Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Gp1nE02j-ygIULhL0vao-jLe2WY.roa
File: Gp1nE02j-ygIULhL0vao-jLe2WY.roa (raw, json)
Hash identifier: 4oVtxf1LILlrJKp4xZmqyp8WJohU0MEldtbzhr6fBNY=
Subject key identifier: 1A:9D:67:13:4D:A3:FB:28:08:50:B8:4B:D2:F6:A8:FA:32:DE:D9:66
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 228A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Gp1nE02j-ygIULhL0vao-jLe2WY.roa
Signing time: Mon 26 Aug 2024 05:34:07 +0000
ROA not before: Mon 26 Aug 2024 05:34:07 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 180.218.216.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8842 (0x228a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:34:07 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=1A9D67134DA3FB280850B84BD2F6A8FA32DED966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:38:a7:3e:d1:0d:0f:45:19:5a:25:90:56:60:
38:3c:b8:94:c8:ed:39:72:d5:99:e5:34:c5:eb:6d:
b8:9a:08:ed:ca:b6:c7:b9:05:01:3e:a0:b4:f7:47:
cd:f4:9e:49:3b:96:43:01:bd:91:9a:a5:06:4e:a7:
d3:b9:95:fb:ec:e0:9b:8c:49:4f:66:fe:81:1c:2e:
dd:7d:ea:2c:c9:ea:ce:1a:51:ee:9b:fe:47:41:23:
9d:94:d0:95:ad:b5:74:67:4d:d6:86:26:46:04:ac:
43:ab:54:8a:af:3d:93:fc:1f:f9:e4:e4:e5:ff:2b:
34:7e:d2:59:9f:fc:2d:22:73:23:86:45:8b:55:32:
52:23:0c:2d:91:ed:99:ce:cb:2f:92:65:95:21:2a:
61:cd:6a:30:2d:df:76:50:23:ed:da:cd:6e:f3:ae:
5f:09:c6:e0:2e:1b:ad:ea:c6:48:a1:f1:d0:de:44:
fa:45:2f:74:6a:36:db:1f:36:ee:56:ec:13:7f:d3:
96:c1:53:32:45:22:39:aa:80:73:08:7e:ac:4e:d9:
ba:51:68:98:9f:c2:83:b3:e5:b8:d0:c9:5f:3f:ab:
d2:65:2a:4e:96:c3:76:53:80:6d:55:ab:e4:4d:20:
8b:2c:ab:31:d3:5c:ee:2d:e5:0a:3b:e5:81:2b:89:
e2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9D:67:13:4D:A3:FB:28:08:50:B8:4B:D2:F6:A8:FA:32:DE:D9:66
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Gp1nE02j-ygIULhL0vao-jLe2WY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.216.0/22
Signature Algorithm: sha256WithRSAEncryption
59:77:c3:b3:26:41:4b:3d:67:0f:38:72:a5:c4:21:45:31:37:
bb:0a:d8:d5:64:cf:49:3b:f5:8e:92:cc:75:6a:58:90:cb:38:
1e:d1:51:ba:e8:1c:73:71:e7:99:94:d1:6a:4a:1d:47:b0:24:
fd:f0:ad:0f:e6:88:d3:c2:eb:ab:cb:ac:c9:34:8c:65:57:2d:
8f:52:9b:ab:3d:af:e2:ec:96:0d:99:6b:eb:14:af:a7:48:01:
6a:ea:80:90:b2:ca:07:95:7b:5b:f2:37:43:c6:0b:c2:59:16:
d5:7b:31:c4:a7:32:91:5e:96:5b:dc:45:53:96:68:7f:9c:94:
c2:65:ca:e5:cd:d4:74:67:20:78:60:d4:68:34:f7:43:7a:74:
85:ba:a0:9d:a6:70:02:d5:e6:ae:b5:27:55:4c:31:cf:4b:cf:
12:be:7d:ad:dd:87:38:50:d3:d0:aa:31:11:75:0a:28:90:cc:
01:a6:b5:27:19:c5:8b:ce:ed:5e:62:da:a8:f9:21:79:84:aa:
9e:8b:69:ab:85:70:56:c0:d9:39:d6:3c:7a:9f:7c:2a:42:23:
2b:bb:2c:c3:aa:92:bc:18:01:e6:f6:94:bc:66:cd:46:d3:31:
8d:c1:77:a4:12:94:c8:d7:d0:0b:4f:96:b3:58:a0:af:4e:bf:
bf:67:c5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:10:58 2025 by rpki-client