Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mdbKJfWw89p4toX-7SFy56ntPgQ.roa
File: mdbKJfWw89p4toX-7SFy56ntPgQ.roa (raw, json)
Hash identifier: irvriP2bpaaCu5E0LNtdCg5BKlRLgV9YVxqcMB8ix3E=
Subject key identifier: 99:D6:CA:25:F5:B0:F3:DA:78:B6:85:FE:ED:21:72:E7:A9:ED:3E:04
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 217F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mdbKJfWw89p4toX-7SFy56ntPgQ.roa
Signing time: Mon 26 Aug 2024 05:33:03 +0000
ROA not before: Mon 26 Aug 2024 05:33:03 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 211.76.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:18:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8575 (0x217f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:33:03 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=99D6CA25F5B0F3DA78B685FEED2172E7A9ED3E04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:61:10:88:6f:b6:fb:72:bb:18:0a:1e:10:e4:
f8:24:63:4a:1a:1a:80:9c:c2:54:f8:6c:65:be:b6:
ce:04:ce:68:d0:cc:96:52:30:ac:d3:cf:68:34:32:
9c:bd:49:6d:80:87:d9:48:b4:68:59:f0:bb:a3:25:
19:74:66:c5:2c:2e:a5:a4:c5:8a:a0:d6:57:90:d1:
47:f1:8a:f9:54:9e:52:62:71:1c:69:c9:99:1d:89:
c8:56:c7:cf:bf:bc:1d:be:47:9f:60:17:31:86:c6:
75:18:1b:69:8a:91:33:b7:18:ed:16:b2:b8:54:15:
e7:6f:59:9f:d3:87:fe:c9:d7:de:65:47:e6:ca:6a:
9b:84:d2:16:cd:c4:07:ff:b9:5e:7e:4f:a6:a3:a2:
ae:f7:0d:73:33:47:93:3b:b2:17:89:6d:16:ec:86:
e3:67:16:24:97:c7:cc:07:a4:f5:09:7f:85:4a:e0:
90:7f:7f:55:49:0e:b9:95:bb:8f:f6:62:1a:aa:5a:
98:df:39:94:6a:dd:02:10:68:91:15:30:87:a1:58:
af:5f:9f:20:bf:61:8e:52:52:c5:41:56:d4:b5:f9:
2e:43:f1:ce:c5:9f:68:13:79:63:16:54:c3:9b:c0:
8f:f3:7d:96:01:1a:ed:1c:24:ad:95:c7:f5:fe:58:
f6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D6:CA:25:F5:B0:F3:DA:78:B6:85:FE:ED:21:72:E7:A9:ED:3E:04
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mdbKJfWw89p4toX-7SFy56ntPgQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.77.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:f1:12:89:fa:0c:6b:45:a8:6c:7d:40:e5:41:24:25:3d:b5:
f2:f3:39:24:a1:76:43:16:a7:01:0c:41:28:84:b7:1a:65:73:
9d:d3:e9:c8:2c:c6:3d:83:15:f9:48:30:21:45:2f:28:9b:0d:
c9:41:9d:ac:3e:b2:0b:cb:ae:d1:ea:ea:ce:40:78:de:e8:dc:
f6:c1:dc:0d:4b:d3:7a:34:83:77:4b:28:50:7a:e5:cc:65:94:
cf:77:78:b4:c5:84:e1:eb:a3:89:1e:58:e7:b1:e3:0e:3f:9e:
38:5e:04:49:ce:a1:d3:8d:cf:9e:fe:79:23:b6:b7:57:21:49:
b0:c3:9d:05:eb:2f:88:51:2c:37:20:a8:c2:9a:a4:b3:e6:af:
b9:48:f5:d8:d1:ac:26:32:d2:fe:e6:97:ef:7d:5e:59:1d:22:
d7:93:e5:ad:ff:39:f2:de:e1:fd:ce:3b:67:b3:60:86:9e:89:
22:ea:75:67:f0:b3:5d:b5:7f:95:9b:e8:c2:34:18:89:59:ae:
a5:85:18:84:b1:0d:e2:ab:cd:58:e4:76:cc:24:b4:d1:d4:9c:
e0:fb:b0:cf:ff:c6:a1:fc:98:2f:c2:22:df:c0:84:c2:03:77:
09:15:d5:b4:d8:99:40:21:51:a4:de:34:46:98:1d:af:49:df:
ac:0f:ba:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:29:32 2025 by rpki-client