Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/34tUG6k7fd8At2mVfS-REV1IzVc.roa
File: 34tUG6k7fd8At2mVfS-REV1IzVc.roa (raw, json)
Hash identifier: sSQ+FxzrhM+uUlSTi7spV0VWVsNnj37vymKGVjylDOw=
Subject key identifier: DF:8B:54:1B:A9:3B:7D:DF:00:B7:69:95:7D:2F:91:11:5D:48:CD:57
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 2165
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/34tUG6k7fd8At2mVfS-REV1IzVc.roa
Signing time: Mon 26 Aug 2024 05:32:57 +0000
ROA not before: Mon 26 Aug 2024 05:32:57 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 49.158.96.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:18:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8549 (0x2165)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:32:57 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=DF8B541BA93B7DDF00B769957D2F91115D48CD57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e7:30:c8:a9:b2:f7:b3:ef:66:83:e0:7b:74:
6b:7c:60:d3:8b:c4:4e:15:82:a7:e1:93:3a:80:05:
a9:2a:2e:7f:3a:8b:df:b6:68:4a:db:d2:81:9c:22:
b6:ab:10:a7:e9:a4:82:c3:46:4f:16:6c:a4:42:0f:
1c:2c:f9:c8:3f:a8:68:1e:75:aa:ba:fe:51:b9:78:
55:d5:a4:95:80:de:fe:47:69:09:51:43:e6:04:0c:
17:2b:b7:61:90:7a:43:86:2d:ba:49:9d:8c:f1:3c:
7c:ee:2d:d2:a0:b1:bc:d8:74:f9:c4:f0:80:04:f1:
47:92:7f:f3:56:3c:4a:63:4b:d7:5b:46:17:6c:f2:
16:e3:7d:fa:cf:d8:85:4f:c6:c5:11:29:7e:9c:49:
7a:88:a0:1c:31:b4:c9:58:ed:d8:6d:be:1f:27:b6:
c6:43:6e:ee:77:fa:8a:3a:19:45:1e:84:b9:eb:38:
b8:ec:dc:ec:02:73:f7:4d:cb:58:f8:ff:5e:65:86:
e5:9f:ce:6e:13:4b:38:1f:74:f2:72:13:34:84:d9:
e6:d4:c1:83:b6:8a:0a:03:c1:c1:48:e5:84:ba:51:
61:47:3d:73:9c:82:f9:e1:02:06:6f:1d:a4:26:38:
64:17:08:c7:b4:5c:c5:a9:bd:3c:c6:5d:02:35:5c:
1c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:8B:54:1B:A9:3B:7D:DF:00:B7:69:95:7D:2F:91:11:5D:48:CD:57
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/34tUG6k7fd8At2mVfS-REV1IzVc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.96.0/21
Signature Algorithm: sha256WithRSAEncryption
32:02:40:db:a1:4b:84:5a:ff:d6:df:6a:02:0c:51:63:16:a4:
80:63:96:cf:83:09:c1:15:da:96:81:41:05:54:fa:a4:ce:ec:
13:95:99:73:d0:c3:5c:f1:d2:93:66:39:7c:65:b2:18:0d:29:
ca:95:7d:dc:44:41:1f:d4:2f:2d:1e:2a:e4:f4:64:7b:44:e2:
f8:93:73:bc:f4:69:ac:cb:8c:9c:4d:1b:6f:3a:3c:07:f0:bd:
71:4a:bf:9a:d4:4e:59:19:6e:bc:62:62:c8:e5:0d:de:38:a7:
9c:f6:63:4c:91:6d:1e:f3:69:62:b9:6c:88:36:f6:60:64:4b:
5d:4a:f7:46:fd:7e:02:86:55:f2:a8:01:6f:1d:65:df:ab:e9:
8f:88:38:51:08:69:0a:97:5a:90:a4:9e:e4:ae:e4:fa:e4:2a:
9b:7c:c9:9d:36:f0:99:5c:57:c0:36:b9:81:86:03:53:a7:5b:
6b:77:59:e8:bd:70:00:a7:9a:0b:2c:7b:54:4b:62:b7:03:74:
9c:f3:ac:f1:58:be:51:60:f0:75:86:38:d6:77:3a:8c:a0:b6:
8c:b4:94:e8:e8:f6:e6:eb:fb:f3:9e:fc:17:07:f3:9e:81:8f:
1e:c7:33:b8:94:4a:2b:5c:c6:d8:22:8a:8d:df:c2:56:80:fa:
7a:e4:f9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:47:20 2025 by rpki-client