Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PTTCScRyznekaBbYfkY-JZLxWl0.roa
File: PTTCScRyznekaBbYfkY-JZLxWl0.roa (raw, json)
Hash identifier: D0N3DYImAihjdsscMvPVoFlZJV84yk7fxVLP1DIXJGg=
Subject key identifier: 3D:34:C2:49:C4:72:CE:77:A4:68:16:D8:7E:46:3E:25:92:F1:5A:5D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 2162
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PTTCScRyznekaBbYfkY-JZLxWl0.roa
Signing time: Mon 26 Aug 2024 05:32:57 +0000
ROA not before: Mon 26 Aug 2024 05:32:57 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24163
IP address blocks: 122.100.104.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:18:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8546 (0x2162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:32:57 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=3D34C249C472CE77A46816D87E463E2592F15A5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d6:0c:7f:60:bd:d0:74:78:84:fd:be:f5:82:
9f:c2:e1:82:c4:a0:ce:d4:20:eb:50:73:84:c4:88:
ae:73:80:37:87:66:9e:9b:8f:20:d8:39:2b:28:b4:
22:31:de:2a:83:1c:e4:34:af:dc:2e:72:45:5d:d8:
18:09:04:0a:8a:54:dd:37:e2:81:8f:5b:96:3f:50:
0d:fc:09:7d:cd:a7:95:31:79:86:3e:77:e1:c2:08:
7c:2e:03:e1:89:5f:ce:3d:6d:f0:f2:d5:02:3e:81:
f3:85:58:34:77:a5:8b:a8:68:06:51:0b:10:b1:8f:
18:35:ae:5d:4c:3a:b0:73:14:0a:44:ca:9f:15:59:
05:2e:e8:f3:60:22:5d:9c:e1:42:b8:df:7c:57:03:
4f:b1:ad:d0:5a:5c:0b:84:11:29:f8:fd:60:7b:6e:
14:79:08:aa:48:1e:1e:84:e7:3a:e2:8f:ee:23:6c:
3c:d5:11:fb:9d:0b:1c:a8:99:7c:b5:f7:46:27:7d:
cd:cf:e0:3a:9a:b2:aa:c7:c7:d8:c7:22:6c:da:b8:
38:01:87:6a:a9:42:73:8a:f4:d2:bc:68:29:af:09:
e1:4d:7a:37:b9:fb:7a:b5:50:66:56:ef:29:77:a4:
d6:53:ac:4d:d4:24:4f:ec:21:31:21:72:fa:98:d5:
9c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:34:C2:49:C4:72:CE:77:A4:68:16:D8:7E:46:3E:25:92:F1:5A:5D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PTTCScRyznekaBbYfkY-JZLxWl0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.104.0/21
Signature Algorithm: sha256WithRSAEncryption
2a:94:c9:0e:d9:8a:19:6f:c4:fd:5a:0a:5e:28:05:65:ca:91:
c4:b0:64:c9:fc:91:59:28:98:86:7b:d9:fb:59:dd:ff:96:09:
db:4a:98:75:be:f3:bc:91:6f:48:58:ce:19:e8:c6:c0:34:74:
85:95:66:50:60:d4:f9:9b:c9:8e:ff:63:9f:d6:57:49:74:c5:
73:42:51:26:f0:f8:93:61:04:af:3b:f5:c7:61:c7:c5:7b:0a:
02:a5:d1:d3:69:24:e7:ee:f3:cd:93:75:c6:52:16:3e:7b:7f:
fd:2b:e9:71:53:4b:f1:f6:ab:4a:0b:2a:74:76:66:c0:02:3c:
d6:5e:16:54:b8:2f:23:c6:6f:b4:d9:e6:14:6b:bf:e9:37:de:
85:ef:b6:d7:b2:8f:73:5d:74:b2:7a:ed:9f:02:fb:7c:c5:ae:
dc:8d:3f:12:02:0b:2b:20:ca:f1:bb:40:8a:a5:fa:bd:e6:ea:
1d:2d:ff:ef:16:08:9f:2b:27:52:ae:72:01:ed:12:1f:84:24:
42:56:e0:6c:69:01:07:80:53:a2:d3:1a:6c:ed:e1:30:5f:ff:
0e:6f:a5:76:77:3d:ef:77:fd:f3:49:09:6a:9e:1e:3e:7f:80:
2d:29:54:d0:bc:6b:8d:c3:f2:a2:64:ef:a8:b7:06:f7:1a:30:
3b:cc:c9:b2
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIWIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw
NTMyNTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNEMzRDMjQ5QzQ3MkNF
NzdBNDY4MTZEODdFNDYzRTI1OTJGMTVBNUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCw1gx/YL3QdHiE/b71gp/C4YLEoM7UIOtQc4TEiK5zgDeHZp6b
jyDYOSsotCIx3iqDHOQ0r9wuckVd2BgJBAqKVN034oGPW5Y/UA38CX3Np5UxeYY+
d+HCCHwuA+GJX849bfDy1QI+gfOFWDR3pYuoaAZRCxCxjxg1rl1MOrBzFApEyp8V
WQUu6PNgIl2c4UK433xXA0+xrdBaXAuEESn4/WB7bhR5CKpIHh6E5zrij+4jbDzV
EfudCxyomXy190Ynfc3P4DqasqrHx9jHImzauDgBh2qpQnOK9NK8aCmvCeFNeje5
+3q1UGZW7yl3pNZTrE3UJE/sITEhcvqY1ZytAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUPTTCScRyznekaBbYfkY+JZLxWl0wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1BUVENTY1J5em5la2FCYllm
a1ktSlpMeFdsMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN6
ZGgwDQYJKoZIhvcNAQELBQADggEBACqUyQ7ZihlvxP1aCl4oBWXKkcSwZMn8kVko
mIZ72ftZ3f+WCdtKmHW+87yRb0hYzhnoxsA0dIWVZlBg1PmbyY7/Y5/WV0l0xXNC
USbw+JNhBK879cdhx8V7CgKl0dNpJOfu882TdcZSFj57f/0r6XFTS/H2q0oLKnR2
ZsACPNZeFlS4LyPGb7TZ5hRrv+k33oXvtteyj3NddLJ67Z8C+3zFrtyNPxICCysg
yvG7QIql+r3m6h0t/+8WCJ8rJ1KucgHtEh+EJEJW4GxpAQeAU6LTGmzt4TBf/w5v
pXZ3Pe93/fNJCWqeHj5/gC0pVNC8a43D8qJk76i3BvcaMDvMybI=
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:39:22 2025 by rpki-client