Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JgoKLz0eJYo1I1_E7S708yx5LJU.roa
File: JgoKLz0eJYo1I1_E7S708yx5LJU.roa (raw, json)
Hash identifier: d++cGJ5N1HMWnK9+SaAv5k9k0cEle3LjI1tPvHc7Mx0=
Subject key identifier: 26:0A:0A:2F:3D:1E:25:8A:35:23:5F:C4:ED:2E:F4:F3:2C:79:2C:95
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 227B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JgoKLz0eJYo1I1_E7S708yx5LJU.roa
Signing time: Mon 26 Aug 2024 05:34:03 +0000
ROA not before: Mon 26 Aug 2024 05:34:03 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24165
IP address blocks: 49.159.252.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8827 (0x227b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:34:03 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=260A0A2F3D1E258A35235FC4ED2EF4F32C792C95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c8:7e:c6:5e:a5:44:0d:07:de:a9:4c:be:98:
4b:ed:34:5d:f7:4e:b7:13:c4:ca:be:bb:06:21:fb:
f3:d4:d7:12:c0:91:0a:3c:93:14:d5:68:d4:9a:4e:
79:bf:e7:5f:dc:c0:6d:f3:e0:3b:cc:04:e8:fe:4f:
f9:cb:6a:6e:cd:28:34:ee:26:97:85:d0:32:3d:c3:
84:e6:69:3e:49:7a:a0:ed:81:14:6a:52:3f:f0:1b:
d7:3a:8e:41:52:50:36:57:7c:93:de:95:25:1f:5f:
64:92:37:07:fd:c7:9b:57:c0:8c:ac:71:fe:b6:79:
91:20:10:25:da:c5:de:3a:43:9e:4e:de:fd:07:c1:
b9:9d:1b:63:0a:2b:b9:6b:04:06:b4:6d:13:0f:0e:
93:47:86:e9:27:dc:e3:1d:57:14:13:f7:93:52:e4:
a0:c8:fd:06:c8:b2:8a:d9:33:2d:f8:f4:b9:c0:7a:
30:6e:cf:37:38:92:40:ec:92:58:0e:16:21:85:34:
8d:ab:43:f2:6f:a8:6d:bc:4c:d2:c9:f3:ef:1f:62:
15:28:a3:ba:11:37:fc:dc:92:d0:be:cc:60:61:07:
cb:bf:4c:cc:71:52:5a:31:2c:d3:50:97:f4:1a:bb:
4f:aa:a8:e7:21:4d:b9:df:4b:a5:d8:59:ec:ca:6c:
fe:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:0A:0A:2F:3D:1E:25:8A:35:23:5F:C4:ED:2E:F4:F3:2C:79:2C:95
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JgoKLz0eJYo1I1_E7S708yx5LJU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.252.0/22
Signature Algorithm: sha256WithRSAEncryption
84:ec:46:20:c5:2f:7d:58:55:37:12:09:bd:40:36:3b:5e:9f:
e0:8c:f1:7c:e4:30:65:9f:05:73:e6:81:29:88:19:06:5a:28:
54:ab:22:8e:1c:f1:e5:01:99:86:b4:c4:a0:82:e3:4f:31:e4:
8b:90:df:53:21:f8:85:db:ed:d0:70:e3:08:be:a3:b1:36:ee:
6e:59:09:fe:70:83:a4:8d:a7:a1:e9:a2:f4:51:a2:9a:4f:0b:
b9:17:b3:90:72:e6:96:f7:5e:51:60:c5:28:57:f8:e7:79:42:
10:7e:cc:b2:2c:5d:81:37:e5:15:c3:99:66:40:ba:73:64:d2:
d8:c4:02:e7:cc:81:ea:5b:ce:b7:87:eb:8f:6b:bc:39:ed:0d:
93:a3:b5:4d:e3:4d:18:7b:14:e7:b3:97:85:11:bc:3f:58:0e:
e1:71:aa:ee:c6:90:4f:e2:87:5e:e0:93:ab:29:f3:6a:31:57:
bf:4f:ee:db:b0:6d:31:22:df:2e:11:1b:ed:63:85:c7:f4:2b:
a3:fe:f9:4d:0a:30:52:9a:35:0d:14:34:bc:e7:e1:82:23:7a:
f5:c7:e3:51:3b:c9:c3:51:91:ec:16:61:51:dd:5f:ba:8f:de:
5e:0e:4a:a8:72:6e:a5:a5:26:e8:08:59:0e:85:7e:be:c6:a1:
01:e2:42:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:23:50 2025 by rpki-client