Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KqdAIGt-N-xLsIeR0I7sbbt0Z5I.roa
File: KqdAIGt-N-xLsIeR0I7sbbt0Z5I.roa (raw, json)
Hash identifier: nHATse+8oBAHkVH+JU7edr5p3/Gjtlvf+NP3jYHNmLc=
Subject key identifier: 2A:A7:40:20:6B:7E:37:EC:4B:B0:87:91:D0:8E:EC:6D:BB:74:67:92
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 226B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KqdAIGt-N-xLsIeR0I7sbbt0Z5I.roa
Signing time: Mon 26 Aug 2024 05:33:59 +0000
ROA not before: Mon 26 Aug 2024 05:33:59 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 122.254.40.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:18:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8811 (0x226b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:33:59 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=2AA740206B7E37EC4BB08791D08EEC6DBB746792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1f:29:3d:c0:ac:ee:fe:1f:37:8f:91:8e:0f:
cb:e6:8c:4c:8e:7c:cd:9d:21:ac:ed:1a:5d:f1:aa:
f4:63:1a:47:7c:bc:7e:77:84:32:02:84:16:db:aa:
1c:52:b3:05:56:69:4d:af:ff:1f:8f:ca:09:e2:4a:
fa:08:01:32:88:37:25:dd:a1:45:8a:63:25:63:f9:
6f:b8:9c:c9:7f:85:2e:55:b8:ea:93:0a:d5:71:86:
16:a0:20:8b:43:a0:c3:be:52:8e:44:57:60:fd:17:
36:9a:9c:63:65:bc:f7:4f:70:8f:f1:c3:9a:94:67:
c2:09:52:ed:5a:6f:d7:b3:c7:1a:a9:25:c2:ae:6e:
8d:a1:49:13:80:66:76:eb:db:83:0a:fc:c1:69:22:
4d:9c:f1:38:f2:17:17:51:0e:6c:92:01:e1:ff:4a:
82:0d:1d:c2:27:8f:6c:8f:11:0a:00:5b:18:f1:3f:
93:68:88:0a:e6:bd:d6:ea:2c:78:88:60:3c:dd:89:
25:23:cd:f2:a8:0d:3b:a2:b8:60:40:c7:85:52:b9:
d7:29:47:b5:dd:da:92:37:32:c7:30:94:48:9f:8f:
5e:60:f3:db:07:51:4b:17:22:b2:63:9c:36:4c:8e:
ee:13:19:fd:d5:b5:57:36:82:7c:1c:84:0d:85:b8:
48:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A7:40:20:6B:7E:37:EC:4B:B0:87:91:D0:8E:EC:6D:BB:74:67:92
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KqdAIGt-N-xLsIeR0I7sbbt0Z5I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.40.0/21
Signature Algorithm: sha256WithRSAEncryption
84:c3:14:0c:3d:2d:01:ec:ce:74:20:7f:ef:1f:92:ab:2f:a6:
01:9e:cf:0b:87:49:0e:ec:8e:f7:4a:25:23:11:14:a1:b9:2b:
b7:3c:e3:bc:37:42:69:b3:51:3c:5c:2d:cb:12:bc:65:38:06:
82:43:62:f5:ad:02:92:df:94:2a:f8:8e:12:08:27:8d:59:36:
a2:ea:c6:88:19:da:6f:95:99:00:0f:44:a7:49:b6:db:17:7c:
21:28:da:b4:a3:65:90:e9:d5:17:28:50:a0:46:d4:41:1a:6d:
aa:0c:fd:a8:19:b7:f8:09:ff:68:6c:e7:06:f2:5e:33:9d:ff:
86:36:d0:c2:33:a2:4e:4c:2a:c9:b1:aa:d0:ca:12:af:03:91:
da:11:83:b6:68:fe:8c:4d:02:0c:74:cb:e4:31:5b:60:31:56:
10:2a:1a:bf:22:48:36:ef:2e:35:33:ca:bb:ba:0d:64:07:f6:
97:5d:87:83:d2:53:e1:a4:6e:f2:c1:30:7b:0e:cd:cd:1b:f2:
7b:af:2c:b9:2b:7c:93:e3:1c:d2:5a:a8:b6:02:d4:a1:62:a0:
02:db:9e:62:e6:e2:8f:a8:08:f9:9e:8a:4c:3f:20:f9:f0:4f:
6c:bc:38:b9:17:82:61:21:d8:7f:de:57:54:38:c1:fb:20:c5:
9c:2f:a4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:34:39 2025 by rpki-client