Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SW88OM2lC7q2Ma5SFS3g-Nk9_wE.roa
File: SW88OM2lC7q2Ma5SFS3g-Nk9_wE.roa (raw, json)
Hash identifier: NMGm3bloQkshsqOFhhW1ffFxOxiV+ZAyIhXIeI/T/Dw=
Subject key identifier: 49:6F:3C:38:CD:A5:0B:BA:B6:31:AE:52:15:2D:E0:F8:D9:3D:FF:01
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 2279
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SW88OM2lC7q2Ma5SFS3g-Nk9_wE.roa
Signing time: Mon 26 Aug 2024 05:34:02 +0000
ROA not before: Mon 26 Aug 2024 05:34:02 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24163
IP address blocks: 211.76.72.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8825 (0x2279)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:34:02 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=496F3C38CDA50BBAB631AE52152DE0F8D93DFF01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a2:1e:1f:ed:8b:cb:0f:63:50:ff:46:a8:29:
65:60:cf:73:a3:03:38:11:39:3e:e0:88:37:40:31:
1e:9b:36:96:cf:f6:f2:68:46:31:c1:16:03:2d:b0:
43:db:13:96:5f:5a:8e:3e:8d:e6:85:76:de:22:03:
0c:09:c8:9e:bc:fd:2f:81:bf:8b:41:c2:c4:c3:c8:
38:88:33:1c:56:ce:bd:a5:1e:0f:8b:d6:37:68:21:
42:e2:93:ab:07:3d:49:6b:cc:5b:d6:4b:d6:da:7a:
2e:65:e3:01:4e:f5:d9:5f:aa:bf:b1:be:21:b7:c6:
d5:c0:1b:e3:ce:e9:97:39:a9:ae:c2:29:0b:69:6b:
f9:17:37:52:f8:7d:aa:46:d7:34:ca:0d:d8:e3:23:
8c:dc:7b:ad:89:e5:cd:43:59:bf:04:10:06:87:1c:
f5:9f:20:f0:79:7d:d2:8d:13:26:91:80:c7:9b:c4:
0a:25:c6:36:4c:7b:27:33:44:de:1b:01:7b:d7:d7:
95:cc:49:13:32:47:ff:1c:4c:55:6d:bc:14:c8:18:
45:0e:27:aa:11:18:fa:0e:6c:d0:eb:9e:74:6e:c1:
20:a9:0f:59:37:e7:8d:41:37:38:99:26:5f:ed:46:
a1:20:8b:3b:7b:c6:92:c9:d9:fe:44:af:a7:99:be:
34:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6F:3C:38:CD:A5:0B:BA:B6:31:AE:52:15:2D:E0:F8:D9:3D:FF:01
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SW88OM2lC7q2Ma5SFS3g-Nk9_wE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.72.0/22
Signature Algorithm: sha256WithRSAEncryption
34:0f:bd:e8:80:48:98:60:83:46:f0:c0:e7:70:cc:c0:ae:7b:
33:9e:ac:72:25:80:91:c9:80:ac:4d:62:55:19:c3:ae:34:c5:
fb:33:a7:10:bd:07:70:e6:00:e5:7f:14:14:54:75:a0:71:a6:
1e:04:7b:df:a7:fe:9c:56:78:55:37:29:0d:db:be:b5:cd:55:
96:00:cb:4c:47:52:28:e2:36:89:31:4a:92:fd:17:95:8f:58:
94:58:b9:3e:f6:63:7a:7c:d0:37:cc:3c:7f:8c:4b:a9:29:15:
e8:9a:ce:97:04:e4:d0:c0:64:1d:f6:ee:58:63:51:17:82:59:
b4:5f:e7:9d:0a:74:15:77:79:8d:d2:4e:09:82:87:90:d3:1a:
cb:77:eb:e0:8a:e3:2a:28:17:9f:23:83:0b:7a:a4:82:ca:d9:
bc:54:f1:0e:f7:13:8e:38:48:97:e2:3d:3a:93:95:f4:3b:1b:
b6:33:31:45:49:6b:41:49:b2:8a:28:b4:31:59:e7:29:b7:c5:
d8:e3:58:31:f8:2b:3c:a1:72:b0:b4:6d:b1:06:9b:8a:c1:87:
d9:2c:70:7d:47:8b:68:4d:a7:ce:92:ee:ef:f9:91:d2:dd:e6:
b1:9c:05:92:ab:39:ae:c1:c4:c3:0d:d5:e9:2e:62:e5:09:4d:
8c:51:4b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:34:26 2025 by rpki-client