Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NMhCyjcGPErljsG-xYVVyOWwEB0.roa
File: NMhCyjcGPErljsG-xYVVyOWwEB0.roa (raw, json)
Hash identifier: h506zsLLgXqn0vGmpq23QrKcMu7xRDBsYN25S+YyA7o=
Subject key identifier: 34:C8:42:CA:37:06:3C:4A:E5:8E:C1:BE:C5:85:55:C8:E5:B0:10:1D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 220B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NMhCyjcGPErljsG-xYVVyOWwEB0.roa
Signing time: Mon 26 Aug 2024 05:33:36 +0000
ROA not before: Mon 26 Aug 2024 05:33:36 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24163
IP address blocks: 49.158.200.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:17:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8715 (0x220b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:33:36 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=34C842CA37063C4AE58EC1BEC58555C8E5B0101D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5f:11:e5:7e:ea:fe:e7:90:2a:79:d5:ee:c2:
bd:dc:43:0f:a7:d9:5f:51:30:c9:90:ec:ec:bf:82:
5a:3b:9d:5c:8b:4d:4a:f5:bd:51:7c:3b:3a:80:6c:
df:62:a8:21:8d:dd:dc:7c:82:e7:b1:11:2e:b9:05:
f8:0c:54:92:60:2b:76:bd:a4:52:18:16:7f:46:61:
c2:76:78:54:17:3d:f2:1c:42:80:cd:55:b0:75:54:
fd:03:60:15:53:fc:76:f6:e1:b1:c3:14:21:3b:da:
b3:e9:1b:6b:cb:d0:67:34:2d:c3:24:d9:9b:c5:81:
5e:f3:06:2c:a4:d4:ef:48:c9:2a:78:7f:ca:3a:34:
dd:14:fd:9f:60:a9:f3:59:f5:2b:10:59:e8:35:74:
e1:e7:16:43:ee:b7:a6:0a:f3:0a:5b:e2:aa:77:4a:
65:0c:8a:6a:ec:15:07:5a:17:7a:0e:b3:b7:ee:f2:
71:68:f2:c1:fb:cd:0f:4c:fc:7c:d1:93:f9:6c:a3:
3a:55:98:47:6b:c3:3a:27:66:b8:88:f9:9d:99:65:
d1:58:9e:e4:64:d7:94:f7:18:7e:bb:2f:a4:f2:24:
2b:cb:74:7a:ed:bf:3f:30:08:a2:29:b3:1e:3a:f2:
42:80:f7:4a:71:2a:88:41:11:85:b4:b0:e9:b6:d4:
48:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C8:42:CA:37:06:3C:4A:E5:8E:C1:BE:C5:85:55:C8:E5:B0:10:1D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NMhCyjcGPErljsG-xYVVyOWwEB0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.200.0/21
Signature Algorithm: sha256WithRSAEncryption
9c:e4:05:92:2c:91:33:0f:c0:c7:a9:fb:f8:a6:87:e0:5e:85:
7f:d3:7b:be:26:45:2a:53:cf:cd:68:46:96:91:08:2f:42:08:
aa:ac:4f:56:4a:c0:4b:f3:22:3a:6a:71:95:0f:d9:5f:82:7b:
3a:66:9b:18:61:eb:63:47:dd:03:3e:5e:af:f2:d6:0b:0e:c9:
f7:0a:a0:7c:74:4d:69:60:bb:89:ce:3a:e7:ee:09:91:c8:5b:
3d:51:60:37:bc:1f:31:ae:c7:b6:0d:24:ed:35:88:e3:09:51:
3c:b0:98:a3:c2:0b:98:99:8d:e8:83:78:2f:8b:22:83:cd:8a:
82:fd:59:54:da:6f:52:b9:b0:93:31:d2:54:5f:e9:da:ea:b9:
7a:70:3d:e0:9e:4d:6f:fb:46:da:ef:38:68:24:76:20:24:2e:
b6:65:eb:b4:54:04:cb:5f:a4:b9:d3:7c:2a:41:6e:95:ba:40:
71:0b:97:db:67:2b:23:b4:5c:0c:fc:86:ff:13:24:2f:1e:c4:
6f:1b:aa:ee:27:a6:7c:7d:51:13:65:94:87:35:d2:55:75:09:
89:c7:67:54:fb:c4:6f:dd:6c:27:4a:05:f5:ad:6d:58:34:23:
f6:03:d5:0a:b9:5d:f8:78:8b:3e:82:a6:9a:0e:cb:f5:04:48:
63:34:fc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:24:03 2025 by rpki-client