Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/c8nL7pRcuCc56piT12-CbrDjYbQ.roa
File: c8nL7pRcuCc56piT12-CbrDjYbQ.roa (raw, json)
Hash identifier: WqEnL2DW+p4X2uBBT6w1+0nlJ3XavDPMETwm3PavmIY=
Subject key identifier: 73:C9:CB:EE:94:5C:B8:27:39:EA:98:93:D7:6F:82:6E:B0:E3:61:B4
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 22B2
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/c8nL7pRcuCc56piT12-CbrDjYbQ.roa
Signing time: Mon 26 Aug 2024 05:34:16 +0000
ROA not before: Mon 26 Aug 2024 05:34:16 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 49.159.32.0/19 maxlen: 19
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:18:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8882 (0x22b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:34:16 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=73C9CBEE945CB82739EA9893D76F826EB0E361B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d7:11:6c:6e:46:5a:a2:8d:f7:07:8d:63:27:
ff:16:c8:ed:f2:ac:b4:81:02:f9:7c:dc:5d:b6:7d:
87:56:45:29:b4:d1:af:a8:d7:59:cf:d7:ca:bc:67:
7f:2b:aa:1a:63:fd:20:fb:67:90:5a:c3:d8:b9:ae:
9f:5b:ed:8f:d0:d0:c1:22:ec:9a:8d:eb:f6:ae:36:
19:d1:d9:24:ef:8e:19:a5:f2:15:29:89:04:dd:da:
2f:5b:35:38:d8:38:a4:8f:b4:5b:83:68:62:10:88:
ee:f3:dc:96:14:fd:1d:33:b0:36:12:26:7b:3b:ca:
94:1d:e0:86:2b:95:0c:8a:41:4d:fa:11:08:80:ce:
a4:45:74:bd:30:10:43:4a:ca:a4:04:88:18:f2:9b:
3d:e9:36:c8:be:25:42:59:5c:9c:89:10:ae:a0:ed:
44:71:87:74:0d:89:39:ca:32:7a:da:87:3a:c6:29:
88:20:e9:71:a1:e9:ef:83:e8:ad:2c:ee:bd:d4:32:
11:9b:08:d1:89:9d:d4:21:e9:98:79:6f:7c:4f:64:
45:fd:3a:9b:80:57:e8:cf:09:3c:52:2d:f3:f6:dc:
46:80:39:d7:73:9e:35:24:68:97:f5:25:29:e4:5e:
8e:18:0f:89:37:75:75:d5:72:dc:e9:1a:d7:7b:d8:
fc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C9:CB:EE:94:5C:B8:27:39:EA:98:93:D7:6F:82:6E:B0:E3:61:B4
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/c8nL7pRcuCc56piT12-CbrDjYbQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.32.0/19
Signature Algorithm: sha256WithRSAEncryption
5d:e3:fd:f9:ac:8b:15:e5:08:98:46:d4:96:80:89:95:1f:f0:
9d:48:f6:1f:89:0b:ab:1d:c4:38:47:65:89:7a:0c:9d:0b:d8:
c3:77:0f:24:e3:d8:68:67:2c:94:e0:31:90:19:fa:55:40:45:
4f:44:d6:c5:e3:5d:84:77:73:cd:d2:b9:b4:96:9d:5f:37:b4:
9e:b4:d7:ea:e4:0d:14:f7:c0:0b:31:71:06:1f:6f:8d:6c:7d:
28:a2:7b:9c:04:ef:c7:ad:96:e2:53:5a:ad:5e:a7:41:f9:5d:
97:d1:03:37:54:b3:88:fa:2c:13:2d:37:4b:93:5e:28:e9:e3:
fc:40:0b:cf:e3:87:2e:82:69:eb:1c:11:b1:3b:f9:c3:37:fa:
34:56:08:04:8a:98:a9:3b:5d:cd:7a:70:fc:80:25:49:47:86:
36:5b:27:15:39:0e:c7:95:84:2d:eb:23:c2:60:1d:82:b3:44:
a8:ad:98:ac:43:10:02:04:5f:e4:cd:39:a5:fc:f9:6c:40:ae:
45:bc:b2:2a:cb:65:39:e3:79:2f:33:77:d0:ab:b2:20:af:b5:
f5:a3:5d:43:ef:32:2c:88:fc:4e:c0:71:0d:b6:53:61:5c:de:
50:cf:53:84:8a:71:88:02:aa:f8:45:76:2f:72:17:e4:a8:0a:
6e:8f:79:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:33:33 2025 by rpki-client