Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lw91aWt4OQn4Wi3KxF4kbe17kyg.roa
File: lw91aWt4OQn4Wi3KxF4kbe17kyg.roa (raw, json)
Hash identifier: voQ/lB5lDUcBaItqrmJL8D1o9kbreBtJZzmpBQ+8kFo=
Subject key identifier: 97:0F:75:69:6B:78:39:09:F8:5A:2D:CA:C4:5E:24:6D:ED:7B:93:28
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 2227
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lw91aWt4OQn4Wi3KxF4kbe17kyg.roa
Signing time: Mon 26 Aug 2024 05:33:44 +0000
ROA not before: Mon 26 Aug 2024 05:33:44 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 49.158.144.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:17:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8743 (0x2227)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:33:44 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=970F75696B783909F85A2DCAC45E246DED7B9328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:26:17:fd:1c:a3:5f:4b:ae:7c:e1:2e:f8:c4:
b2:60:a4:82:a8:31:f0:1c:9c:2e:9a:c9:22:27:42:
01:a4:35:02:2d:68:e7:52:e7:0d:1b:5a:ce:fb:e0:
03:ab:ed:fc:9b:86:5f:93:5e:08:c7:cd:6e:74:68:
46:e8:df:bd:84:08:4f:b3:36:cb:a5:fb:49:91:bb:
fd:fe:90:43:59:df:9d:6f:0c:63:d0:0f:5c:1a:25:
ac:18:a1:32:b3:59:87:69:11:80:d8:9a:52:57:c0:
0d:9f:0b:fb:23:63:54:e8:ae:d5:bd:c5:2f:1d:da:
1b:3f:cd:fe:bb:b5:eb:0a:22:bc:99:90:0f:6c:c6:
fb:c6:5b:b6:0f:05:4e:d3:11:eb:ff:c0:e2:16:40:
66:6e:b7:13:9a:26:99:37:30:b6:07:df:a2:20:1e:
27:92:70:f2:a2:28:75:06:7a:4c:14:cc:67:1a:4c:
f3:fe:15:9a:e5:18:8d:4a:2c:8c:a8:a7:14:17:bb:
d4:65:5e:5b:25:17:d0:7b:45:f7:a3:bd:46:40:79:
9d:99:31:66:ae:51:ee:0f:30:62:7b:2b:6c:83:8a:
d3:64:9f:59:7e:56:b6:e0:79:31:87:05:ce:09:42:
f2:d2:78:48:f0:64:60:2e:21:4e:e7:a0:4f:0c:e3:
a9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0F:75:69:6B:78:39:09:F8:5A:2D:CA:C4:5E:24:6D:ED:7B:93:28
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lw91aWt4OQn4Wi3KxF4kbe17kyg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.144.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:00:2b:f8:b8:90:ac:35:e0:53:e0:8b:a4:4b:40:be:a6:28:
b8:70:41:b8:24:bd:1d:b8:86:8a:79:69:45:b0:10:66:a6:76:
34:3b:9d:4b:f2:aa:98:73:d1:42:52:c6:f7:d1:40:39:7a:ee:
2d:95:2c:38:63:93:6b:6e:1f:11:8c:4a:1a:09:d6:89:8f:d3:
07:83:48:b6:ff:0c:3b:83:ca:62:0b:d0:28:ad:b8:f8:36:1c:
ec:71:8c:d5:9d:07:be:0f:0e:0d:f0:0d:4a:c0:18:4b:d3:4a:
4e:a7:94:e9:bb:5c:d8:c7:d0:31:6b:87:a9:27:d9:fe:50:4e:
05:95:20:6e:60:7b:9b:29:23:d5:d8:68:5b:7c:2f:6d:28:3d:
80:07:7f:2c:a1:75:a0:07:5c:1b:d8:fc:58:c2:e5:47:1d:0c:
23:26:2b:f3:e9:dd:97:59:b7:76:1a:5c:5a:fd:03:2e:d2:cb:
e7:29:03:35:cc:6d:13:6c:dc:62:b8:c8:39:de:30:2a:a8:99:
c5:51:fc:85:9c:f6:0b:94:50:d1:fd:0d:5f:76:28:90:3c:06:
70:d3:a7:ae:e7:d2:3d:9b:93:da:0f:3b:14:09:0f:0c:fb:12:
9f:68:af:0c:c7:4b:87:88:d9:df:60:0d:ef:30:91:9d:ea:18:
d7:ae:97:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:43:45 2025 by rpki-client