Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IWqZ_RqgcReOTG-wtjzUItGseFo.roa
File: IWqZ_RqgcReOTG-wtjzUItGseFo.roa (raw, json)
Hash identifier: yqOGboXRBFaomL/aa2FtKge2EdT3C99IBEgY8GRtK0M=
Subject key identifier: 21:6A:99:FD:1A:A0:71:17:8E:4C:6F:B0:B6:3C:D4:22:D1:AC:78:5A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 2207
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IWqZ_RqgcReOTG-wtjzUItGseFo.roa
Signing time: Mon 26 Aug 2024 05:33:35 +0000
ROA not before: Mon 26 Aug 2024 05:33:35 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 180.218.232.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:17:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8711 (0x2207)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:33:35 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=216A99FD1AA071178E4C6FB0B63CD422D1AC785A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:89:22:c8:71:77:59:23:7b:39:61:58:f1:29:
7c:d2:0b:de:a4:53:5a:99:8f:9b:54:aa:c0:35:30:
e3:68:9c:32:f2:aa:ab:6d:c4:2b:24:37:3d:41:9d:
46:e5:df:61:84:af:40:9a:a1:16:94:f7:a6:6a:14:
5e:4f:08:69:e4:e7:9b:78:32:90:34:01:bc:0e:c3:
f1:cf:c0:f9:c3:a9:1a:db:bd:28:26:0a:fb:26:31:
8c:eb:ce:85:76:58:5e:21:94:48:1a:04:a8:92:8f:
13:9a:93:e2:07:c4:80:a6:7a:fc:6f:90:27:86:c0:
e7:ef:6e:02:9e:5e:71:05:f5:61:7b:47:ef:e2:d8:
d9:86:d3:55:6c:bc:94:74:a2:94:88:f7:0c:b4:5e:
94:a5:38:ac:af:6a:24:83:ae:d8:70:ec:b3:9b:aa:
81:3f:84:03:51:a9:d9:ca:d1:99:0d:7f:d1:93:d0:
7f:08:06:3f:a9:0b:7c:3e:3e:f5:05:03:25:ff:3c:
2a:a6:42:bc:27:43:8e:5e:a3:10:8f:e2:75:e7:e5:
ea:6c:e3:5a:c9:27:39:ab:e0:2b:bd:42:3b:1a:ad:
ab:19:5a:90:cd:90:a2:02:a7:7f:a6:11:11:a9:15:
22:d6:98:f2:d5:11:9f:d8:62:97:04:7d:33:dc:ae:
df:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:6A:99:FD:1A:A0:71:17:8E:4C:6F:B0:B6:3C:D4:22:D1:AC:78:5A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IWqZ_RqgcReOTG-wtjzUItGseFo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.232.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:53:01:5f:f3:00:12:10:21:61:a8:98:61:70:31:6d:d9:e2:
5b:98:3e:77:36:4d:40:6a:95:b8:50:83:70:53:4a:c0:1a:30:
ef:0a:af:27:45:bd:08:1d:a6:f7:a1:de:52:5a:0c:ed:88:23:
a8:ec:fa:87:f6:d9:c1:71:a8:6b:ad:00:81:1c:00:eb:1f:0c:
dd:01:f8:4f:73:77:a2:20:e0:49:1f:c9:cc:4e:1e:bc:fa:2f:
eb:f9:73:59:1c:ce:43:2d:cb:f6:66:1f:24:2d:b6:f6:04:03:
98:07:2e:49:22:29:8a:81:aa:2b:97:f8:3a:2e:f9:7f:02:80:
5d:f3:d5:80:cd:04:68:7e:47:0b:aa:42:58:43:cd:25:4f:28:
9a:35:8c:be:da:01:9c:58:e7:77:0a:d2:58:5f:39:ee:46:25:
24:0f:ef:d7:3f:14:41:92:93:0c:41:16:db:f8:15:a5:fe:7c:
b0:b9:24:f3:aa:41:6d:5c:40:a7:f9:16:3d:63:d6:7d:b7:fb:
8d:2c:95:35:e4:d0:99:c2:2c:2f:a9:5e:8e:66:f7:42:ff:f7:
b4:6d:1c:fc:7a:66:32:a1:a8:87:d2:e2:16:d6:50:71:93:5c:
5e:ec:17:27:d0:51:61:74:3f:7c:b2:44:f6:3a:6a:3e:c7:cf:
dc:3b:cf:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:21:32 2025 by rpki-client