Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/smKBg5LelxAwBlBR5ax5gezNOjg.roa
File: smKBg5LelxAwBlBR5ax5gezNOjg.roa (raw, json)
Hash identifier: +3YJTotj31esz78UY5/SZRYOr1yoICLKVejVD3Ei2O0=
Subject key identifier: B2:62:81:83:92:DE:97:10:30:06:50:51:E5:AC:79:81:EC:CD:3A:38
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 2160
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/smKBg5LelxAwBlBR5ax5gezNOjg.roa
Signing time: Mon 26 Aug 2024 05:32:56 +0000
ROA not before: Mon 26 Aug 2024 05:32:56 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 180.218.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:18:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8544 (0x2160)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:32:56 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=B262818392DE971030065051E5AC7981ECCD3A38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4a:24:69:13:eb:53:f9:c0:e0:4f:02:3f:80:
81:c6:25:a1:c9:49:f7:8f:93:07:aa:7b:13:94:10:
9b:96:65:d0:58:9a:d1:31:e0:da:9c:77:d0:fe:35:
37:c7:ba:80:09:b7:6e:e6:26:46:e3:91:c9:37:9d:
5e:c0:30:b3:ef:6d:ae:dc:53:1c:b2:39:37:08:3e:
8a:86:79:00:ba:87:e4:82:a8:ec:a7:8d:48:13:fa:
70:9b:8f:69:d1:e7:5a:a7:62:20:83:ff:fa:13:b4:
17:6b:8e:e2:fa:b5:7f:ab:f8:39:9f:d8:c8:85:d2:
8c:db:c2:35:d6:9f:3c:d6:08:f3:16:cc:cd:03:a9:
84:4b:c0:cf:29:ab:88:05:b9:10:ba:b3:98:62:1b:
92:e7:af:de:8c:aa:93:a0:ed:0f:d6:e1:d2:1f:c8:
29:f6:65:6d:fe:16:5f:ac:f3:d2:9e:60:2f:64:f7:
9c:1c:72:97:9d:a7:8a:d3:21:37:7b:c6:40:3a:02:
cd:24:27:d3:5f:97:23:77:6a:75:fd:b6:d9:d8:d8:
10:60:05:fd:25:e1:99:6a:e2:6f:44:b8:13:65:9d:
b8:a8:0a:82:dc:eb:49:61:7e:49:1c:a7:ff:d4:44:
4a:06:e1:d4:0e:8d:38:aa:72:ef:84:4b:d5:f2:8d:
ac:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:62:81:83:92:DE:97:10:30:06:50:51:E5:AC:79:81:EC:CD:3A:38
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/smKBg5LelxAwBlBR5ax5gezNOjg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.137.0/24
Signature Algorithm: sha256WithRSAEncryption
22:fa:b4:2d:c4:6b:79:7c:f4:4f:d6:c3:24:bf:fe:75:a3:bb:
a2:09:57:c4:cb:38:21:aa:1f:72:54:b1:66:1a:03:50:fd:28:
ca:1c:25:44:da:a8:85:3e:b6:1c:12:7e:a6:aa:47:f8:f9:16:
c5:60:9c:30:24:9c:1f:12:8f:bf:a1:c1:0f:f5:7e:32:fd:3a:
85:b6:45:28:9a:39:03:25:43:73:2b:f9:ad:25:1f:89:e4:09:
fe:55:7f:e8:91:6c:bf:a9:94:20:92:f0:67:c6:57:17:da:c1:
fb:0f:67:dc:4d:99:db:c7:38:f0:db:ea:9b:36:8d:19:91:b8:
e4:0f:50:e2:46:f0:30:7d:7f:09:5e:ae:5d:33:7a:18:84:9e:
a6:fe:ea:40:cb:3c:e0:d5:b4:36:74:19:ee:27:a8:08:f6:31:
4d:88:5b:a9:66:07:f3:5d:2e:db:23:73:da:e6:a5:0d:65:a9:
54:a1:86:ae:d4:5c:0b:a4:22:1f:c3:5a:ba:03:af:26:6d:2a:
ca:c5:ba:2f:67:81:3b:c9:70:96:87:00:b6:1a:7b:8b:46:1d:
4e:ed:dc:6e:69:5c:09:77:d5:21:e2:be:66:69:19:1d:c7:4f:
ba:5f:fa:81:21:a9:4b:14:fb:a9:70:03:7a:7b:0e:37:2c:14:
7b:be:dc:4b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIWAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw
NTMyNTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEIyNjI4MTgzOTJERTk3
MTAzMDA2NTA1MUU1QUM3OTgxRUNDRDNBMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDaSiRpE+tT+cDgTwI/gIHGJaHJSfePkweqexOUEJuWZdBYmtEx
4Nqcd9D+NTfHuoAJt27mJkbjkck3nV7AMLPvba7cUxyyOTcIPoqGeQC6h+SCqOyn
jUgT+nCbj2nR51qnYiCD//oTtBdrjuL6tX+r+Dmf2MiF0ozbwjXWnzzWCPMWzM0D
qYRLwM8pq4gFuRC6s5hiG5Lnr96MqpOg7Q/W4dIfyCn2ZW3+Fl+s89KeYC9k95wc
cpedp4rTITd7xkA6As0kJ9NflyN3anX9ttnY2BBgBf0l4Zlq4m9EuBNlnbioCoLc
60lhfkkcp//UREoG4dQOjTiqcu+ES9XyjawhAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUsmKBg5LelxAwBlBR5ax5gezNOjgwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3NtS0JnNUxlbHhBd0JsQlI1
YXg1Z2V6Tk9qZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0
2okwDQYJKoZIhvcNAQELBQADggEBACL6tC3Ea3l89E/WwyS//nWju6IJV8TLOCGq
H3JUsWYaA1D9KMocJUTaqIU+thwSfqaqR/j5FsVgnDAknB8Sj7+hwQ/1fjL9OoW2
RSiaOQMlQ3Mr+a0lH4nkCf5Vf+iRbL+plCCS8GfGVxfawfsPZ9xNmdvHOPDb6ps2
jRmRuOQPUOJG8DB9fwlerl0zehiEnqb+6kDLPODVtDZ0Ge4nqAj2MU2IW6lmB/Nd
Ltsjc9rmpQ1lqVShhq7UXAukIh/DWroDryZtKsrFui9ngTvJcJaHALYae4tGHU7t
3G5pXAl31SHivmZpGR3HT7pf+oEhqUsU+6lwA3p7DjcsFHu+3Es=
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:28:42 2025 by rpki-client