Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/d1zI0o2VoAVSKRpRYtkWBCqe96w.roa
File: d1zI0o2VoAVSKRpRYtkWBCqe96w.roa (raw, json)
Hash identifier: lrp2jOx33bOoJtL2NDBfPCUMcf9t+yfRHn49gbP4ZO8=
Subject key identifier: 77:5C:C8:D2:8D:95:A0:05:52:29:1A:51:62:D9:16:04:2A:9E:F7:AC
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 22C9
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/d1zI0o2VoAVSKRpRYtkWBCqe96w.roa
Signing time: Mon 26 Aug 2024 05:34:22 +0000
ROA not before: Mon 26 Aug 2024 05:34:22 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 180.218.168.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:18:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8905 (0x22c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:34:22 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=775CC8D28D95A00552291A5162D916042A9EF7AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:22:bf:4a:02:c6:7d:42:c6:7f:1d:39:4c:18:
17:72:7d:9d:35:b7:2d:6e:cd:37:6a:aa:7d:22:5a:
5c:22:35:f6:0b:52:4d:dd:36:b0:c6:4a:06:19:fc:
9c:5b:85:b4:19:b7:19:cd:85:20:5c:a7:ea:0c:7d:
eb:b3:96:4c:bd:7c:dc:73:8b:bc:4e:8f:46:dc:37:
72:84:72:3d:e8:67:41:5e:1e:19:b0:29:f9:6b:d2:
63:69:ec:fb:fe:c4:26:7a:d4:cf:32:c6:05:a1:a8:
ee:55:04:90:8f:a2:35:a7:26:fc:72:d5:6a:d8:e8:
21:03:ac:d2:14:3a:b1:be:c0:27:11:d2:6e:ba:bd:
bb:1c:6a:3d:81:51:22:12:88:78:06:77:a9:ae:e3:
14:eb:4b:a3:a5:89:e4:0b:88:01:ac:14:4c:44:4f:
ae:8d:c0:7a:fb:2e:98:b0:7c:2c:ee:c9:20:fc:2c:
02:56:52:70:ee:c4:0f:9f:bf:c0:e8:ae:64:2f:de:
8d:cb:99:74:49:7f:07:22:c3:39:f3:94:0b:40:19:
66:29:28:2b:37:82:05:8f:97:dc:a1:3d:a8:59:fc:
ff:ef:81:c2:f9:f9:c5:25:09:ec:63:e4:0c:77:02:
5f:46:7a:ed:41:8b:4e:f0:f5:41:6b:5a:cc:0c:4d:
8a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5C:C8:D2:8D:95:A0:05:52:29:1A:51:62:D9:16:04:2A:9E:F7:AC
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/d1zI0o2VoAVSKRpRYtkWBCqe96w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.168.0/21
Signature Algorithm: sha256WithRSAEncryption
84:da:ce:5d:8e:84:b0:6b:88:40:64:02:0e:e7:33:c4:d5:26:
5e:1a:e5:65:4f:86:88:7b:dd:d4:1f:2f:50:81:b5:a5:f5:fd:
c7:00:46:3f:81:ad:04:73:46:47:ff:9f:f1:26:3d:b2:11:30:
18:46:00:00:f0:34:d9:54:1a:c0:75:c6:d7:3e:86:af:d7:22:
f0:87:71:5a:cd:26:44:fb:3c:d2:9b:c0:fc:7c:10:11:a6:05:
24:34:26:17:cb:0c:ae:92:8e:a1:1e:f5:95:f4:1d:5c:ab:e7:
b2:57:b1:2d:5b:b9:87:dd:b8:92:0e:22:77:cb:15:1a:15:9b:
8c:55:29:0d:4e:a2:6f:56:37:50:98:70:b7:4f:0c:57:76:c6:
c0:58:14:23:91:5b:c7:a2:44:b3:ed:97:cb:6c:d5:c6:21:3a:
59:41:36:3c:01:1a:e7:47:21:f4:62:a0:ad:8c:83:3d:bf:18:
c7:00:61:ff:47:52:f3:7a:9f:ab:dc:da:79:6a:bb:64:c6:04:
62:3f:71:c7:4f:58:e2:96:01:59:da:24:e2:c5:d3:29:f6:c8:
84:98:f6:da:9c:7d:3a:2a:e6:40:21:80:a2:4c:b9:c4:93:ba:
3c:ab:93:9c:8f:f7:f4:4d:89:82:64:c3:c2:eb:68:b3:07:c4:
d4:c4:3e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:21:34 2025 by rpki-client