Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4dU2IhW4BZJ1IonnqutvWMUyu0g.roa
File: 4dU2IhW4BZJ1IonnqutvWMUyu0g.roa (raw, json)
Hash identifier: VSTU99QCBfJgOJnO3Y61pcAmfdfS9qjk8+CD/3DPMFw=
Subject key identifier: E1:D5:36:22:15:B8:05:92:75:22:89:E7:AA:EB:6F:58:C5:32:BB:48
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 22B1
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4dU2IhW4BZJ1IonnqutvWMUyu0g.roa
Signing time: Mon 26 Aug 2024 05:34:16 +0000
ROA not before: Mon 26 Aug 2024 05:34:16 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4662
IP address blocks: 61.58.112.0/20 maxlen: 20
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8881 (0x22b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:34:16 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E1D5362215B80592752289E7AAEB6F58C532BB48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:12:55:71:eb:6a:d6:7f:89:10:2f:b3:e7:b0:
19:e4:24:25:9f:11:83:45:35:84:2f:22:6b:3d:9d:
4a:87:94:94:d5:f1:a2:b2:fe:ea:69:50:50:e6:9a:
9e:66:de:a6:94:7e:6f:69:0c:44:47:f4:f1:6f:7d:
d1:4e:60:a3:51:14:32:48:f0:3a:a5:83:e1:56:2e:
33:e4:68:11:9d:9b:8a:c6:f3:80:c1:20:4f:0e:38:
ef:da:3e:67:24:42:8a:0d:23:2c:f9:9c:a7:e3:20:
c5:f3:26:b8:68:6b:3e:d2:47:da:71:c5:1f:b5:76:
14:c2:df:40:8d:f2:a9:f3:17:c7:c5:9e:4f:3c:59:
34:20:07:02:37:5b:7d:fd:97:a3:54:d3:ac:78:5e:
4a:51:3e:eb:96:94:1c:7c:e8:74:ab:41:55:65:ed:
20:5a:84:2f:bb:f0:7b:92:83:0d:a1:4f:b9:00:5e:
97:d2:1d:79:8c:81:84:06:f8:16:09:63:9e:78:e5:
73:16:cf:e0:d5:fa:50:20:60:ad:74:7d:d0:d5:2e:
d8:c9:c1:69:fb:c0:e1:c8:ed:11:4b:33:c3:81:5e:
4d:ec:85:e2:59:e3:b0:3f:0b:6d:2c:a3:c4:7e:f8:
9d:26:6d:68:f2:6b:ea:e4:97:da:be:3a:25:90:2e:
a7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D5:36:22:15:B8:05:92:75:22:89:E7:AA:EB:6F:58:C5:32:BB:48
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4dU2IhW4BZJ1IonnqutvWMUyu0g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.112.0/20
Signature Algorithm: sha256WithRSAEncryption
3e:f0:a4:67:90:14:5f:c8:cd:5b:51:ef:ff:e8:b8:1c:39:56:
c0:1e:79:b1:ee:bb:27:d4:fe:fc:4b:79:dc:1c:92:b2:e5:26:
3f:16:53:22:6c:cd:a4:dd:5a:f8:2e:f7:f3:13:79:49:51:f2:
2d:b2:85:cd:4b:a7:7e:e8:67:72:c7:0e:d3:c2:a6:b2:48:51:
0f:13:92:06:53:0d:fd:67:91:0a:99:48:d1:e5:c8:37:18:0c:
79:71:ae:fc:40:83:49:83:69:cc:5d:78:48:34:f3:e4:13:6b:
2e:63:74:4c:c8:95:76:e4:9d:be:aa:a5:03:04:a7:7e:c1:69:
3d:c5:f6:c2:89:05:f1:55:df:ba:69:26:47:a0:7b:e2:6d:17:
0b:55:3b:da:04:10:83:eb:6e:39:92:48:cf:c0:4f:24:a3:7e:
bd:9d:38:de:cb:bb:c3:9f:15:26:4d:6e:25:e1:bf:63:1f:ff:
3b:b6:94:d4:04:61:0b:fc:c3:b2:b6:d8:4b:5d:9c:5d:d1:50:
c9:a6:dd:c4:61:7f:57:c2:9d:e4:df:15:e1:4b:c7:f4:2b:cd:
7b:8a:9e:a9:99:c8:44:fa:1a:dc:82:24:51:12:29:a2:1d:b2:
34:84:e9:24:d5:e0:f1:c9:3c:34:87:6e:b3:41:f8:37:14:a4:
f6:06:f2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:06:35 2025 by rpki-client