Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/O_MmK4UEFWLRphk5o42AsOAQJm0.roa
File: O_MmK4UEFWLRphk5o42AsOAQJm0.roa (raw, json)
Hash identifier: HIHpvQ34K7ALxGNoPpRWllUvtVKDBwd2Zgj2dGlIf2s=
Subject key identifier: 3B:F3:26:2B:85:04:15:62:D1:A6:19:39:A3:8D:80:B0:E0:10:26:6D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 22C5
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/O_MmK4UEFWLRphk5o42AsOAQJm0.roa
Signing time: Mon 26 Aug 2024 05:34:21 +0000
ROA not before: Mon 26 Aug 2024 05:34:21 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24163
IP address blocks: 122.100.112.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:18:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8901 (0x22c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:34:21 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=3BF3262B85041562D1A61939A38D80B0E010266D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8c:82:f0:0c:12:f6:21:b5:90:0c:3a:6f:85:
61:2f:45:c9:8b:f6:f2:58:4d:f5:0e:93:a0:6b:ce:
13:6f:58:3f:33:ee:d6:75:35:2a:fe:7d:4d:df:ed:
12:a7:2d:91:0b:73:c8:79:83:02:05:a2:92:92:6b:
89:31:fa:d0:a1:39:8a:bc:17:3f:25:dd:07:1e:24:
2c:c2:92:ad:f4:ee:31:5a:90:28:a4:6b:2f:7e:94:
c9:86:ad:0d:e8:6e:70:65:b0:e6:9e:8a:fb:41:ed:
4a:50:bb:bd:ad:49:6e:6b:c5:20:7f:f6:6a:84:3a:
f3:b1:53:1c:50:f8:a6:aa:5e:58:e9:a2:eb:42:ec:
12:83:99:c4:af:69:47:bb:84:7c:23:74:fc:fc:32:
d6:d3:b9:15:02:d9:22:63:47:07:d1:3c:02:42:d0:
d0:09:1b:5c:f0:bd:a4:c1:57:6a:23:88:d2:4f:33:
fb:06:4f:67:d2:2a:64:5c:cb:bf:5b:51:f2:1e:1e:
93:66:cc:4c:ec:bb:55:9b:b9:64:d4:02:59:2c:f3:
86:c5:b8:0c:76:4f:a8:e5:e8:8d:3b:1b:f2:e1:0d:
57:34:d2:7a:d7:4a:1a:82:89:2a:06:59:81:91:75:
94:4b:93:42:a9:3b:ad:70:10:a2:ac:b1:71:9b:ea:
61:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F3:26:2B:85:04:15:62:D1:A6:19:39:A3:8D:80:B0:E0:10:26:6D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/O_MmK4UEFWLRphk5o42AsOAQJm0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.112.0/21
Signature Algorithm: sha256WithRSAEncryption
3a:14:4e:b8:d6:7b:29:77:40:e7:7c:f4:14:19:b7:95:3a:6d:
78:c0:b0:be:1b:dc:c4:fe:0c:e1:5f:7c:48:60:d7:61:20:63:
51:29:5e:a3:4f:7b:f0:16:7c:8a:f7:1f:ee:d3:96:4b:2c:6b:
97:46:cf:62:c5:b5:79:a7:0d:9c:b6:2b:1f:55:95:11:69:bd:
69:a8:00:6f:1d:fa:c1:cc:a0:dd:82:b3:5f:78:13:88:1e:46:
1d:34:1f:e4:f4:91:46:9f:8c:d9:75:02:52:c0:5b:d8:5f:00:
6d:20:2a:de:2e:25:5c:75:9a:00:3c:09:78:98:df:ba:f0:c7:
49:5a:72:e6:4a:d1:3e:b5:9c:bf:e8:b5:2f:17:fe:7f:24:1c:
8d:8c:d1:d2:42:09:64:a8:df:9a:a0:c0:62:f0:34:e8:6e:b1:
ed:5e:2e:25:12:51:bd:01:a0:58:85:22:e0:b9:c6:45:8e:2d:
e2:a7:1a:61:ff:84:8a:d9:e8:36:5e:7f:24:6a:55:e1:36:c4:
48:8a:97:de:f1:68:44:d9:00:64:45:57:6d:c2:e0:ac:29:3d:
bf:a2:3c:36:46:5f:a6:e8:be:3a:b4:28:b8:1c:59:d8:68:95:
2a:62:4a:98:8d:60:9c:87:7e:7c:00:b6:50:9a:73:68:e6:9e:
d3:a8:4f:9f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIsUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw
NTM0MjFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNCRjMyNjJCODUwNDE1
NjJEMUE2MTkzOUEzOEQ4MEIwRTAxMDI2NkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZjILwDBL2IbWQDDpvhWEvRcmL9vJYTfUOk6BrzhNvWD8z7tZ1
NSr+fU3f7RKnLZELc8h5gwIFopKSa4kx+tChOYq8Fz8l3QceJCzCkq307jFakCik
ay9+lMmGrQ3obnBlsOaeivtB7UpQu72tSW5rxSB/9mqEOvOxUxxQ+KaqXljpoutC
7BKDmcSvaUe7hHwjdPz8MtbTuRUC2SJjRwfRPAJC0NAJG1zwvaTBV2ojiNJPM/sG
T2fSKmRcy79bUfIeHpNmzEzsu1WbuWTUAlks84bFuAx2T6jl6I07G/LhDVc00nrX
ShqCiSoGWYGRdZRLk0KpO61wEKKssXGb6mH7AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUO/MmK4UEFWLRphk5o42AsOAQJm0wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL09fTW1LNFVFRldMUnBoazVv
NDJBc09BUUptMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN6
ZHAwDQYJKoZIhvcNAQELBQADggEBADoUTrjWeyl3QOd89BQZt5U6bXjAsL4b3MT+
DOFffEhg12EgY1EpXqNPe/AWfIr3H+7Tlkssa5dGz2LFtXmnDZy2Kx9VlRFpvWmo
AG8d+sHMoN2Cs194E4geRh00H+T0kUafjNl1AlLAW9hfAG0gKt4uJVx1mgA8CXiY
37rwx0lacuZK0T61nL/otS8X/n8kHI2M0dJCCWSo35qgwGLwNOhuse1eLiUSUb0B
oFiFIuC5xkWOLeKnGmH/hIrZ6DZefyRqVeE2xEiKl97xaETZAGRFV23C4KwpPb+i
PDZGX6bovjq0KLgcWdholSpiSpiNYJyHfnwAtlCac2jmntOoT58=
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:20:36 2025 by rpki-client