Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Y_FE1oQn13kde2Yu7h9qYEA2zaM.roa
File: Y_FE1oQn13kde2Yu7h9qYEA2zaM.roa (raw, json)
Hash identifier: xgiFuF204sMwXOLVehvAsqvAVatKJmqk8+ia+Lr5jTE=
Subject key identifier: 63:F1:44:D6:84:27:D7:79:1D:7B:66:2E:EE:1F:6A:60:40:36:CD:A3
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 219C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Y_FE1oQn13kde2Yu7h9qYEA2zaM.roa
Signing time: Mon 26 Aug 2024 05:33:10 +0000
ROA not before: Mon 26 Aug 2024 05:33:10 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 61.61.208.0/20 maxlen: 21
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:18:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8604 (0x219c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:33:10 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=63F144D68427D7791D7B662EEE1F6A604036CDA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7f:85:4e:94:d3:a0:73:d3:aa:5a:35:8a:fd:
1f:64:75:39:1b:5c:72:9c:90:85:ec:a4:26:4b:27:
9b:21:09:45:08:ba:67:be:46:d4:a6:6a:ab:ca:8c:
2a:b9:1d:22:3e:c8:02:d8:f9:f8:2a:bb:d0:25:91:
27:88:83:76:ff:97:11:8a:3a:28:ff:2a:b2:a8:04:
23:0f:8b:ca:90:e0:8e:27:26:2d:e8:3d:a6:21:08:
75:98:19:b5:a5:b6:f8:c1:a8:9d:fa:9b:00:0b:76:
50:a5:c4:90:9d:26:ba:01:6c:6d:46:93:c5:5e:f5:
7b:39:70:79:5f:25:3c:f2:ca:e5:86:1f:42:dc:e4:
22:91:c7:7d:f8:79:85:9e:41:78:d3:ee:a1:72:b4:
b5:ad:f7:c2:b3:0f:84:5d:11:28:21:77:d9:2c:65:
38:e0:c7:5e:46:89:f5:20:6c:16:f3:c0:c8:ca:0b:
e1:75:aa:c0:cd:15:03:e6:28:d1:b4:cc:b7:98:a5:
db:11:44:75:be:e8:ee:ea:ee:21:15:c4:49:2a:dc:
9c:70:3f:87:bb:57:74:99:ab:77:75:1a:9a:e0:03:
a3:4f:66:08:34:96:e3:f4:7b:76:4a:15:11:82:f0:
ab:b9:19:eb:c9:c5:3e:af:02:c8:3a:d7:eb:da:5e:
5f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F1:44:D6:84:27:D7:79:1D:7B:66:2E:EE:1F:6A:60:40:36:CD:A3
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Y_FE1oQn13kde2Yu7h9qYEA2zaM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.208.0/20
Signature Algorithm: sha256WithRSAEncryption
50:db:36:4f:61:e8:e9:87:8b:cd:16:2f:e3:d6:5b:f7:91:93:
7c:5f:07:80:70:9e:f3:0a:c4:7e:75:3a:1d:8f:86:e0:ac:4f:
a8:1b:b4:2c:ee:c8:2f:50:b3:26:8c:42:cb:0c:18:84:4f:0b:
32:bb:31:ae:a0:9e:81:bd:96:37:4d:83:38:39:73:d8:ef:11:
7d:54:14:2a:cd:75:ba:f7:1e:31:2b:f8:89:ff:18:94:e4:dd:
60:6a:d4:e9:eb:02:27:df:c7:3e:d2:da:a0:df:01:03:59:81:
65:36:45:41:03:df:a5:48:e7:58:4d:8a:ff:5a:b1:00:e4:f1:
4a:23:7e:56:c2:37:62:08:89:6a:aa:6a:20:10:33:cb:1c:40:
43:47:94:01:ac:65:d1:55:03:fa:c9:6d:84:d2:9f:82:96:b4:
94:89:0e:bf:34:91:b5:1c:ae:0d:14:6d:99:55:a4:cf:55:3c:
a3:95:70:82:dc:e0:2c:37:0f:d6:f8:cb:da:bf:62:b5:88:e7:
05:b7:eb:82:42:01:36:2f:3d:47:34:bd:f4:2b:ba:88:13:06:
11:27:f4:34:75:2b:a1:a7:e4:65:7b:fb:d7:29:1e:b8:15:1b:
1d:af:a1:8d:6b:b9:b6:13:2e:e1:51:9a:69:d7:9b:6e:a4:05:
a9:d2:30:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:33:39 2025 by rpki-client