Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wNt0PEpW5i2Nua33NQDutx4h7MI.roa
File: wNt0PEpW5i2Nua33NQDutx4h7MI.roa (raw, json)
Hash identifier: AfIbXht/qBZqm4qXF4mfgR4suXB9MV5V4+kmLsxHEEI=
Subject key identifier: C0:DB:74:3C:4A:56:E6:2D:8D:B9:AD:F7:35:00:EE:B7:1E:21:EC:C2
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 22C8
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wNt0PEpW5i2Nua33NQDutx4h7MI.roa
Signing time: Mon 26 Aug 2024 05:34:22 +0000
ROA not before: Mon 26 Aug 2024 05:34:22 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24163
IP address blocks: 122.100.120.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:18:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8904 (0x22c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:34:22 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C0DB743C4A56E62D8DB9ADF73500EEB71E21ECC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d2:96:a5:2e:be:5a:cb:30:e0:98:8f:2d:74:
39:d2:ce:b4:45:96:c5:97:1d:11:d0:0d:fd:cd:aa:
50:c9:48:a3:8e:1a:20:58:9c:c2:35:db:a3:51:20:
49:6a:1b:d4:62:bb:bd:ea:fa:1d:a6:af:b5:76:f4:
ef:b8:24:2b:87:cb:0d:ff:b3:bd:01:f8:94:bc:22:
4d:c2:91:aa:f5:03:54:fb:ec:5c:f1:f6:8c:23:ad:
ac:08:f3:47:3f:c6:fd:be:33:f5:88:d9:ed:0b:87:
f4:a7:67:62:36:ef:c7:24:22:3e:34:41:68:1e:94:
8b:19:29:48:fc:52:1e:1a:a5:61:53:b3:de:3b:be:
51:63:5e:25:93:8a:1e:cc:37:a7:37:cf:46:87:51:
0d:e2:b0:b0:7a:0e:2a:68:49:d3:4a:1f:ff:79:7a:
35:08:d6:39:93:2c:6a:45:10:7e:90:a2:8d:be:11:
85:57:36:e0:94:54:fe:e7:0c:e6:fd:7a:82:0f:1f:
ad:86:d2:d9:32:49:78:8a:5a:0d:6d:36:1e:f5:9d:
c9:2a:8a:d5:c8:10:f8:6a:16:82:d0:27:d8:29:f4:
13:50:12:16:22:c5:92:25:91:2d:62:93:52:42:7c:
ab:71:ca:9d:24:c6:9c:90:38:ce:bc:b0:23:48:8c:
ee:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DB:74:3C:4A:56:E6:2D:8D:B9:AD:F7:35:00:EE:B7:1E:21:EC:C2
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wNt0PEpW5i2Nua33NQDutx4h7MI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.120.0/22
Signature Algorithm: sha256WithRSAEncryption
99:af:58:4a:a6:a7:d0:7e:41:db:ae:82:24:1d:19:d5:98:16:
1e:58:f5:9e:51:cc:c5:44:78:2f:c3:c7:c8:90:8e:9f:1d:d5:
72:88:13:74:97:ed:4a:74:1a:2d:f1:ab:2e:c4:9e:ef:ea:88:
bd:8d:2c:bc:c2:1c:cd:01:00:75:79:99:81:ad:fa:f0:af:ed:
7b:05:53:ae:2f:33:8e:03:fc:12:28:33:fa:a0:93:14:cc:ab:
80:cc:49:d2:7e:5c:49:c5:6a:36:5c:eb:d6:ed:af:e0:0d:10:
df:e2:70:51:89:bc:c7:66:2b:91:09:01:fb:f7:aa:7c:f9:87:
75:82:b2:58:5e:00:0d:24:30:3a:38:1b:f1:30:18:81:59:b9:
54:2e:8c:87:31:73:89:df:4e:72:db:76:3b:90:5c:80:57:5f:
c3:50:48:e0:96:f9:1b:da:0c:f8:a1:74:4f:ea:ec:f8:68:fb:
a1:08:3e:d4:38:97:9a:2b:dc:06:1a:57:e5:15:fb:a9:6a:a7:
7c:7a:41:42:b7:1f:33:bc:3d:10:07:2e:90:33:2b:78:f3:cd:
00:03:cf:6d:e2:73:e9:29:dc:8d:61:18:88:9f:a3:71:85:3c:
30:ed:7c:58:a7:b0:f5:f6:05:0f:44:f9:ca:48:54:35:72:2f:
7f:ee:76:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:34:28 2025 by rpki-client