Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VUGBkq959Ms8PQ0cSRqaqe_3CBQ.roa
File: VUGBkq959Ms8PQ0cSRqaqe_3CBQ.roa (raw, json)
Hash identifier: lQlB3bM7v+T/pTRiYLiuUiAB7MYj0eKn7vsYjBUWPOg=
Subject key identifier: 55:41:81:92:AF:79:F4:CB:3C:3D:0D:1C:49:1A:9A:A9:EF:F7:08:14
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 2224
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VUGBkq959Ms8PQ0cSRqaqe_3CBQ.roa
Signing time: Mon 26 Aug 2024 05:33:43 +0000
ROA not before: Mon 26 Aug 2024 05:33:43 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 211.76.64.0/20 maxlen: 21
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:17:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8740 (0x2224)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:33:43 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=55418192AF79F4CB3C3D0D1C491A9AA9EFF70814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:eb:f7:fe:7f:17:42:f3:24:f3:b8:95:af:e4:
61:73:64:27:1b:77:1c:ab:15:42:96:d5:2e:57:20:
c9:cb:b5:3b:07:fc:b7:21:c1:33:51:83:c3:33:4f:
12:99:79:05:34:fe:2e:07:bc:41:dd:26:38:12:68:
27:92:26:a1:1d:2e:b4:eb:c7:04:db:c1:73:e5:cf:
4f:0a:d4:b9:7b:4a:6c:0e:7e:2c:a6:09:c6:e3:36:
45:ad:1d:27:7b:da:b1:0d:66:ba:9f:d5:1b:f8:08:
e4:eb:40:78:ce:55:4f:07:0a:3e:31:16:af:0e:db:
c2:d9:f8:0c:31:b8:a3:8e:be:00:89:a7:c4:ec:7c:
ed:ab:a6:5e:e6:af:b1:c5:c5:3d:a3:53:26:cc:cc:
0d:f8:5d:ce:c4:50:e2:f4:92:33:02:bb:38:e7:c4:
06:e8:59:a6:35:0c:e5:c2:88:9e:8e:d7:e2:f5:f9:
82:c5:32:0c:68:7f:94:66:b2:0c:db:b4:87:b6:ec:
48:ef:dc:eb:e4:4b:76:3c:c4:ea:56:b3:70:05:4a:
dd:3e:18:4a:8b:2c:e3:89:2b:91:7f:53:7b:0e:d1:
15:c4:48:3e:d3:9a:5b:2a:9b:f8:f4:ba:0e:fd:a0:
fc:5a:ed:88:11:6a:81:6d:6e:48:be:9c:47:30:d8:
b2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:41:81:92:AF:79:F4:CB:3C:3D:0D:1C:49:1A:9A:A9:EF:F7:08:14
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VUGBkq959Ms8PQ0cSRqaqe_3CBQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.64.0/20
Signature Algorithm: sha256WithRSAEncryption
37:6a:fa:5b:ac:66:66:ed:c6:68:ea:70:59:7c:af:48:d4:d6:
02:07:43:12:02:6c:2c:dc:5d:0d:c9:8a:d7:c1:f7:40:57:e4:
26:68:cd:ec:87:d4:1e:22:02:fe:fd:b9:0d:09:7e:92:12:1a:
b4:51:36:98:d2:b2:f1:2f:ee:36:1c:56:7a:3e:1d:f0:4b:00:
48:66:64:97:09:1c:f3:bb:f9:2a:f1:97:11:d6:f2:80:83:67:
15:99:37:ee:24:d9:94:20:65:0e:ee:d8:8d:79:a9:5e:9e:ad:
75:c6:5c:f8:c9:1e:fe:fa:21:81:5e:d5:9b:60:7d:36:ce:78:
96:8c:0a:be:4e:be:d5:4f:65:38:56:38:88:c0:91:53:b0:74:
3b:f0:65:82:e3:f3:50:5f:0e:68:8c:4c:ee:5a:90:dd:c9:a5:
61:71:b2:bc:30:a8:d1:6a:14:72:4e:a8:e6:0c:07:46:96:77:
07:4c:ba:7e:ee:c5:ae:f1:23:09:a7:59:cf:b2:d0:ba:05:67:
40:38:df:e6:81:f9:0e:5d:bb:b2:46:95:82:34:a1:47:71:53:
0d:6e:91:58:44:6d:87:93:36:75:c3:51:74:c0:94:6c:a0:40:
e6:f5:9c:3e:4f:4d:ec:cc:69:fa:17:26:42:c6:9a:c3:36:66:
06:42:dd:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:47:24 2025 by rpki-client