Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yablk_qgSkPaY1eT-7F2nRYL8u4.roa
File: yablk_qgSkPaY1eT-7F2nRYL8u4.roa (raw, json)
Hash identifier: MLYOfRIju5oh/yVFgJ+e/vqLCLOxNlO0tZRPAUpR1Uk=
Subject key identifier: C9:A6:E5:93:FA:A0:4A:43:DA:63:57:93:FB:B1:76:9D:16:0B:F2:EE
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 2164
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yablk_qgSkPaY1eT-7F2nRYL8u4.roa
Signing time: Mon 26 Aug 2024 05:32:57 +0000
ROA not before: Mon 26 Aug 2024 05:32:57 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 49.158.44.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:18:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8548 (0x2164)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:32:57 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C9A6E593FAA04A43DA635793FBB1769D160BF2EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4d:e8:3d:41:ed:28:a7:a1:ff:6f:04:17:f9:
49:13:ee:65:7a:e1:19:b7:26:54:2d:ea:07:15:7f:
d6:75:f3:c5:bd:9f:79:d4:ec:42:63:01:17:4c:1b:
74:bd:de:1e:59:44:1f:88:8b:ea:49:9a:ec:08:eb:
4b:08:69:22:d6:9f:ca:d6:67:3e:27:5b:85:0e:da:
e8:76:ba:48:7a:f1:0f:d2:cf:bf:91:76:c7:97:24:
2c:ee:ec:ac:3a:1b:49:a6:71:5a:f1:f7:ec:ef:8a:
7c:75:d5:06:3b:ee:9a:da:37:8c:76:79:94:64:f4:
27:ed:7c:6f:07:23:51:fb:75:03:4a:b4:10:b9:51:
53:72:5a:c1:04:6f:c0:06:42:ee:77:ff:30:14:22:
57:f1:cd:c0:c1:f0:7b:4c:6f:df:d0:2b:de:ed:d6:
3a:79:a7:43:0b:ee:7c:88:fc:3e:96:84:58:c4:f5:
f0:6d:53:16:02:63:34:f0:df:46:06:61:a8:8b:b2:
a8:3f:87:22:51:07:ab:7e:53:d9:57:96:84:78:c9:
20:68:f4:0e:f3:4a:37:7b:a7:3c:8a:52:cc:a9:4f:
56:7f:21:81:a8:28:22:9c:b0:e3:c1:c6:ea:6b:24:
c4:1a:7d:78:29:b1:32:1a:40:f9:fb:88:4e:2d:11:
de:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A6:E5:93:FA:A0:4A:43:DA:63:57:93:FB:B1:76:9D:16:0B:F2:EE
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yablk_qgSkPaY1eT-7F2nRYL8u4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.44.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:b8:d0:6e:18:95:93:e3:68:36:1a:0b:59:08:df:6b:22:3d:
4a:81:18:49:17:c4:29:7c:ac:9b:13:9f:19:fb:fd:d4:1f:29:
38:5e:ea:17:0a:d9:7e:d9:c3:49:48:eb:59:fe:06:6c:68:44:
ed:57:3e:fa:9c:68:23:ad:f3:27:91:b4:4d:49:66:0c:65:b6:
e5:2f:da:cf:3f:d6:e3:fb:ca:a1:d4:47:a1:e6:15:32:a9:2b:
92:36:e8:64:c3:9c:f0:da:a2:0c:1d:e6:52:f9:df:53:7b:06:
52:71:8b:6d:92:5b:5a:a7:49:9f:3d:b3:68:67:5d:ee:6d:2f:
c1:65:14:7c:a5:73:ba:83:3d:26:e9:ee:33:b0:22:d1:47:1b:
8a:8e:dd:99:10:5e:c8:f1:cf:50:a6:0d:11:15:e2:cb:4e:a1:
64:00:f8:68:27:2b:d7:1d:87:58:5b:93:e1:cc:b3:11:a2:a6:
2c:7d:03:17:5a:2b:8a:73:cf:eb:88:ef:d3:b8:32:21:f2:94:
fa:10:30:38:89:76:d9:5b:f5:f6:55:da:05:b2:94:ea:08:a1:
45:4b:f3:be:e5:5c:0c:8e:07:ce:12:ad:9f:94:61:7d:cf:9b:
d2:aa:a4:de:44:cd:61:32:c7:c7:a1:9d:2b:11:ac:71:ad:fd:
a3:18:43:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:41:10 2025 by rpki-client