Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WoZfXwoT8AQ47zWn-4MaOPh_xb0.roa
File: WoZfXwoT8AQ47zWn-4MaOPh_xb0.roa (raw, json)
Hash identifier: TOhQiKL8MArkFJykercgvxBZmIJs6JuXDguPp3+1urM=
Subject key identifier: 5A:86:5F:5F:0A:13:F0:04:38:EF:35:A7:FB:83:1A:38:F8:7F:C5:BD
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 21AF
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WoZfXwoT8AQ47zWn-4MaOPh_xb0.roa
Signing time: Mon 26 Aug 2024 05:33:14 +0000
ROA not before: Mon 26 Aug 2024 05:33:14 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 49.159.48.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:18:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8623 (0x21af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:33:14 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5A865F5F0A13F00438EF35A7FB831A38F87FC5BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c4:62:be:33:b8:53:5a:61:c6:ca:8b:31:69:
4f:de:ab:5c:85:ce:e1:b1:2d:02:dc:5b:bf:1a:4c:
ba:cf:a3:45:a5:8f:a8:31:53:b3:a5:0d:91:f6:cb:
1c:50:39:ce:85:d7:36:54:41:2e:a5:7d:3d:56:42:
4e:d5:57:17:58:77:d0:cc:df:60:16:b4:a3:50:5f:
b9:23:30:50:96:70:68:fb:bb:b8:bf:fe:2a:03:96:
93:67:d5:11:ed:7d:c6:12:15:ae:c7:fd:76:75:a1:
08:10:09:be:a8:96:72:7a:9f:4e:c4:70:91:ca:fe:
c7:bc:79:6d:32:15:f0:a6:78:03:da:63:a7:2a:ec:
f0:6e:da:e6:52:c5:20:3f:13:c1:0b:93:0f:c5:02:
73:17:4f:66:00:0c:36:99:b7:a4:13:3c:0a:b2:6b:
a7:7b:8d:82:19:3f:34:48:b8:f2:b6:c5:c5:61:79:
dd:7b:88:15:f6:08:c5:28:30:ec:79:3f:27:85:dd:
47:e2:d3:31:fb:3d:17:14:25:04:97:cf:54:77:e7:
81:58:bc:e6:5f:6d:ff:fe:3e:87:69:4b:a9:c9:5e:
25:a4:25:d6:f6:e5:3b:eb:c6:24:a9:07:85:25:bb:
b5:ac:ef:93:cc:62:9c:ad:d0:56:f0:7a:36:30:c6:
d4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:86:5F:5F:0A:13:F0:04:38:EF:35:A7:FB:83:1A:38:F8:7F:C5:BD
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WoZfXwoT8AQ47zWn-4MaOPh_xb0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.48.0/21
Signature Algorithm: sha256WithRSAEncryption
6f:c1:9a:b0:43:18:2d:fc:9c:59:bc:71:ce:26:db:67:a3:59:
39:5f:3c:8e:a0:07:bd:4c:49:a0:cb:90:b1:83:79:d6:b1:95:
4d:31:c5:8b:87:39:54:c9:13:1a:fc:1a:08:37:3d:15:84:41:
4c:58:a4:ef:db:ff:43:17:46:58:0e:d8:43:de:64:31:6a:d4:
4d:c7:8a:37:82:12:14:51:d0:eb:78:45:4d:1b:63:76:7b:d0:
90:fb:90:64:49:b9:b3:ef:ea:9a:16:f4:82:33:2c:93:fe:dc:
22:ac:2e:28:a0:a0:df:a3:f9:58:93:78:60:b9:52:d6:01:bc:
82:a5:63:04:db:91:5a:73:0a:0f:d8:87:b4:5f:aa:be:4e:8a:
f8:9a:a1:6b:f4:da:31:34:83:4a:78:93:f6:52:9c:82:02:43:
c1:15:46:7a:26:b4:83:4e:dc:1b:18:17:32:1a:fb:ad:3c:3d:
d7:c9:1f:97:59:78:3e:15:36:d4:8a:46:8f:59:61:79:4c:fd:
43:d6:6a:76:d0:67:fa:92:e6:05:ad:7d:36:ef:d8:92:8a:7e:
91:88:6a:0d:0e:2e:83:d9:d3:27:8c:28:dc:a0:e3:71:80:ea:
fb:d7:e5:b4:08:4a:ff:76:54:3f:5d:1c:35:74:a0:b4:82:b2:
ce:21:e4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:04:01 2025 by rpki-client