Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ObG6MYCSjIuKC2fzqBmMzZcsmpY.roa
File: ObG6MYCSjIuKC2fzqBmMzZcsmpY.roa (raw, json)
Hash identifier: mh5Nq9O0SWacxQRzrBWn6gNksvlA4JedvsTdllQhb+U=
Subject key identifier: 39:B1:BA:31:80:92:8C:8B:8A:0B:67:F3:A8:19:8C:CD:97:2C:9A:96
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 2237
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ObG6MYCSjIuKC2fzqBmMzZcsmpY.roa
Signing time: Mon 26 Aug 2024 05:33:47 +0000
ROA not before: Mon 26 Aug 2024 05:33:47 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24165
IP address blocks: 124.6.16.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:17:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8759 (0x2237)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:33:47 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=39B1BA3180928C8B8A0B67F3A8198CCD972C9A96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:49:b5:89:13:ea:f8:7d:e7:c1:96:35:5e:94:
88:d2:aa:69:d9:39:03:ff:75:9c:6f:4d:8c:cf:09:
c4:1e:fc:f7:c3:af:a8:d8:f5:a7:d0:88:e4:b9:a6:
ea:de:db:71:a3:5a:c3:d1:90:bf:99:af:3c:1b:c9:
31:5a:ba:a8:34:24:6e:b3:3c:94:96:79:f9:e8:8e:
f7:89:a0:f8:7b:38:b1:90:0e:95:01:6d:45:62:97:
49:7d:66:b3:9a:4d:04:c2:b2:22:19:ff:6c:d8:0c:
cf:31:96:c1:95:2d:b3:91:b4:9e:8d:56:ba:3f:f2:
9f:e3:99:19:29:92:58:24:fc:1f:df:58:e5:5a:10:
8a:14:c8:10:64:d0:06:d3:fd:8b:12:bb:5d:a7:72:
78:f2:56:07:73:42:c4:44:28:76:bb:92:05:88:3b:
18:68:07:08:e2:33:b3:3b:8b:91:43:3a:d3:5d:0f:
12:ba:0d:01:71:c6:96:d2:b6:82:32:e8:51:55:78:
4b:9d:57:32:1e:8a:4b:7e:43:14:11:be:af:9b:42:
84:5e:13:71:7b:35:eb:80:ee:35:38:82:3d:9b:93:
e7:2e:5e:f2:03:85:58:7f:8c:9b:9d:bc:11:5c:e5:
6c:c3:c2:ba:cf:ea:4e:4c:a4:f2:95:52:3d:49:8b:
8f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B1:BA:31:80:92:8C:8B:8A:0B:67:F3:A8:19:8C:CD:97:2C:9A:96
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ObG6MYCSjIuKC2fzqBmMzZcsmpY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.6.16.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:d4:f2:25:ec:6f:d5:86:24:26:ff:f1:6a:4e:8f:ce:12:ed:
c3:b0:c6:ea:e4:31:6c:0a:05:70:3c:ee:0f:77:56:25:7c:02:
b2:2e:59:b9:f4:af:64:34:80:55:3f:09:ab:e5:75:e8:d3:e0:
73:ed:65:bb:21:8a:f8:27:9b:58:ac:99:8f:0f:4a:be:8a:0b:
b7:29:c8:16:30:1d:d6:f7:f5:17:34:10:0c:a3:24:dc:6a:0b:
2b:26:29:1e:d5:9c:e0:31:74:b9:e1:bb:bc:e4:75:87:e6:09:
60:7a:43:7c:0f:02:c6:11:e2:62:61:43:f7:db:db:66:b9:96:
d7:23:27:01:0a:f7:b8:a6:e6:46:db:30:ed:90:49:41:5b:90:
19:ad:de:87:7f:88:15:d7:fb:a8:8a:dc:55:49:c7:df:e0:69:
43:57:8a:f5:ec:31:d0:bf:ca:d7:92:52:40:c1:86:12:74:22:
de:76:87:f6:af:32:d0:55:16:5b:41:67:f1:41:7f:78:95:e3:
bd:2f:2c:63:5e:0f:1f:ce:37:07:81:6a:40:17:00:09:a0:11:
0a:c1:d6:e1:d5:cf:ce:fc:f6:7a:06:02:3e:7e:6a:b3:a0:c8:
4a:38:8e:b2:0a:0c:76:b6:99:44:f5:ac:cb:c3:29:fe:49:c1:
7a:6f:4d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:33:37 2025 by rpki-client