Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Y5LSp0ox-IVbpowi2fSBho-23E4.roa
File: Y5LSp0ox-IVbpowi2fSBho-23E4.roa (raw, json)
Hash identifier: e6icjilcHseOakfBaNJoNLY0ilK7kS0HBKkeXTs9Jxk=
Subject key identifier: 63:92:D2:A7:4A:31:F8:85:5B:A6:8C:22:D9:F4:81:86:8F:B6:DC:4E
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 21A0
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Y5LSp0ox-IVbpowi2fSBho-23E4.roa
Signing time: Mon 26 Aug 2024 05:33:11 +0000
ROA not before: Mon 26 Aug 2024 05:33:11 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 114.198.160.0/20 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:18:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8608 (0x21a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:33:11 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=6392D2A74A31F8855BA68C22D9F481868FB6DC4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e1:d3:cd:70:5c:4b:92:04:02:4b:d3:eb:bb:
65:a1:9f:e2:da:9d:49:70:ce:7a:ec:70:fd:5f:89:
92:9a:12:dc:73:ea:06:03:9c:14:58:65:1d:05:c6:
d4:c1:52:7f:59:df:d5:fb:12:76:da:e0:69:a9:32:
d5:08:35:e5:56:f7:3b:5e:34:91:d4:af:86:90:e6:
73:f2:3b:af:13:af:6d:6a:ae:86:e3:53:53:75:31:
d0:00:74:c3:79:00:2c:66:49:39:c3:65:04:5e:8a:
8c:86:20:ea:73:f0:38:43:d7:78:e6:3d:c0:b2:df:
82:91:24:e3:d4:f8:01:6d:5f:c4:71:52:82:db:17:
4f:84:b9:a2:de:5b:46:28:df:89:9b:19:ca:95:ab:
5d:f9:e7:8e:39:7c:54:01:a5:81:de:b4:1b:e9:8f:
8c:70:f4:d3:63:d8:1a:41:14:ea:09:3a:fc:09:d5:
cb:ee:bd:6b:64:13:ae:e6:b8:08:f2:12:75:7a:5a:
97:de:db:99:d3:f8:2e:59:ec:a9:49:1b:12:25:af:
de:85:89:56:44:2b:9a:45:56:a6:82:5d:47:1f:f0:
51:93:e0:ed:3e:c6:5e:19:e1:e7:f5:c0:2f:33:be:
09:83:be:a7:54:a3:4d:92:3e:ca:62:9a:fc:63:db:
88:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:92:D2:A7:4A:31:F8:85:5B:A6:8C:22:D9:F4:81:86:8F:B6:DC:4E
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Y5LSp0ox-IVbpowi2fSBho-23E4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.160.0/20
Signature Algorithm: sha256WithRSAEncryption
17:ca:b6:3d:f6:b1:6a:56:e0:71:f2:a0:e5:e5:b8:a2:c9:9d:
ea:00:34:76:46:d6:73:ca:d1:b5:54:30:67:3b:6e:d8:eb:ea:
59:7a:3e:da:a0:23:96:1a:1b:63:b2:c7:c8:7d:ff:cf:7b:ff:
11:75:06:e8:06:aa:7c:c0:9d:03:f6:63:45:3b:80:80:56:2e:
b7:65:1f:1a:24:f4:ee:58:15:9a:5c:41:88:0c:4a:92:a5:45:
d5:de:22:ee:4d:3a:35:7e:bd:0f:dc:48:05:8e:b0:74:5f:9d:
22:b5:18:cf:d3:94:4f:f2:9d:00:d9:2e:fb:2c:1f:e2:b7:5a:
43:69:56:bd:84:ab:74:2f:47:c0:d6:da:07:59:8f:21:41:10:
38:6c:2d:dc:67:4f:f6:d1:08:3b:11:a3:95:13:59:80:7b:ab:
6d:d3:7c:0c:2b:b3:95:e1:87:f6:3d:79:ed:54:65:30:54:55:
46:24:a7:7e:fb:38:be:fb:c9:84:7b:78:ea:2b:ef:13:42:c0:
ad:0a:f5:20:98:dd:c5:ac:ff:8b:ae:19:24:e4:08:f8:43:c7:
44:1e:7c:45:7c:83:71:18:07:ba:fa:a5:ed:31:92:27:0f:52:
9a:ea:11:01:20:6e:52:8f:39:82:eb:bf:d1:83:70:83:7b:37:
9d:be:73:b2
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIaAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw
NTMzMTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYzOTJEMkE3NEEzMUY4
ODU1QkE2OEMyMkQ5RjQ4MTg2OEZCNkRDNEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDt4dPNcFxLkgQCS9Pru2Whn+LanUlwznrscP1fiZKaEtxz6gYD
nBRYZR0FxtTBUn9Z39X7Enba4GmpMtUINeVW9zteNJHUr4aQ5nPyO68Tr21qrobj
U1N1MdAAdMN5ACxmSTnDZQReioyGIOpz8DhD13jmPcCy34KRJOPU+AFtX8RxUoLb
F0+EuaLeW0Yo34mbGcqVq1355445fFQBpYHetBvpj4xw9NNj2BpBFOoJOvwJ1cvu
vWtkE67muAjyEnV6Wpfe25nT+C5Z7KlJGxIlr96FiVZEK5pFVqaCXUcf8FGT4O0+
xl4Z4ef1wC8zvgmDvqdUo02SPspimvxj24h3AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUY5LSp0ox+IVbpowi2fSBho+23E4wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1k1TFNwMG94LUlWYnBvd2ky
ZlNCaG8tMjNFNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBARy
xqAwDQYJKoZIhvcNAQELBQADggEBABfKtj32sWpW4HHyoOXluKLJneoANHZG1nPK
0bVUMGc7btjr6ll6PtqgI5YaG2Oyx8h9/897/xF1BugGqnzAnQP2Y0U7gIBWLrdl
Hxok9O5YFZpcQYgMSpKlRdXeIu5NOjV+vQ/cSAWOsHRfnSK1GM/TlE/ynQDZLvss
H+K3WkNpVr2Eq3QvR8DW2gdZjyFBEDhsLdxnT/bRCDsRo5UTWYB7q23TfAwrs5Xh
h/Y9ee1UZTBUVUYkp377OL77yYR7eOor7xNCwK0K9SCY3cWs/4uuGSTkCPhDx0Qe
fEV8g3EYB7r6pe0xkicPUprqEQEgblKPOYLrv9GDcIN7N52+c7I=
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:45:40 2025 by rpki-client