Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zaI9utpO7LNxeEaTvNU95Rrwrfk.roa
File: zaI9utpO7LNxeEaTvNU95Rrwrfk.roa (raw, json)
Hash identifier: kliT3rRNQjRUl4iS+TQAE0925R6Ed3ZOQNWiFpb1HWU=
Subject key identifier: CD:A2:3D:BA:DA:4E:EC:B3:71:78:46:93:BC:D5:3D:E5:1A:F0:AD:F9
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 21AC
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zaI9utpO7LNxeEaTvNU95Rrwrfk.roa
Signing time: Mon 26 Aug 2024 05:33:14 +0000
ROA not before: Mon 26 Aug 2024 05:33:14 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 180.218.0.0/17 maxlen: 17
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:18:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8620 (0x21ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:33:14 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=CDA23DBADA4EECB371784693BCD53DE51AF0ADF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9c:78:0f:42:8e:b7:d6:93:08:d2:1d:ee:69:
cb:d8:84:57:01:ce:6e:43:88:28:9c:44:d4:f0:04:
00:11:ec:c3:1c:4d:3c:08:a0:54:ac:0c:f6:48:35:
22:94:fb:f7:0b:ca:84:7d:66:a2:fa:02:b2:85:a3:
c4:44:20:bd:39:9c:02:d3:17:a3:17:08:2f:90:07:
d4:d0:81:88:d0:09:b1:e4:26:31:24:6a:c7:65:5b:
c7:7e:0b:3c:58:83:67:bf:32:66:9f:8d:f6:52:cd:
98:f3:4d:27:3e:1f:8b:6b:f7:81:d6:2b:42:8d:02:
bb:f0:76:5f:ac:3f:bb:3c:fb:e2:fc:fc:b7:69:38:
4d:e5:3f:79:65:d7:55:c6:c3:df:38:5b:1b:b9:a0:
59:e4:5c:15:2a:f1:61:a4:f3:59:24:f4:40:50:7b:
de:f2:ac:49:5f:33:69:b3:6b:ae:ce:d6:00:14:6f:
94:3e:93:d4:d9:9e:25:f9:25:5d:23:2e:8b:7c:83:
74:ca:99:4e:ea:9a:fe:d8:59:2a:7e:f0:16:d6:c1:
9c:81:fd:eb:cf:e5:f1:39:01:45:b4:40:79:82:7c:
20:de:f2:5c:ba:fb:ed:06:e6:44:27:f6:a1:0f:b4:
2a:92:6b:3c:ab:55:ba:2e:56:3a:f0:a6:9f:66:7d:
65:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A2:3D:BA:DA:4E:EC:B3:71:78:46:93:BC:D5:3D:E5:1A:F0:AD:F9
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zaI9utpO7LNxeEaTvNU95Rrwrfk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.0.0/17
Signature Algorithm: sha256WithRSAEncryption
35:e5:0f:b5:d3:cb:15:88:5b:49:16:c1:65:c5:6c:c8:17:4d:
5c:5b:16:a0:09:77:ff:e7:c4:0f:72:78:64:65:b5:06:2a:d7:
ae:ff:bc:af:ca:8b:2c:98:b9:fc:38:e6:b5:e9:14:ba:97:a2:
b8:b8:4e:e3:90:c4:00:59:94:94:e1:95:0f:a1:b3:a2:0b:71:
05:a5:bd:9f:e6:d9:e7:70:f5:fe:b6:21:6a:26:14:62:d9:cb:
7b:d1:a7:a8:a5:c4:b9:0d:73:f0:09:84:b3:f0:5a:bd:c3:3d:
72:97:6f:c0:27:90:59:3e:01:fb:0c:5b:fc:5d:30:e5:69:15:
46:d5:80:9a:ae:9b:c5:71:1b:9e:ac:0d:1f:03:84:93:ba:33:
cf:d5:76:d3:40:5e:de:d2:9f:e3:ec:85:71:ee:b3:cd:ea:65:
42:09:d7:34:f2:65:91:fb:5f:cb:bf:15:ed:05:30:28:82:16:
5a:28:d7:b1:82:dc:ab:86:9a:ad:d9:e4:1b:9d:e2:cb:e7:65:
17:74:63:b7:7c:3e:8e:d2:e0:d4:8d:05:1f:c0:eb:bb:b3:36:
e2:9f:c1:f8:08:2a:42:62:43:e9:73:ad:96:e6:81:5f:78:8e:
59:b8:6a:e1:69:a8:4e:69:a9:fd:4a:ac:3f:1e:00:fd:45:b8:
9e:27:e3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:47:34 2025 by rpki-client