Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rrZrzcD-vHGaoOflQRL4XKEjCVE.roa
File: rrZrzcD-vHGaoOflQRL4XKEjCVE.roa (raw, json)
Hash identifier: je/M3Fu3mXngfBpJWuKbty9M/S33vp05o4VkE4t/+mU=
Subject key identifier: AE:B6:6B:CD:C0:FE:BC:71:9A:A0:E7:E5:41:12:F8:5C:A1:23:09:51
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 2299
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rrZrzcD-vHGaoOflQRL4XKEjCVE.roa
Signing time: Mon 26 Aug 2024 05:34:10 +0000
ROA not before: Mon 26 Aug 2024 05:34:10 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24163
IP address blocks: 211.76.44.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:18:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8857 (0x2299)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:34:10 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=AEB66BCDC0FEBC719AA0E7E54112F85CA1230951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:04:99:cb:b5:70:58:3e:e5:d0:20:26:81:a3:
8b:c4:b9:62:08:ab:95:31:a5:63:ad:d6:a4:14:b9:
c8:58:bb:1a:c6:27:c8:7d:3a:e7:fb:3e:66:f1:72:
e4:4f:a1:14:b1:0f:53:8f:b5:1e:a2:27:fc:22:49:
83:9a:82:28:f8:48:57:c6:3f:5b:d5:e4:bc:d7:4e:
13:fa:9d:1f:d1:60:16:b6:cd:16:79:44:8f:44:1a:
8a:20:80:d2:23:68:fe:3d:d5:b1:5f:4e:99:4f:2f:
9a:d6:e6:88:ec:1f:5e:79:c7:24:1a:82:fe:ee:d4:
56:d7:28:f6:e1:ab:d4:08:cb:78:db:36:1a:33:43:
3e:76:d4:04:f8:fa:19:a8:2c:86:d5:ce:d4:84:a2:
e3:6e:16:75:8e:cd:88:58:06:95:3a:e7:6c:63:ba:
d4:d4:e3:9f:29:c8:0e:dc:c5:2f:e3:78:e9:b4:20:
c3:b0:b8:fb:66:49:e6:45:98:3b:2e:bc:a4:8d:db:
19:18:49:fe:4c:08:bb:1d:3f:3a:10:18:c0:6b:76:
88:0d:4d:47:8f:15:62:cc:ce:3d:f8:d9:9b:17:9d:
f9:bc:72:d6:e3:fd:66:64:a4:08:13:63:6a:73:a0:
07:44:f0:7d:00:2b:0f:27:9d:42:54:5c:44:d3:43:
f6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B6:6B:CD:C0:FE:BC:71:9A:A0:E7:E5:41:12:F8:5C:A1:23:09:51
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rrZrzcD-vHGaoOflQRL4XKEjCVE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.44.0/22
Signature Algorithm: sha256WithRSAEncryption
91:f7:52:cb:7e:f6:57:67:d5:ff:48:d8:81:5b:94:6a:7f:0f:
79:65:01:b8:88:1a:d3:24:b8:33:98:c8:06:ae:a8:90:09:75:
69:53:6b:bc:21:8c:28:cb:2a:e9:60:08:b6:ce:21:54:28:47:
f9:95:7a:cb:ee:03:4b:5f:8c:6d:c1:7f:59:34:4f:06:78:a9:
6d:78:ec:71:2e:7b:12:6c:07:29:6f:2a:dc:b9:8c:ea:eb:ff:
e7:96:a8:3f:65:b8:7a:d1:c2:ee:34:71:9c:df:5d:92:cf:cc:
cb:6e:fc:c6:b4:ce:91:33:de:a2:a1:65:5f:74:68:16:a7:99:
de:21:0e:a4:19:53:0b:13:86:91:b3:54:43:e1:76:5e:2c:15:
ed:f3:2b:b4:2d:b0:5f:92:e8:09:c8:43:17:7b:21:d3:ff:85:
d1:5d:d6:15:8a:67:af:9e:f7:8a:e1:80:63:fe:91:8e:59:8d:
a5:0f:3c:48:6e:71:94:09:e8:50:0b:d6:c8:2f:84:d0:70:0c:
a9:e5:32:65:db:5c:3f:2f:c1:de:c5:58:1b:ae:85:b2:a9:e4:
18:69:e6:45:51:38:d5:a7:c8:6d:60:2a:bc:c0:71:7f:31:cf:
34:7f:63:5c:e0:8b:20:84:9e:fd:81:f9:ee:05:b7:33:1a:f8:
fb:36:c8:41
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIpkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw
NTM0MTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFFQjY2QkNEQzBGRUJD
NzE5QUEwRTdFNTQxMTJGODVDQTEyMzA5NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMBJnLtXBYPuXQICaBo4vEuWIIq5UxpWOt1qQUuchYuxrGJ8h9
Ouf7PmbxcuRPoRSxD1OPtR6iJ/wiSYOagij4SFfGP1vV5LzXThP6nR/RYBa2zRZ5
RI9EGooggNIjaP491bFfTplPL5rW5ojsH155xyQagv7u1FbXKPbhq9QIy3jbNhoz
Qz521AT4+hmoLIbVztSEouNuFnWOzYhYBpU652xjutTU458pyA7cxS/jeOm0IMOw
uPtmSeZFmDsuvKSN2xkYSf5MCLsdPzoQGMBrdogNTUePFWLMzj342ZsXnfm8ctbj
/WZkpAgTY2pzoAdE8H0AKw8nnUJUXETTQ/YjAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUrrZrzcD+vHGaoOflQRL4XKEjCVEwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3JyWnJ6Y0QtdkhHYW9PZmxR
Ukw0WEtFakNWRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALT
TCwwDQYJKoZIhvcNAQELBQADggEBAJH3Ust+9ldn1f9I2IFblGp/D3llAbiIGtMk
uDOYyAauqJAJdWlTa7whjCjLKulgCLbOIVQoR/mVesvuA0tfjG3Bf1k0TwZ4qW14
7HEuexJsBylvKty5jOrr/+eWqD9luHrRwu40cZzfXZLPzMtu/Ma0zpEz3qKhZV90
aBanmd4hDqQZUwsThpGzVEPhdl4sFe3zK7QtsF+S6AnIQxd7IdP/hdFd1hWKZ6+e
94rhgGP+kY5ZjaUPPEhucZQJ6FAL1sgvhNBwDKnlMmXbXD8vwd7FWBuuhbKp5Bhp
5kVRONWnyG1gKrzAcX8xzzR/Y1zgiyCEnv2B+e4FtzMa+Ps2yEE=
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:26:00 2025 by rpki-client