Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Isot4CKEt8BSqhQlsHREARg0NaE.roa
File: Isot4CKEt8BSqhQlsHREARg0NaE.roa (raw, json)
Hash identifier: dxGAoOoYL9fj+yy11ALiwXB/PD8tmdJG+rDCi1K7cSI=
Subject key identifier: 22:CA:2D:E0:22:84:B7:C0:52:AA:14:25:B0:74:44:01:18:34:35:A1
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 217B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Isot4CKEt8BSqhQlsHREARg0NaE.roa
Signing time: Mon 26 Aug 2024 05:33:02 +0000
ROA not before: Mon 26 Aug 2024 05:33:02 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 124.6.20.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:18:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8571 (0x217b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:33:02 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=22CA2DE02284B7C052AA1425B0744401183435A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:63:54:ae:45:bc:aa:ff:20:5b:46:7a:99:71:
09:36:00:de:90:07:c5:bd:e1:df:c3:b2:75:49:85:
27:24:cb:f7:fb:22:41:87:3d:6c:c8:2f:97:23:b9:
84:72:1c:92:02:dd:4a:35:bd:1e:ff:75:14:c7:a3:
ce:90:35:28:66:df:37:e1:45:e9:10:c0:15:f5:8c:
30:5c:b1:81:6d:21:b3:70:04:8b:eb:1e:39:aa:93:
25:78:fb:fb:47:fe:c6:8c:e0:2b:f0:b3:b1:0a:fb:
a7:ee:61:ae:b0:29:e1:a4:55:0c:07:d9:8d:dd:0c:
fe:2e:f8:51:31:0b:61:7c:6a:eb:69:30:7d:f0:2f:
96:0b:50:bc:0c:ff:2c:70:bd:76:a0:71:99:63:60:
e7:25:08:49:01:f6:43:51:7e:01:45:e6:ab:00:4c:
6f:14:61:9a:07:92:48:41:6b:bf:83:f4:98:a7:de:
5f:4c:d2:91:97:df:49:cd:97:4e:d1:24:99:45:69:
f7:26:ac:89:d3:7c:72:f8:55:ea:40:6e:9b:d1:33:
ea:bb:f5:d4:ac:59:2d:af:5e:82:41:29:b0:ea:41:
83:07:a7:f0:31:d5:59:5a:e9:ed:6f:53:89:03:6b:
79:76:8c:68:07:73:e3:61:5c:52:a5:07:6a:a3:c8:
69:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:CA:2D:E0:22:84:B7:C0:52:AA:14:25:B0:74:44:01:18:34:35:A1
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Isot4CKEt8BSqhQlsHREARg0NaE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.6.20.0/22
Signature Algorithm: sha256WithRSAEncryption
64:95:b8:e0:ad:a4:ce:43:6e:b8:ec:21:a3:80:3d:39:ca:c0:
1a:8c:25:65:92:6a:bb:ae:bc:49:24:78:9f:9c:a5:1a:e6:f9:
cb:82:07:67:de:56:58:fd:ac:a1:8c:0b:93:65:7f:c5:cf:07:
41:6f:e2:76:ac:fb:08:7b:db:8e:5e:65:93:54:91:7b:df:3b:
60:c8:ca:66:29:5f:e6:00:2d:2c:f9:53:bd:83:f0:1d:20:90:
af:41:cc:d3:aa:e4:75:a7:9e:e1:85:45:e1:5c:23:9f:d1:99:
b4:f6:86:d4:fc:dd:14:c3:47:85:2e:03:64:89:36:0f:25:8a:
7f:a4:44:ec:21:ab:8f:c6:57:73:d7:ca:16:6a:71:07:fa:73:
f2:a8:0f:03:3b:49:4c:d1:e7:3c:06:57:3e:e5:24:cb:ab:00:
a8:62:3d:7a:bd:a0:0e:03:08:2e:f5:b4:13:f9:30:b8:ff:d6:
b8:18:c2:46:34:4b:67:ad:d7:de:00:06:89:f2:35:d5:5b:0d:
6a:1a:cf:81:fd:c3:07:eb:7d:76:cd:72:04:c9:dc:b5:2a:6e:
69:26:4b:66:64:04:b0:84:e1:ee:d9:3a:0f:b4:54:ea:a7:d8:
4c:fd:3a:5d:d5:78:fa:47:e1:38:07:3f:1a:ed:ff:8d:da:2a:
58:57:34:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:28:35 2025 by rpki-client