Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mfNCYU0pKDu9zcJoTZiqVm1gg4s.roa
File: mfNCYU0pKDu9zcJoTZiqVm1gg4s.roa (raw, json)
Hash identifier: 0eu0r0Waka4XKstiw9vK/LLWtGab6LdEKq3R/w7QJ+k=
Subject key identifier: 99:F3:42:61:4D:29:28:3B:BD:CD:C2:68:4D:98:AA:56:6D:60:83:8B
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 216D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mfNCYU0pKDu9zcJoTZiqVm1gg4s.roa
Signing time: Mon 26 Aug 2024 05:32:59 +0000
ROA not before: Mon 26 Aug 2024 05:32:59 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24163
IP address blocks: 180.218.240.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:18:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8557 (0x216d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:32:59 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=99F342614D29283BBDCDC2684D98AA566D60838B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:60:1b:0d:c2:19:dd:ab:ba:a6:9a:2d:03:00:
5f:7b:4e:a9:ca:67:7f:c8:c0:aa:2d:1c:3d:7b:4e:
6a:99:83:f4:74:c8:da:21:f4:16:02:1a:d1:d2:1b:
1a:fa:b0:02:83:9f:55:d2:a4:9f:86:0d:64:a3:d2:
69:e1:f6:29:48:8d:ba:9e:cf:e2:a7:d0:01:cd:93:
b9:ed:ca:36:43:20:36:3d:e7:d7:e9:fa:da:cd:b6:
1c:96:3e:11:82:b3:a4:4b:f0:74:2c:9a:f2:01:7e:
c1:f6:37:18:5f:32:4a:ad:e0:6b:e2:13:22:fd:5e:
33:84:4f:42:cc:e0:23:da:df:df:f8:9a:3d:de:62:
1d:75:63:8b:02:56:6e:15:d3:b4:3b:72:84:ed:ae:
07:8d:f4:b9:6a:d1:2a:10:de:2e:9c:e0:fa:d6:69:
49:92:a0:79:13:22:2b:9e:26:9f:ea:8c:a5:0a:3b:
38:d5:92:c2:29:a4:3f:33:f2:42:68:68:4f:0a:98:
c3:c6:5f:38:66:3d:f5:bd:1c:aa:76:34:8a:7d:11:
60:97:28:9f:53:fa:96:60:38:8e:82:32:fc:a7:7f:
d2:cb:fd:ce:1c:ed:cc:3a:22:91:49:66:c4:bc:7e:
ff:0e:fe:b3:9b:ff:35:a2:ce:f5:82:00:0b:e7:48:
6c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F3:42:61:4D:29:28:3B:BD:CD:C2:68:4D:98:AA:56:6D:60:83:8B
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mfNCYU0pKDu9zcJoTZiqVm1gg4s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.240.0/21
Signature Algorithm: sha256WithRSAEncryption
22:a9:a4:d1:a0:53:fd:07:51:ca:a5:55:a8:27:04:1c:04:5f:
a1:ae:2d:68:5f:37:99:e2:e7:db:53:d8:e1:52:ff:88:31:f4:
f8:95:8e:02:a4:91:d8:29:8b:dc:a2:a4:e7:00:62:31:40:45:
b3:2e:2c:8c:f4:a1:c6:b3:a2:55:e8:53:7c:e9:38:49:f8:7d:
e1:ee:c1:35:34:98:ec:73:51:29:0f:0d:13:e7:48:2b:4d:6a:
ff:d1:2c:0d:53:7a:7e:8d:ed:0b:7c:f9:6e:c7:5d:d6:c0:de:
74:6f:bb:1d:2e:d9:5f:36:cd:04:f6:2d:f1:e7:9f:e5:d3:db:
ef:c5:d5:cd:a0:00:c5:ee:ec:54:96:33:5a:0b:0d:a3:f3:99:
ba:44:61:eb:5a:ff:6e:15:3e:95:a1:80:24:3a:34:ce:1c:c8:
d7:a6:c6:76:5a:bf:53:5c:6a:c4:93:d9:cb:b1:0e:64:c4:f9:
b4:2e:6c:c8:0e:7c:83:9b:89:9a:af:b4:f0:53:be:d5:da:1c:
c8:c4:dc:a3:5f:e7:d5:78:54:ab:32:d2:ff:36:4d:92:96:91:
a0:86:41:de:4c:ff:e9:a5:b0:97:b0:5e:1f:04:d9:bb:e5:43:
08:9c:10:cc:7c:d0:6e:27:83:83:21:8d:32:0c:94:da:e1:a4:
aa:f2:40:9f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIW0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw
NTMyNTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk5RjM0MjYxNEQyOTI4
M0JCRENEQzI2ODREOThBQTU2NkQ2MDgzOEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCmYBsNwhndq7qmmi0DAF97TqnKZ3/IwKotHD17TmqZg/R0yNoh
9BYCGtHSGxr6sAKDn1XSpJ+GDWSj0mnh9ilIjbqez+Kn0AHNk7ntyjZDIDY959fp
+trNthyWPhGCs6RL8HQsmvIBfsH2NxhfMkqt4GviEyL9XjOET0LM4CPa39/4mj3e
Yh11Y4sCVm4V07Q7coTtrgeN9Llq0SoQ3i6c4PrWaUmSoHkTIiueJp/qjKUKOzjV
ksIppD8z8kJoaE8KmMPGXzhmPfW9HKp2NIp9EWCXKJ9T+pZgOI6CMvynf9LL/c4c
7cw6IpFJZsS8fv8O/rOb/zWizvWCAAvnSGzpAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUmfNCYU0pKDu9zcJoTZiqVm1gg4swHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL21mTkNZVTBwS0R1OXpjSm9U
WmlxVm0xZ2c0cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
2vAwDQYJKoZIhvcNAQELBQADggEBACKppNGgU/0HUcqlVagnBBwEX6GuLWhfN5ni
59tT2OFS/4gx9PiVjgKkkdgpi9yipOcAYjFARbMuLIz0ocazolXoU3zpOEn4feHu
wTU0mOxzUSkPDRPnSCtNav/RLA1Ten6N7Qt8+W7HXdbA3nRvux0u2V82zQT2LfHn
n+XT2+/F1c2gAMXu7FSWM1oLDaPzmbpEYeta/24VPpWhgCQ6NM4cyNemxnZav1Nc
asST2cuxDmTE+bQubMgOfIObiZqvtPBTvtXaHMjE3KNf59V4VKsy0v82TZKWkaCG
Qd5M/+mlsJewXh8E2bvlQwicEMx80G4ng4MhjTIMlNrhpKryQJ8=
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:17:52 2025 by rpki-client