Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DV2G7Iabljx-hvh_G_pMrE9jU00.roa
File: DV2G7Iabljx-hvh_G_pMrE9jU00.roa (raw, json)
Hash identifier: ez+lgUCpdIJO0tyieZoZdDsFK/A8erjnUW3rszyvRiI=
Subject key identifier: 0D:5D:86:EC:86:9B:96:3C:7E:86:F8:7F:1B:FA:4C:AC:4F:63:53:4D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 227A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DV2G7Iabljx-hvh_G_pMrE9jU00.roa
Signing time: Mon 26 Aug 2024 05:34:02 +0000
ROA not before: Mon 26 Aug 2024 05:34:02 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4662
IP address blocks: 61.58.96.0/20 maxlen: 20
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8826 (0x227a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:34:02 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=0D5D86EC869B963C7E86F87F1BFA4CAC4F63534D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ab:dc:13:80:f6:ff:a8:94:12:67:6e:f5:23:
e2:f0:1a:ba:da:0e:bb:2a:cb:03:30:6e:5e:30:07:
be:f2:2c:93:28:1c:70:28:26:95:01:bc:6e:01:8c:
04:65:bf:aa:92:92:7e:d0:cd:ca:57:fe:6d:fd:a3:
7f:9f:24:b4:24:8c:2c:14:53:1a:15:4b:3d:b6:4d:
33:d9:26:c7:2d:2a:45:7d:4a:87:52:7e:88:a9:b0:
eb:89:42:f6:0a:76:35:7c:fd:bb:3d:30:ed:e7:38:
d9:36:28:ae:93:fb:e1:3b:4c:93:01:e9:db:1c:76:
8c:2c:15:59:9d:e4:eb:73:ba:fb:10:64:e7:d4:65:
85:45:46:e7:a7:f4:88:5b:77:99:f3:81:0b:d6:cf:
8b:c3:9f:53:61:66:d0:46:cf:5b:3c:f7:b4:32:e3:
3c:e3:94:7d:04:93:4c:42:37:05:29:59:e9:1f:22:
23:b1:44:d4:ec:d6:60:52:6d:7b:2a:e5:6f:24:5c:
39:48:3b:8b:a5:c5:76:a7:67:ed:cf:20:82:2d:f2:
89:81:3c:07:1a:07:d3:29:de:d8:bb:00:25:73:2c:
b9:5f:7a:a2:09:12:70:39:2b:0a:23:64:3c:e4:ca:
bb:08:6f:74:44:4c:c7:4d:14:da:3a:cb:6e:e2:7b:
7a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:5D:86:EC:86:9B:96:3C:7E:86:F8:7F:1B:FA:4C:AC:4F:63:53:4D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DV2G7Iabljx-hvh_G_pMrE9jU00.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.96.0/20
Signature Algorithm: sha256WithRSAEncryption
55:0a:00:88:aa:d9:96:9f:cc:35:62:9c:a5:4a:9d:18:94:fa:
ab:82:07:a3:83:36:73:c5:12:6f:dc:ef:fd:46:ed:bc:39:a8:
c9:c0:4c:52:6d:94:56:d0:ba:4e:ea:64:66:87:3a:95:b2:c6:
bc:d6:28:43:d5:cb:9a:a6:81:0e:bf:57:f2:70:1e:b0:c1:08:
fe:62:84:03:94:26:78:78:9d:a1:5c:32:69:af:bb:64:04:b5:
11:c4:9e:0f:94:f3:a3:25:e8:b7:dd:da:e7:dc:f5:39:eb:58:
dd:c6:af:2a:f1:7a:a5:8f:52:85:80:9c:71:3f:02:7b:b7:2f:
b6:8b:8c:69:56:f7:91:29:31:6a:36:61:e1:5c:cd:f3:45:ba:
43:fd:c1:a9:4e:fb:e1:06:18:fa:18:8a:94:65:67:c4:69:72:
31:4c:39:35:e9:a1:9d:e6:64:e1:53:7c:01:ab:27:57:d4:1c:
96:0d:dd:ed:60:8f:61:a6:19:5c:93:76:6c:37:0e:3a:e6:fe:
9d:82:d8:83:0c:3e:0b:b0:94:10:15:6c:b1:f1:3c:b9:63:36:
9a:8e:d5:6e:a0:5c:e2:aa:cd:33:bb:9b:20:9d:3f:9f:a2:b7:
a7:88:99:e1:b3:37:04:c7:8e:9e:cc:8c:8b:0d:26:91:c2:c4:
04:a5:fd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:43:55 2025 by rpki-client