Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mz7_Mp3cllHAB-tziku5J3VJHtg.roa
File: mz7_Mp3cllHAB-tziku5J3VJHtg.roa (raw, json)
Hash identifier: UQg8s38idpaw2grET5MCzE211RHFfrtM5B6m9pn5u+o=
Subject key identifier: 9B:3E:FF:32:9D:DC:96:51:C0:07:EB:73:8A:4B:B9:27:75:49:1E:D8
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 2257
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mz7_Mp3cllHAB-tziku5J3VJHtg.roa
Signing time: Mon 26 Aug 2024 05:33:53 +0000
ROA not before: Mon 26 Aug 2024 05:33:53 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 61.60.216.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:17:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8791 (0x2257)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:33:53 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=9B3EFF329DDC9651C007EB738A4BB92775491ED8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3a:31:e2:1e:ea:52:54:5e:e1:e8:d5:10:4e:
11:82:39:14:4f:44:20:80:1d:e6:1f:83:69:e0:60:
48:2b:e2:02:14:b2:1c:72:cc:79:16:0a:33:67:60:
9e:19:1d:84:5e:04:08:f8:ca:6b:a8:31:9f:64:3d:
57:25:bb:57:24:4a:0c:bd:28:fe:c0:af:ac:5b:ad:
2c:9e:f4:50:32:91:11:f3:d1:96:c9:01:eb:95:18:
b8:b9:b4:96:a2:f4:ad:fe:64:13:f8:5c:de:5d:71:
12:03:e8:11:92:5e:d0:25:42:89:39:bb:21:09:45:
4d:e4:0a:95:94:5a:2e:7b:2f:34:9e:e2:4b:8b:1e:
5b:b9:96:9f:7e:8b:fe:22:24:77:1f:f0:bd:c3:db:
f2:c6:c8:1f:56:86:d9:8b:71:8b:cb:ba:4f:b8:69:
d6:10:d9:cb:e9:a7:f3:e2:74:e1:cb:b2:3e:16:2b:
be:48:5f:9e:3d:e7:ed:55:f4:d7:ae:b3:4a:48:40:
f4:67:6b:6e:c7:0f:12:69:4e:5a:88:74:dd:b3:8d:
fe:4a:1d:c5:74:88:25:00:68:25:f7:ad:d4:57:64:
be:db:34:71:34:12:5a:0e:56:d0:39:33:71:97:3d:
3e:2e:13:9c:f7:31:58:f2:3c:e0:c4:c2:6d:bd:92:
de:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:3E:FF:32:9D:DC:96:51:C0:07:EB:73:8A:4B:B9:27:75:49:1E:D8
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mz7_Mp3cllHAB-tziku5J3VJHtg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.60.216.0/21
Signature Algorithm: sha256WithRSAEncryption
a1:8e:d7:d1:b9:4a:20:2a:e5:42:30:6e:d0:92:96:1e:2c:38:
dc:f4:20:3f:d4:28:d2:0a:b2:d3:c1:46:50:98:ec:8b:26:ff:
58:f9:d8:a0:06:1e:ff:98:21:30:f8:5a:2c:db:e0:31:bb:0b:
50:4f:f8:14:cf:f6:78:aa:3b:8a:6e:9a:9d:2b:5f:f9:e8:30:
e1:00:d9:2d:d5:6d:80:86:36:cc:43:2e:d6:9e:04:69:f5:c2:
d2:0e:87:b5:be:61:b7:9a:81:03:4e:46:bb:73:16:da:32:92:
d7:fa:c8:84:35:2e:6f:92:dc:bf:46:25:d5:88:92:54:38:42:
6c:37:fb:61:d9:0c:94:ac:fc:16:c8:2b:d1:c9:2d:85:1f:47:
69:e8:56:95:59:4d:65:2b:25:8f:6b:49:6b:6d:a9:5a:0f:20:
7c:72:c0:d9:2f:41:b0:69:a3:3c:15:71:48:e7:aa:9e:a6:5d:
ba:29:64:3e:15:9b:01:dc:5f:08:24:76:16:88:49:69:f9:c5:
a6:95:e7:de:01:61:64:39:41:55:4c:c8:b2:cc:b0:07:c9:97:
8e:b0:8c:af:5a:22:31:2e:56:14:ab:43:40:c5:e1:a8:5e:31:
b1:75:8f:9a:0e:77:17:0a:d8:b7:81:e4:90:56:f2:5d:3d:a0:
7b:3b:57:b9
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIlcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw
NTMzNTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlCM0VGRjMyOUREQzk2
NTFDMDA3RUI3MzhBNEJCOTI3NzU0OTFFRDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCsOjHiHupSVF7h6NUQThGCORRPRCCAHeYfg2ngYEgr4gIUshxy
zHkWCjNnYJ4ZHYReBAj4ymuoMZ9kPVclu1ckSgy9KP7Ar6xbrSye9FAykRHz0ZbJ
AeuVGLi5tJai9K3+ZBP4XN5dcRID6BGSXtAlQok5uyEJRU3kCpWUWi57LzSe4kuL
Hlu5lp9+i/4iJHcf8L3D2/LGyB9WhtmLcYvLuk+4adYQ2cvpp/PidOHLsj4WK75I
X5495+1V9Neus0pIQPRna27HDxJpTlqIdN2zjf5KHcV0iCUAaCX3rdRXZL7bNHE0
EloOVtA5M3GXPT4uE5z3MVjyPODEwm29kt59AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUmz7/Mp3cllHAB+tziku5J3VJHtgwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL216N19NcDNjbGxIQUItdHpp
a3U1SjNWSkh0Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAM9
PNgwDQYJKoZIhvcNAQELBQADggEBAKGO19G5SiAq5UIwbtCSlh4sONz0ID/UKNIK
stPBRlCY7Ism/1j52KAGHv+YITD4Wizb4DG7C1BP+BTP9niqO4pump0rX/noMOEA
2S3VbYCGNsxDLtaeBGn1wtIOh7W+YbeagQNORrtzFtoyktf6yIQ1Lm+S3L9GJdWI
klQ4Qmw3+2HZDJSs/BbIK9HJLYUfR2noVpVZTWUrJY9rSWttqVoPIHxywNkvQbBp
ozwVcUjnqp6mXbopZD4VmwHcXwgkdhaISWn5xaaV594BYWQ5QVVMyLLMsAfJl46w
jK9aIjEuVhSrQ0DF4aheMbF1j5oOdxcK2LeB5JBW8l09oHs7V7k=
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:21:31 2025 by rpki-client