Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dt5PVk0_wgujkuB2vDg7zRcT3W8.roa
File: dt5PVk0_wgujkuB2vDg7zRcT3W8.roa (raw, json)
Hash identifier: ryPxLg8ZAhSnH5PdofQhMHRR1Lc1fUG9GkkFBx1B86s=
Subject key identifier: 76:DE:4F:56:4D:3F:C2:0B:A3:92:E0:76:BC:38:3B:CD:17:13:DD:6F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 2219
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dt5PVk0_wgujkuB2vDg7zRcT3W8.roa
Signing time: Mon 26 Aug 2024 05:33:40 +0000
ROA not before: Mon 26 Aug 2024 05:33:40 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 123.0.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:17:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8729 (0x2219)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:33:40 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=76DE4F564D3FC20BA392E076BC383BCD1713DD6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8e:42:7f:74:0d:c4:79:f0:63:4a:a6:bf:87:
49:29:98:59:7c:36:3a:31:c1:d5:d2:95:4a:96:9c:
13:f4:a1:ff:70:b0:2a:0a:07:7a:09:60:e9:d0:b6:
22:37:5a:98:e7:c0:9b:2e:0b:37:1f:f9:dc:eb:3f:
e7:4a:25:2c:45:18:91:ee:1f:8f:13:b0:c9:9a:b9:
0a:d5:5a:f0:2f:3f:54:c2:6f:cf:72:2a:6a:81:78:
91:e6:a3:69:75:78:0f:00:5a:7e:23:5b:c3:e1:5c:
25:40:47:b4:bc:28:1d:f8:ff:ff:14:f8:f6:18:ae:
0c:c1:82:e8:97:ee:24:ef:d7:4e:62:cc:52:c8:67:
cf:40:d4:71:76:11:cc:f0:e9:65:f6:a9:7d:fa:e8:
3e:e2:6e:1a:02:a0:2e:23:de:ad:4a:4e:40:3d:bf:
09:97:bd:a3:fd:7e:ef:20:26:18:dd:ea:c5:df:ba:
b1:49:10:13:99:59:2c:39:09:dc:2a:bc:18:bc:0a:
82:8a:55:54:df:25:ec:ea:b2:af:35:21:9c:42:e4:
5e:da:4c:c0:d9:3b:68:ce:ec:33:ad:1a:b1:5a:da:
78:e7:16:50:53:21:d1:b6:c7:ee:70:73:df:07:c2:
7c:ae:9d:0c:bc:67:aa:f5:38:0f:51:ed:d5:2a:5c:
bf:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DE:4F:56:4D:3F:C2:0B:A3:92:E0:76:BC:38:3B:CD:17:13:DD:6F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dt5PVk0_wgujkuB2vDg7zRcT3W8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.0.45.0/24
Signature Algorithm: sha256WithRSAEncryption
69:27:85:bb:49:e7:39:57:ed:1a:b2:6f:4a:ae:8b:d9:b6:0a:
6d:80:7d:44:6b:3f:e0:79:7e:17:30:a4:76:65:0b:85:78:e0:
42:91:83:e2:5c:05:18:6c:7e:e1:70:aa:5a:54:f0:73:5a:1a:
bb:33:cb:1e:ce:1f:8e:b2:b2:dc:64:43:a8:43:7d:8e:d4:23:
55:48:42:e1:62:1e:a1:4d:be:34:1b:7a:64:75:4d:ef:04:0d:
fc:66:4a:7b:94:43:dc:ed:30:13:6b:8e:ad:7c:dd:10:c8:ea:
15:22:27:c6:df:84:94:8c:0b:a7:17:77:f7:01:25:e1:a2:3e:
53:9d:0f:2a:c6:52:e1:c7:e4:5c:5a:17:94:48:f0:d9:25:a1:
ef:d7:ff:7d:57:28:83:07:66:b6:ff:9d:23:3a:3e:d2:30:31:
54:02:83:9f:f0:74:42:aa:25:6e:b0:63:1b:2e:ad:1e:c8:33:
03:fd:5a:26:75:72:12:c1:10:6a:0e:22:c3:14:0c:ae:b2:b7:
27:94:b7:60:6b:b1:0e:5b:5f:f3:49:95:66:03:68:09:d6:8f:
bb:99:4f:d4:2b:39:4c:39:55:90:9b:8e:16:31:10:ca:a6:32:
42:8e:8f:a6:01:fb:8e:21:74:27:4d:f3:a4:95:f0:e0:bf:97:
9b:1e:46:74
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIhkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw
NTMzNDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc2REU0RjU2NEQzRkMy
MEJBMzkyRTA3NkJDMzgzQkNEMTcxM0RENkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZjkJ/dA3EefBjSqa/h0kpmFl8NjoxwdXSlUqWnBP0of9wsCoK
B3oJYOnQtiI3WpjnwJsuCzcf+dzrP+dKJSxFGJHuH48TsMmauQrVWvAvP1TCb89y
KmqBeJHmo2l1eA8AWn4jW8PhXCVAR7S8KB34//8U+PYYrgzBguiX7iTv105izFLI
Z89A1HF2Eczw6WX2qX366D7ibhoCoC4j3q1KTkA9vwmXvaP9fu8gJhjd6sXfurFJ
EBOZWSw5CdwqvBi8CoKKVVTfJezqsq81IZxC5F7aTMDZO2jO7DOtGrFa2njnFlBT
IdG2x+5wc98HwnyunQy8Z6r1OA9R7dUqXL9jAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUdt5PVk0/wgujkuB2vDg7zRcT3W8wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2R0NVBWazBfd2d1amt1QjJ2
RGc3elJjVDNXOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7
AC0wDQYJKoZIhvcNAQELBQADggEBAGknhbtJ5zlX7Rqyb0qui9m2Cm2AfURrP+B5
fhcwpHZlC4V44EKRg+JcBRhsfuFwqlpU8HNaGrszyx7OH46ystxkQ6hDfY7UI1VI
QuFiHqFNvjQbemR1Te8EDfxmSnuUQ9ztMBNrjq183RDI6hUiJ8bfhJSMC6cXd/cB
JeGiPlOdDyrGUuHH5FxaF5RI8Nkloe/X/31XKIMHZrb/nSM6PtIwMVQCg5/wdEKq
JW6wYxsurR7IMwP9WiZ1chLBEGoOIsMUDK6ytyeUt2BrsQ5bX/NJlWYDaAnWj7uZ
T9QrOUw5VZCbjhYxEMqmMkKOj6YB+44hdCdN86SV8OC/l5seRnQ=
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:20:38 2025 by rpki-client