Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/E56v7MBFMdc4SmHZjwBLGOFrhgY.roa
File: E56v7MBFMdc4SmHZjwBLGOFrhgY.roa (raw, json)
Hash identifier: T/G0p1uCvDTvxE4auLOzUPB45SuiiWlxDxtM2Xn6s60=
Subject key identifier: 13:9E:AF:EC:C0:45:31:D7:38:4A:61:D9:8F:00:4B:18:E1:6B:86:06
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 21F3
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/E56v7MBFMdc4SmHZjwBLGOFrhgY.roa
Signing time: Mon 26 Aug 2024 05:33:30 +0000
ROA not before: Mon 26 Aug 2024 05:33:30 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 61.64.24.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:17:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8691 (0x21f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:33:30 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=139EAFECC04531D7384A61D98F004B18E16B8606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:63:07:31:e9:21:6a:41:2e:2b:e5:66:83:b4:
44:f9:1a:13:56:80:57:ee:79:86:41:4b:01:a1:fc:
30:c6:85:8c:47:8d:cb:11:61:3d:89:14:78:7e:22:
56:c3:49:0b:58:89:1e:39:49:f6:b3:92:33:05:49:
4c:1c:43:30:a2:0c:0c:1d:37:76:ff:21:b6:1e:fa:
66:ee:e8:32:bd:dc:7c:3b:98:25:b9:ba:61:10:8b:
0d:36:46:0b:f0:7e:33:ed:63:2b:81:b4:a4:e8:f7:
97:50:f8:e8:6a:a2:0f:d6:6a:fc:42:8c:cd:72:e9:
8b:28:d9:db:8a:03:65:48:61:fa:0f:1b:4f:97:9c:
be:96:1a:45:e6:75:1a:aa:c6:41:e3:4e:05:27:4d:
ec:ff:b5:ae:d7:e5:9c:bf:bd:33:fa:e5:29:cc:83:
bf:b4:3c:88:13:5c:4d:9c:b9:fa:0a:36:d6:59:48:
5d:3c:73:fb:ae:a3:ea:1a:d4:b5:3b:ce:51:09:8a:
c9:67:02:03:39:3f:fb:72:7c:dc:05:59:b8:9b:a9:
8f:c7:1d:2f:30:61:b0:b1:76:5d:f9:a3:f2:c9:9c:
80:da:7c:02:b6:71:48:97:e6:b1:68:c9:ef:30:40:
ee:83:f1:a1:70:06:81:b9:6a:b2:dd:1b:8f:5a:d7:
bc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9E:AF:EC:C0:45:31:D7:38:4A:61:D9:8F:00:4B:18:E1:6B:86:06
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/E56v7MBFMdc4SmHZjwBLGOFrhgY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.64.24.0/21
Signature Algorithm: sha256WithRSAEncryption
73:43:73:34:1a:79:2b:c5:36:d7:46:dc:1a:09:d8:0b:2b:52:
bd:b5:72:fe:ae:19:5f:4b:7e:75:79:a6:de:60:ef:a2:b2:9e:
6a:7e:5b:b7:5e:af:89:7f:36:fa:c5:fd:6a:ad:d0:38:37:8f:
ac:85:c1:c4:15:90:80:dd:a1:12:ae:f0:00:5e:3e:27:1f:5b:
bb:15:0e:18:c0:f6:34:02:19:15:cd:0d:7f:8e:ce:71:f1:97:
f9:54:56:66:33:33:94:52:66:de:0a:8d:a0:5a:e7:5b:49:c6:
14:c3:21:1a:4b:cb:3a:0f:ba:8c:de:3a:38:98:72:b5:32:dc:
42:dc:0f:db:ba:74:47:8e:9a:a3:df:9d:94:21:73:04:f1:08:
4b:69:ae:48:3d:dc:2a:cf:12:28:50:15:a7:70:54:85:2f:9d:
b8:36:7d:23:04:bb:52:ce:5d:94:22:38:f9:2c:9b:f8:b2:11:
79:d9:d3:64:d2:23:78:bd:42:17:8a:52:8d:08:8b:db:07:c8:
96:5f:cc:e0:6d:e8:18:41:ef:15:ee:8f:7a:2e:d7:cc:05:8e:
97:7a:8b:79:1a:1e:a5:15:28:27:da:09:a2:a3:95:9c:65:80:
1f:1f:1f:78:fd:11:09:fd:0e:19:b1:cb:37:39:ee:00:73:f3:
cd:d8:a5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:24:05 2025 by rpki-client