Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tJnzhW4IcNXfc-MbT2jTwfGR0cc.roa
File: tJnzhW4IcNXfc-MbT2jTwfGR0cc.roa (raw, json)
Hash identifier: uZwBjgEdQ42h5gvB42ydkeC4w2GZpvssN9xwttqDwi8=
Subject key identifier: B4:99:F3:85:6E:08:70:D5:DF:73:E3:1B:4F:68:D3:C1:F1:91:D1:C7
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 2265
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tJnzhW4IcNXfc-MbT2jTwfGR0cc.roa
Signing time: Mon 26 Aug 2024 05:33:57 +0000
ROA not before: Mon 26 Aug 2024 05:33:57 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 180.218.136.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:17:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8805 (0x2265)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:33:57 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=B499F3856E0870D5DF73E31B4F68D3C1F191D1C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a6:1f:69:0b:4b:81:5f:c4:29:13:3a:73:09:
a7:ef:b4:62:c7:fa:de:cc:12:19:17:ee:58:9c:48:
71:41:18:e3:a5:f0:18:41:35:0d:3d:b7:e2:72:2a:
43:86:cc:a0:de:6f:8c:a5:1e:16:5a:0d:89:e0:ef:
9d:34:9c:be:06:a8:eb:55:86:9b:bc:27:bd:b6:6d:
04:01:71:69:53:90:be:93:11:31:dd:da:1e:23:7c:
6a:bc:40:9a:09:12:20:eb:31:ed:f0:64:b3:26:77:
09:c6:cb:d5:90:2a:65:0f:49:1f:32:e1:9d:84:d7:
52:13:df:88:f8:c8:91:52:14:f8:75:ae:33:e9:4d:
24:bf:4e:54:b8:60:33:10:b8:2e:4c:d8:c3:c3:6c:
ea:f2:5a:6b:96:c5:9e:fe:00:b3:99:76:74:31:45:
94:9c:ef:1c:23:07:35:59:40:a5:67:a9:37:c1:03:
83:e2:d3:c8:de:c8:55:ba:73:0f:7c:6b:d8:5a:95:
c0:14:38:98:32:08:1e:11:70:0a:1b:57:9f:89:ac:
a3:98:6a:a9:f1:7e:69:89:15:8e:f9:1c:84:85:04:
cc:52:25:ac:e5:b2:b8:8b:3e:f3:3f:75:9f:67:e3:
8a:e5:6d:3c:be:8f:5d:03:a8:d7:54:ef:e1:0c:dd:
7f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:99:F3:85:6E:08:70:D5:DF:73:E3:1B:4F:68:D3:C1:F1:91:D1:C7
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tJnzhW4IcNXfc-MbT2jTwfGR0cc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.136.0/24
Signature Algorithm: sha256WithRSAEncryption
53:7a:4e:d7:e2:81:1c:58:e0:c2:94:f2:86:66:38:53:48:65:
a8:4c:2b:56:c1:3e:2f:8e:25:b4:02:5a:6d:20:e3:55:fd:31:
56:8b:a1:4a:8c:ca:11:dd:a1:b5:9d:95:7f:73:50:13:b1:55:
05:86:2a:f1:b2:c2:8e:1a:12:98:bd:6e:6f:fd:88:22:67:35:
64:e3:33:bc:8b:cc:24:e5:2b:8f:2a:e7:09:a4:e2:7d:48:6d:
b5:dd:f0:0d:06:27:0f:e8:4e:a0:a5:bb:f7:70:8f:ef:2e:47:
01:8f:f3:99:80:74:70:9f:86:cc:60:4b:f7:56:a1:89:be:9a:
40:ec:98:7f:a9:f2:e7:b1:d6:a0:68:4e:c3:ed:5c:42:c9:7d:
e8:bb:91:49:df:b9:90:f5:4e:22:95:79:34:b4:ed:cf:39:99:
e4:8f:57:5a:89:11:5e:ff:fa:5b:1b:b3:af:f6:d4:a9:e2:f3:
69:ac:e6:dd:e1:2f:c1:e0:bd:37:54:23:f8:c3:25:8f:1d:24:
df:03:ae:e5:0a:db:eb:98:2b:c8:3f:e2:d2:87:2a:e5:83:40:
ee:11:0c:81:d2:37:b3:37:5e:4d:d5:19:90:fc:14:dd:67:75:
02:07:e7:d7:d4:e7:90:3a:6b:26:a1:87:04:e4:6e:7a:1c:9e:
d6:03:ce:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:26:09 2025 by rpki-client