13:94:67:03:29:b5:76:dc:0a:15:
81:97:83:9f:b3:b2:1c:f0:7b:a2:19:f0:b0:05:57:a4:57:0f:
73:85:dc:b9:9f:b5:d6:92:38:e4:2f:06:09:3e:b2:bc:73:6f:
2d:1d:40:0f:ee:62:20:35:8d:8e:10:6f:74:9f:41:03:97:69:
2f:5b:08:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:24:01 2025 by rpki-client