Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gtd5CdLnwzEDB0jfB4XRe8D-Hyc.roa
File: gtd5CdLnwzEDB0jfB4XRe8D-Hyc.roa (raw, json)
Hash identifier: DAeK3gge0PAqzEnu0LVy+1tUjRzOHPFg41eP+Mn9wQI=
Subject key identifier: 82:D7:79:09:D2:E7:C3:31:03:07:48:DF:07:85:D1:7B:C0:FE:1F:27
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 224E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gtd5CdLnwzEDB0jfB4XRe8D-Hyc.roa
Signing time: Mon 26 Aug 2024 05:33:51 +0000
ROA not before: Mon 26 Aug 2024 05:33:51 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 124.6.28.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:17:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8782 (0x224e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:33:51 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=82D77909D2E7C331030748DF0785D17BC0FE1F27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:37:23:25:fc:ad:3d:ca:7a:56:5e:9c:fe:70:
e4:dc:c7:d2:2b:09:e3:85:50:52:6f:aa:41:1a:ce:
bf:16:21:02:97:4f:d3:23:ac:8c:48:22:a7:0b:f5:
8a:9e:24:68:78:9d:60:13:1d:c4:b7:10:00:1b:9d:
77:f1:41:86:51:90:6a:96:20:f2:92:07:42:72:8a:
3e:a7:31:e4:28:ba:ff:7e:e0:6f:db:19:a1:cb:29:
c0:6e:aa:72:c0:5e:46:63:de:ea:a3:04:e7:69:56:
c8:3f:e6:82:1e:b9:f6:41:bc:1a:ef:1f:ab:4d:66:
44:49:47:46:4d:c9:3e:45:09:d9:4c:99:5b:96:db:
0d:60:5a:af:38:8f:21:2d:87:2d:fc:62:18:55:e3:
a5:c3:79:1d:38:ed:40:5c:0f:8c:f5:65:80:3f:55:
42:d7:d2:f5:99:aa:dd:c4:87:a4:7b:8e:44:7f:31:
9a:97:1e:21:1a:1b:4f:32:48:fe:1f:1d:3a:e4:15:
b9:6a:e5:af:94:50:3e:6b:37:ad:01:9e:dd:97:03:
4f:cc:e6:49:56:4b:69:88:4d:93:0c:26:07:8f:91:
a9:ae:51:8f:bb:b2:95:fa:b3:4a:b3:84:37:e8:4c:
3d:ea:8c:86:ce:49:d0:2d:70:a2:6c:c3:f0:82:fa:
8d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D7:79:09:D2:E7:C3:31:03:07:48:DF:07:85:D1:7B:C0:FE:1F:27
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gtd5CdLnwzEDB0jfB4XRe8D-Hyc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.6.28.0/22
Signature Algorithm: sha256WithRSAEncryption
29:a1:52:40:fe:6c:5b:b5:e7:a1:de:1d:73:59:3a:10:e4:ad:
b5:d6:51:58:61:4a:43:eb:d3:ac:a9:4a:c1:20:84:29:c3:88:
d1:4f:2a:60:25:a2:9c:61:95:a7:01:28:61:3f:9a:37:36:df:
8d:a0:43:a3:b7:b1:b6:fd:78:74:2c:2c:f0:69:ba:d4:ae:0c:
b2:a7:c4:d6:42:a0:2c:a0:cd:33:2f:b7:2b:78:39:67:97:4a:
68:e2:2f:a4:bb:25:25:23:b0:26:cb:51:21:44:26:88:dd:d0:
4a:5b:a6:bb:62:07:2b:e6:66:4e:7b:d5:f1:7e:27:d8:4f:34:
a1:5b:fd:07:1a:43:d4:5c:94:cd:1c:2e:dd:68:88:80:08:3e:
72:ba:df:19:c7:db:06:da:e5:cb:e0:90:cf:e9:d4:70:01:99:
5f:ef:fd:84:bf:b5:9b:41:e4:ee:49:84:b9:55:b4:92:a2:6f:
77:d3:75:7c:7b:5c:49:db:20:45:40:f3:be:85:f6:dc:0b:3d:
c8:70:ac:2d:77:2a:d9:99:93:1b:54:a1:c8:9e:45:c3:e2:95:
d2:ed:03:4d:76:69:be:f0:dd:0a:59:e9:99:42:c5:4f:9e:5d:
c4:ce:63:3c:a3:98:b7:2b:b9:d0:42:5c:7e:5a:6f:48:41:49:
5f:00:a5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:37:02 2025 by rpki-client