Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FmUylf_YOFoUzBoE13ypbaw8-O4.roa
File: FmUylf_YOFoUzBoE13ypbaw8-O4.roa (raw, json)
Hash identifier: XWfqdILGpeH0ua+OdHlEohmyziaYEga2pJq+dY6wWyQ=
Subject key identifier: 16:65:32:95:FF:D8:38:5A:14:CC:1A:04:D7:7C:A9:6D:AC:3C:F8:EE
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 221D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FmUylf_YOFoUzBoE13ypbaw8-O4.roa
Signing time: Mon 26 Aug 2024 05:33:41 +0000
ROA not before: Mon 26 Aug 2024 05:33:41 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 49.158.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:17:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8733 (0x221d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:33:41 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=16653295FFD8385A14CC1A04D77CA96DAC3CF8EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a7:5d:67:d2:c6:77:bb:51:10:59:a0:50:74:
6d:f0:6e:f4:37:4d:2f:b2:0e:a4:d5:e4:d1:66:53:
63:51:86:00:47:ac:6d:bb:bc:23:c5:6d:d0:32:fc:
e9:5d:48:75:b1:d0:ba:b0:c3:63:89:62:51:c2:6d:
8a:02:a5:e8:6d:2e:2d:5e:50:05:2b:54:cd:ce:63:
8f:60:2c:87:35:39:11:d9:fa:f1:bb:61:f1:08:f7:
f8:5f:82:e1:c2:e7:37:d1:72:30:2b:07:50:ef:88:
ae:1d:91:61:25:1d:bb:c5:6f:34:4b:ff:94:42:61:
85:74:98:80:96:8e:7a:13:37:12:c4:d9:61:c8:2a:
98:e6:d6:67:33:84:27:b9:60:54:ea:04:46:1a:5c:
44:ad:fa:e9:6e:2a:1f:4c:2d:e4:9d:28:eb:2e:15:
2d:28:b9:3d:c0:d7:27:6f:44:43:c6:d6:4c:59:bd:
2b:99:5c:bc:3a:e3:58:e1:fa:eb:97:f5:c5:cd:2d:
16:67:d9:12:e2:44:80:59:f7:ad:48:1a:3f:00:23:
0a:26:0d:a0:70:8e:03:9d:ca:11:c3:b5:1b:ef:4a:
c1:91:f4:8b:ff:f5:fd:69:4b:c6:8c:89:87:14:4a:
f3:63:a8:e0:ce:ce:e5:27:7b:21:ee:c1:0f:0f:fd:
0b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:65:32:95:FF:D8:38:5A:14:CC:1A:04:D7:7C:A9:6D:AC:3C:F8:EE
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FmUylf_YOFoUzBoE13ypbaw8-O4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.147.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:74:5b:45:99:54:2a:76:31:34:d0:5b:dd:69:5f:97:22:ce:
64:09:a7:05:ab:82:52:0f:2c:64:96:87:72:ff:c0:de:9f:35:
b7:51:d4:11:bb:0c:d9:ee:52:1a:38:f1:dd:98:92:75:36:64:
c6:79:1e:b4:27:6e:0a:ca:b9:de:97:dd:b7:38:a8:8b:8d:0c:
5e:57:44:d4:12:0d:aa:1d:f0:c8:45:68:23:e5:3a:04:4f:a1:
f8:c6:7c:2b:b5:dc:63:cd:bd:e4:3b:34:bd:68:c6:b1:16:97:
ad:f6:04:12:73:2d:53:ab:d3:e5:5d:c1:44:89:0d:d7:99:1e:
75:70:f8:44:1b:39:85:a7:42:dd:f4:a1:b4:ae:23:65:a9:28:
91:3f:7b:b1:90:fa:e9:a1:09:76:c8:92:7f:8a:be:e3:70:a2:
19:00:ce:f3:3c:75:49:12:87:0a:86:c4:4a:2c:14:5b:fa:f5:
f4:ea:4c:1f:20:5a:c6:af:1f:9c:6a:a4:d2:80:c1:0b:1d:ac:
9e:ca:17:4e:b0:d7:40:11:23:77:4f:d4:6d:70:3a:85:81:24:
e6:97:78:2c:d9:2a:28:52:c7:88:88:4b:d9:f5:83:f6:fa:64:
87:f2:cb:ae:77:cb:77:6b:05:3a:29:43:f7:52:44:f2:1d:5a:
d3:0d:46:73
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIh0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw
NTMzNDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE2NjUzMjk1RkZEODM4
NUExNENDMUEwNEQ3N0NBOTZEQUMzQ0Y4RUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDhp11n0sZ3u1EQWaBQdG3wbvQ3TS+yDqTV5NFmU2NRhgBHrG27
vCPFbdAy/OldSHWx0Lqww2OJYlHCbYoCpehtLi1eUAUrVM3OY49gLIc1ORHZ+vG7
YfEI9/hfguHC5zfRcjArB1DviK4dkWElHbvFbzRL/5RCYYV0mICWjnoTNxLE2WHI
Kpjm1mczhCe5YFTqBEYaXESt+uluKh9MLeSdKOsuFS0ouT3A1ydvREPG1kxZvSuZ
XLw641jh+uuX9cXNLRZn2RLiRIBZ961IGj8AIwomDaBwjgOdyhHDtRvvSsGR9Iv/
9f1pS8aMiYcUSvNjqODOzuUneyHuwQ8P/QsNAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUFmUylf/YOFoUzBoE13ypbaw8+O4wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0ZtVXlsZl9ZT0ZvVXpCb0Ux
M3lwYmF3OC1PNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAx
npMwDQYJKoZIhvcNAQELBQADggEBAF10W0WZVCp2MTTQW91pX5cizmQJpwWrglIP
LGSWh3L/wN6fNbdR1BG7DNnuUho48d2YknU2ZMZ5HrQnbgrKud6X3bc4qIuNDF5X
RNQSDaod8MhFaCPlOgRPofjGfCu13GPNveQ7NL1oxrEWl632BBJzLVOr0+VdwUSJ
DdeZHnVw+EQbOYWnQt30obSuI2WpKJE/e7GQ+umhCXbIkn+KvuNwohkAzvM8dUkS
hwqGxEosFFv69fTqTB8gWsavH5xqpNKAwQsdrJ7KF06w10ARI3dP1G1wOoWBJOaX
eCzZKihSx4iIS9n1g/b6ZIfyy653y3drBTopQ/dSRPIdWtMNRnM=
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:45:33 2025 by rpki-client