Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TKhRwjqwuqf6e3WsDxtDGyrzP1U.roa
File: TKhRwjqwuqf6e3WsDxtDGyrzP1U.roa (raw, json)
Hash identifier: ozD2qAW+5XXQzi4+1WldMkrQwL0U+6XP1ea20wkZVBQ=
Subject key identifier: 4C:A8:51:C2:3A:B0:BA:A7:FA:7B:75:AC:0F:1B:43:1B:2A:F3:3F:55
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 2259
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TKhRwjqwuqf6e3WsDxtDGyrzP1U.roa
Signing time: Mon 26 Aug 2024 05:33:54 +0000
ROA not before: Mon 26 Aug 2024 05:33:54 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 180.218.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:17:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8793 (0x2259)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:33:54 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=4CA851C23AB0BAA7FA7B75AC0F1B431B2AF33F55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:70:c4:63:f7:04:ba:59:e6:04:05:65:9c:da:
e9:62:5b:f9:20:92:45:5f:40:6e:9a:31:b9:d9:36:
e1:0a:b7:46:f7:97:7b:29:a1:80:6f:fd:bf:e8:2d:
b2:33:12:30:24:96:33:8d:0f:0c:97:49:2f:df:3c:
e7:26:a4:79:8e:59:76:98:91:ec:b4:81:d5:a4:ce:
06:bc:34:39:6c:05:07:ca:f0:dc:ba:2d:6d:52:2b:
4c:ee:88:00:c9:13:2c:b8:a3:e0:0a:b5:71:5f:f9:
43:d4:f3:e8:c7:42:a3:19:cb:20:c0:ed:89:13:c3:
69:fd:83:a3:21:69:f0:7b:6d:b0:8d:91:15:eb:81:
71:a6:f4:5b:36:c8:6d:71:96:aa:3d:45:b9:0d:2e:
9a:ff:df:38:9d:d2:8a:e8:2d:a9:b6:7a:3b:c8:4a:
28:71:d9:aa:ea:43:40:a1:13:78:81:ec:a8:1a:03:
7e:5a:3b:e2:e8:e4:be:3e:a9:57:d2:b7:15:eb:9b:
a8:36:9a:0f:91:1d:30:7c:b2:48:a7:6d:59:0c:a7:
d2:1f:07:b3:2d:60:9d:95:7a:62:2f:98:2c:4a:ae:
68:e4:bd:7e:ca:3e:26:a1:d9:95:8c:84:5d:c2:bc:
71:e7:9f:76:8f:5c:8f:81:7c:10:21:59:48:f2:89:
17:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A8:51:C2:3A:B0:BA:A7:FA:7B:75:AC:0F:1B:43:1B:2A:F3:3F:55
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TKhRwjqwuqf6e3WsDxtDGyrzP1U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.133.0/24
Signature Algorithm: sha256WithRSAEncryption
80:29:14:c7:7b:13:f1:0c:ef:94:b8:34:9c:b4:62:6c:f1:aa:
63:07:68:74:8b:0f:99:7a:9a:16:55:25:f4:6f:0c:ea:40:26:
d3:63:39:4c:11:9f:e7:30:95:8c:46:62:29:35:a4:9a:50:fd:
47:2d:37:8c:7e:2c:d6:cd:12:12:59:a6:fd:74:95:11:82:ea:
61:b3:e5:2d:01:96:2b:fe:ed:7b:3b:c3:15:ee:3f:7b:0d:e6:
62:15:d1:19:00:84:34:48:e7:a4:9a:e1:60:f8:69:9a:40:8d:
3a:33:9f:8c:ff:66:8b:2b:ab:76:71:6e:04:f3:02:9d:bc:40:
c2:b6:1b:ba:1c:50:48:36:a4:21:39:08:3a:8e:d7:5e:aa:85:
54:45:c2:83:a3:fa:4b:05:9f:51:7d:07:d8:90:b8:e9:e2:f4:
ab:a2:83:bd:f5:07:44:ce:13:e5:86:c1:18:8a:8c:ee:c8:5f:
f9:10:50:70:86:9a:2f:56:c1:fa:ab:1d:48:67:44:5c:73:46:
d0:3d:79:a7:82:bc:c2:1f:64:25:39:d4:1c:7a:4c:4b:2a:3b:
f5:ba:6f:53:be:e7:91:99:5e:e6:db:3b:e9:fd:4a:27:83:5a:
46:6b:b9:77:ea:eb:f0:e1:49:a7:81:79:05:c5:3e:22:6d:9d:
c8:d5:59:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:38:55 2025 by rpki-client