Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/e75WWsWaQcYue-YeBLCDQ8VcDbk.roa
File: e75WWsWaQcYue-YeBLCDQ8VcDbk.roa (raw, json)
Hash identifier: rXc7cEYCHp3b4uhllTbv3fbVzXUX0YnnZcsPik5yFxw=
Subject key identifier: 7B:BE:56:5A:C5:9A:41:C6:2E:7B:E6:1E:04:B0:83:43:C5:5C:0D:B9
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 2269
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/e75WWsWaQcYue-YeBLCDQ8VcDbk.roa
Signing time: Mon 26 Aug 2024 05:33:58 +0000
ROA not before: Mon 26 Aug 2024 05:33:58 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24165
IP address blocks: 2407:4b00::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:17:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8809 (0x2269)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:33:58 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=7BBE565AC59A41C62E7BE61E04B08343C55C0DB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:96:c6:bd:51:2c:59:6b:24:f8:ba:e4:cd:41:
04:a7:82:d2:b7:42:b6:a6:17:3a:c3:8c:6d:64:4d:
4f:8a:03:5f:3f:48:7b:d9:33:79:24:a2:2c:4e:2e:
9e:6a:aa:e5:d2:2f:ca:a8:63:5d:7f:b2:16:5a:03:
54:b7:14:90:a6:97:f9:19:62:4b:6a:0a:e0:30:42:
34:0d:7a:9e:95:2f:8b:23:58:4b:50:83:19:cf:0c:
48:11:25:58:1c:46:3d:66:52:3d:5e:42:1f:4a:f7:
05:f3:2a:de:9d:8a:de:16:10:a8:62:5d:04:ac:2d:
b9:f3:42:2c:77:7e:74:73:e1:f9:7a:69:cc:fc:8d:
6a:a5:71:1f:aa:ba:d6:a7:14:fe:33:7b:b9:14:13:
b0:82:7a:d1:b6:c9:9f:22:de:d8:47:75:9b:1f:82:
76:04:1c:a7:07:1e:4d:4c:a1:69:0a:3c:b0:86:40:
6e:37:df:0d:83:bf:6d:b6:66:8f:b8:d6:14:5b:af:
17:85:91:9f:fc:fe:5d:92:19:45:37:83:7a:25:a4:
cc:21:37:c8:83:11:bb:9d:1a:ac:e3:19:01:09:3d:
79:32:e7:ad:a5:c3:38:c5:4b:0c:a0:c1:65:30:d8:
b0:80:71:fa:60:07:17:3b:66:2e:36:73:2e:a0:8c:
44:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BE:56:5A:C5:9A:41:C6:2E:7B:E6:1E:04:B0:83:43:C5:5C:0D:B9
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/e75WWsWaQcYue-YeBLCDQ8VcDbk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:4b00::/32
Signature Algorithm: sha256WithRSAEncryption
43:6d:d3:c8:a4:43:14:ae:b2:59:d6:0c:f0:88:af:02:24:e0:
04:cd:20:be:51:23:22:ea:91:a2:a4:bd:ac:7f:46:9a:9a:b8:
e3:cf:30:c4:95:ed:ac:71:93:7e:6c:02:53:84:61:59:84:18:
23:3e:19:36:ee:87:a2:3a:e5:27:0c:42:00:b3:75:a4:51:7b:
4f:1e:9f:69:cd:cb:76:b1:9e:ff:3f:de:4e:2c:e1:33:2e:cc:
d7:f4:b4:46:54:5b:fa:17:d5:bd:83:98:eb:65:b8:85:17:b6:
d8:23:f0:b8:fc:1c:64:d7:4f:ac:dd:e9:ab:d0:ed:06:04:54:
88:05:11:7a:5f:94:00:5e:f1:ff:74:a8:7b:1a:8b:9d:1f:25:
95:ca:59:6d:00:42:43:81:5b:72:37:96:24:08:e0:55:76:18:
d3:2c:1f:8f:b7:91:d9:a5:af:31:f1:f0:c3:f6:73:ee:6c:6d:
a8:92:14:fc:63:ea:9b:72:b8:c6:7f:7c:15:3c:2d:9f:e0:c6:
18:2f:ad:3a:14:4a:80:0f:1c:ba:44:23:6a:30:c6:5c:c3:ee:
ff:f0:91:8d:25:b8:0d:c7:ca:66:5f:33:45:f4:be:9f:06:88:
04:5d:e6:95:a1:b4:eb:14:d3:82:cb:e3:0f:ab:9d:07:c3:8c:
e0:39:1e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:31:48 2025 by rpki-client