Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/kPU6fxd5EEMvPujWcjjjCm3tl1U.roa
File: kPU6fxd5EEMvPujWcjjjCm3tl1U.roa (raw, json)
Hash identifier: TAT8MuYXZmtY26YPUTvdw8NLA0qbE/XCrAuea4ofMto=
Subject key identifier: 90:F5:3A:7F:17:79:10:43:2F:3E:E8:D6:72:38:E3:0A:6D:ED:97:55
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 22D8
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/kPU6fxd5EEMvPujWcjjjCm3tl1U.roa
Signing time: Mon 26 Aug 2024 05:34:25 +0000
ROA not before: Mon 26 Aug 2024 05:34:25 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 49.158.88.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:18:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8920 (0x22d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:34:25 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=90F53A7F177910432F3EE8D67238E30A6DED9755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e9:1b:4e:97:9c:fc:90:a5:bb:ec:8f:46:03:
97:d2:b0:a3:33:0a:04:d0:17:27:bf:25:02:f0:04:
d2:45:3c:23:dd:ca:bf:0b:09:63:0c:07:ac:ad:99:
13:ee:96:a2:22:7f:bb:71:4e:b8:c6:3b:41:f2:c8:
cc:44:36:e4:5e:52:8b:aa:8e:75:9f:17:fe:f4:b1:
f2:e7:f2:e9:37:df:bf:fa:7a:47:ba:36:bc:85:ad:
c5:11:ed:36:9f:0a:2d:74:0f:d7:3a:cb:34:a2:82:
eb:69:5e:ed:2e:d5:d1:9f:9d:76:3a:70:c9:6e:25:
ac:cc:2e:16:a4:1b:ff:cd:23:84:42:79:bb:e7:1a:
56:5e:82:a1:02:8f:4c:ce:48:42:59:73:ed:72:a1:
12:2c:d5:c8:e7:d1:f7:9e:7f:28:2c:94:cd:bf:3c:
f1:07:43:30:65:10:a8:1f:d1:d7:3d:6c:92:9b:ac:
eb:9f:cd:74:c1:78:d7:8f:9c:b6:f9:b6:27:bc:eb:
d2:1e:cf:89:21:f6:55:05:92:6d:61:7f:22:f5:03:
07:9c:f2:3a:fc:aa:4f:45:60:06:3b:e9:41:3d:7c:
4d:3e:83:22:32:0f:5d:65:e5:9b:8a:c2:c0:40:84:
4c:08:0d:09:a3:8e:c2:0b:5b:62:68:fa:18:22:d3:
89:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F5:3A:7F:17:79:10:43:2F:3E:E8:D6:72:38:E3:0A:6D:ED:97:55
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/kPU6fxd5EEMvPujWcjjjCm3tl1U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.88.0/21
Signature Algorithm: sha256WithRSAEncryption
42:6e:e0:65:3b:dd:4d:58:01:e8:cb:84:a0:a3:29:49:4f:16:
30:dc:ea:25:17:dd:3f:b1:9d:3f:a5:15:5e:62:2c:27:b9:e5:
29:7d:e5:dd:2d:8b:09:64:88:eb:a9:8c:bf:f1:79:03:67:3b:
35:55:70:10:90:e1:c8:52:ba:88:90:23:50:0c:e0:0d:b7:22:
04:8a:6c:59:b6:74:62:1e:71:ea:4d:3f:3a:86:7c:53:9d:af:
c1:09:8c:a1:fb:93:6d:92:a2:34:af:7c:df:e5:a5:55:5d:1a:
df:1f:96:0d:5e:27:14:1e:6c:39:7d:7d:0f:f0:f6:4f:d3:a6:
ca:7b:fd:0f:47:10:ed:c4:aa:b0:28:2d:30:6d:8c:aa:18:45:
c3:b4:22:4d:1a:b2:9f:e4:4c:14:71:2a:63:97:68:42:28:9e:
c6:85:bb:9c:ab:ad:f0:5b:e2:8f:b9:22:35:ad:2e:83:48:27:
1d:0b:04:bf:c6:50:f9:97:87:f3:df:ee:22:62:6d:7e:bd:84:
82:e1:2e:bf:c9:28:18:cd:ae:64:8e:62:bc:01:2a:17:a9:ec:
0a:72:08:dc:c8:34:75:c5:d7:9a:e8:cd:e1:6f:84:46:14:74:
33:c2:fb:a9:2d:97:9e:1e:68:0a:b8:21:18:99:c7:cd:69:f3:
3b:05:59:7d
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICItgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw
NTM0MjVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDkwRjUzQTdGMTc3OTEw
NDMyRjNFRThENjcyMzhFMzBBNkRFRDk3NTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDW6RtOl5z8kKW77I9GA5fSsKMzCgTQFye/JQLwBNJFPCPdyr8L
CWMMB6ytmRPulqIif7txTrjGO0HyyMxENuReUouqjnWfF/70sfLn8uk337/6eke6
NryFrcUR7TafCi10D9c6yzSigutpXu0u1dGfnXY6cMluJazMLhakG//NI4RCebvn
GlZegqECj0zOSEJZc+1yoRIs1cjn0feefygslM2/PPEHQzBlEKgf0dc9bJKbrOuf
zXTBeNePnLb5tie869Iez4kh9lUFkm1hfyL1Awec8jr8qk9FYAY76UE9fE0+gyIy
D11l5ZuKwsBAhEwIDQmjjsILW2Jo+hgi04ltAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUkPU6fxd5EEMvPujWcjjjCm3tl1UwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2tQVTZmeGQ1RUVNdlB1aldj
ampqQ20zdGwxVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx
nlgwDQYJKoZIhvcNAQELBQADggEBAEJu4GU73U1YAejLhKCjKUlPFjDc6iUX3T+x
nT+lFV5iLCe55Sl95d0tiwlkiOupjL/xeQNnOzVVcBCQ4chSuoiQI1AM4A23IgSK
bFm2dGIecepNPzqGfFOdr8EJjKH7k22SojSvfN/lpVVdGt8flg1eJxQebDl9fQ/w
9k/Tpsp7/Q9HEO3EqrAoLTBtjKoYRcO0Ik0asp/kTBRxKmOXaEIonsaFu5yrrfBb
4o+5IjWtLoNIJx0LBL/GUPmXh/Pf7iJibX69hILhLr/JKBjNrmSOYrwBKhep7Apy
CNzINHXF15rozeFvhEYUdDPC+6ktl54eaAq4IRiZx81p8zsFWX0=
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:21:34 2025 by rpki-client