Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ucFOXayFAMP6m9AYcByrRX8L9dc.roa
File: ucFOXayFAMP6m9AYcByrRX8L9dc.roa (raw, json)
Hash identifier: f60VOp765tUDD1ZPMlxNYT/0ga21PGbu4vqwoNOz75c=
Subject key identifier: B9:C1:4E:5D:AC:85:00:C3:FA:9B:D0:18:70:1C:AB:45:7F:0B:F5:D7
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 21C4
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ucFOXayFAMP6m9AYcByrRX8L9dc.roa
Signing time: Mon 26 Aug 2024 05:33:20 +0000
ROA not before: Mon 26 Aug 2024 05:33:20 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 61.58.112.0/20 maxlen: 21
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:18:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8644 (0x21c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:33:20 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=B9C14E5DAC8500C3FA9BD018701CAB457F0BF5D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:16:a6:e3:53:03:13:90:a6:87:f9:91:50:e3:
ce:56:b8:56:a3:6c:a7:46:36:91:13:6f:91:d8:4c:
49:48:ac:57:fe:f1:19:4f:b3:7a:87:e4:9a:fa:0a:
10:84:65:54:00:36:6e:45:f7:27:68:63:79:df:09:
81:ce:3c:cc:f7:e3:7b:a8:4a:80:9f:69:ca:1c:0b:
a0:0a:3d:36:cf:f0:a1:f1:3c:f2:78:c9:64:97:c5:
48:b1:51:5c:8b:fb:50:06:28:ba:2b:5d:f1:30:b0:
d5:de:30:eb:94:f3:6f:45:c4:88:58:d4:4d:cd:8a:
eb:e5:08:95:6b:05:c3:de:ce:80:c3:d2:0a:41:e0:
73:1a:10:3b:42:e3:f1:b8:90:b0:2d:2d:22:4c:22:
c2:ce:c7:ef:f1:60:d9:ad:84:2e:5f:3a:dd:03:81:
9f:66:23:18:5a:5c:d5:6d:22:09:d8:fb:80:e7:c1:
9b:d2:9c:b1:65:a2:ea:ae:3d:e2:35:9a:9a:47:f9:
5f:1a:b9:fe:16:7c:5e:cd:73:c3:b0:9b:cb:75:05:
01:01:24:e5:68:4d:26:bb:a2:77:bc:9e:c5:42:c7:
a3:22:d7:6c:d6:6b:ed:fa:09:f6:fe:35:13:e7:07:
35:39:6b:c3:22:27:e5:d6:a7:b1:da:6f:04:8a:35:
47:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C1:4E:5D:AC:85:00:C3:FA:9B:D0:18:70:1C:AB:45:7F:0B:F5:D7
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ucFOXayFAMP6m9AYcByrRX8L9dc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.112.0/20
Signature Algorithm: sha256WithRSAEncryption
56:f7:cd:a0:58:19:41:16:89:6f:dc:0e:01:c3:7b:5a:84:1f:
2d:b8:e7:a2:4a:33:f8:27:0e:1a:97:56:e0:6b:7c:69:97:af:
3a:cc:8d:b2:bd:1c:2a:f0:9d:f4:67:e8:94:c9:29:28:c1:d2:
62:14:ec:fe:86:cb:43:6d:49:dd:d2:88:9b:66:fe:2f:d4:f6:
fa:2b:0f:00:68:5f:77:89:93:4c:f1:a8:b8:c7:3e:c2:b6:d6:
da:c9:07:24:ef:f9:1b:9b:9f:5b:70:b5:00:3c:4a:a8:c9:50:
2e:b2:a8:14:14:6b:5b:7b:05:78:ec:29:90:5e:6f:24:60:27:
ad:ba:3c:a6:dd:dc:e7:85:ac:db:db:13:d0:16:bf:f4:0d:98:
58:f9:ce:23:9e:14:3c:39:27:39:13:9a:c6:25:fb:23:f3:c8:
55:03:3d:df:88:0f:05:2d:c9:c1:91:e7:a6:73:2b:20:33:06:
66:fd:f5:12:da:ba:f0:a5:da:1b:78:84:8f:b1:30:11:e7:6c:
5a:1a:70:57:c9:c0:bf:fe:1e:c5:c3:10:12:83:0a:ff:5b:54:
78:4b:4a:43:9d:2f:1d:eb:84:b0:4f:0e:df:30:5b:98:88:32:
2b:3c:04:ad:57:36:e6:25:f5:d6:87:7c:06:c0:1d:b1:a0:6f:
7f:8e:46:ef
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIcQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw
NTMzMjBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEI5QzE0RTVEQUM4NTAw
QzNGQTlCRDAxODcwMUNBQjQ1N0YwQkY1RDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVFqbjUwMTkKaH+ZFQ485WuFajbKdGNpETb5HYTElIrFf+8RlP
s3qH5Jr6ChCEZVQANm5F9ydoY3nfCYHOPMz343uoSoCfacocC6AKPTbP8KHxPPJ4
yWSXxUixUVyL+1AGKLorXfEwsNXeMOuU829FxIhY1E3NiuvlCJVrBcPezoDD0gpB
4HMaEDtC4/G4kLAtLSJMIsLOx+/xYNmthC5fOt0DgZ9mIxhaXNVtIgnY+4DnwZvS
nLFlouquPeI1mppH+V8auf4WfF7Nc8Owm8t1BQEBJOVoTSa7one8nsVCx6Mi12zW
a+36Cfb+NRPnBzU5a8MiJ+XWp7HabwSKNUdzAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUucFOXayFAMP6m9AYcByrRX8L9dcwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3VjRk9YYXlGQU1QNm05QVlj
QnlyUlg4TDlkYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ9
OnAwDQYJKoZIhvcNAQELBQADggEBAFb3zaBYGUEWiW/cDgHDe1qEHy2456JKM/gn
DhqXVuBrfGmXrzrMjbK9HCrwnfRn6JTJKSjB0mIU7P6Gy0NtSd3SiJtm/i/U9vor
DwBoX3eJk0zxqLjHPsK21trJByTv+Rubn1twtQA8SqjJUC6yqBQUa1t7BXjsKZBe
byRgJ626PKbd3OeFrNvbE9AWv/QNmFj5ziOeFDw5JzkTmsYl+yPzyFUDPd+IDwUt
ycGR56ZzKyAzBmb99RLauvCl2ht4hI+xMBHnbFoacFfJwL/+HsXDEBKDCv9bVHhL
SkOdLx3rhLBPDt8wW5iIMis8BK1XNuYl9daHfAbAHbGgb3+ORu8=
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:43:40 2025 by rpki-client