![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AUR7NrfEEzgvLjvxILTO_wfIPTE.roa
File: AUR7NrfEEzgvLjvxILTO_wfIPTE.roa (raw, json)
Hash identifier: /kbqK3CtuTWP0MhL3WoMrdHtT0gDWNHwSIzej21ao+I=
Subject key identifier: 01:44:7B:36:B7:C4:13:38:2F:2E:3B:F1:20:B4:CE:FF:07:C8:3D:31
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 21DA
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AUR7NrfEEzgvLjvxILTO_wfIPTE.roa
Signing time: Mon 26 Aug 2024 05:33:24 +0000
ROA not before: Mon 26 Aug 2024 05:33:24 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24165
IP address blocks: 122.254.24.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:18:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8666 (0x21da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:33:24 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=01447B36B7C413382F2E3BF120B4CEFF07C83D31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6f:1a:4a:a1:80:42:ed:b6:e2:54:54:b8:7b:
c7:8f:ac:a9:40:4a:ca:ad:97:97:b4:19:84:7a:e7:
50:29:44:35:b5:92:5d:57:6d:f5:a5:49:e7:5f:17:
05:69:20:2d:6c:79:3e:c2:ed:87:6e:cd:35:2f:e7:
39:84:4b:09:bf:cc:da:21:ad:39:43:c1:cd:94:26:
3c:ca:21:44:5f:da:56:96:11:5c:40:86:fb:10:97:
5d:95:cd:7b:7d:e7:8d:0e:fc:4d:b9:51:d5:3d:41:
86:f9:ec:9a:a5:97:7b:df:f6:73:d0:db:37:a8:f0:
5e:e6:88:74:da:f0:37:b5:1e:c0:9f:d6:05:5a:f4:
b4:b5:53:a6:92:47:19:58:2e:6b:8a:53:d1:54:76:
e3:60:fa:37:3d:87:a1:4c:6b:48:6b:21:e7:fb:05:
8c:2f:8a:40:cf:74:d8:e7:38:5c:d2:91:45:76:23:
4a:5f:e1:02:85:3d:f1:f7:4f:4f:bf:87:29:74:eb:
c1:ff:4f:57:7b:1d:e9:18:6d:31:34:26:be:4e:45:
04:c8:c7:59:8e:b8:1e:d2:ba:15:8f:e1:58:6e:9c:
df:1e:12:bd:4e:df:05:fb:37:22:55:a5:aa:76:d5:
63:59:8f:8e:79:00:49:84:11:10:a8:11:b5:bf:f6:
a7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:44:7B:36:B7:C4:13:38:2F:2E:3B:F1:20:B4:CE:FF:07:C8:3D:31
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AUR7NrfEEzgvLjvxILTO_wfIPTE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.24.0/21
Signature Algorithm: sha256WithRSAEncryption
0d:11:84:2f:36:35:62:17:f0:a1:fa:76:ca:a3:df:e2:5f:b5:
7a:76:b3:7f:fa:0a:92:f5:00:47:b2:4f:2c:b2:b2:0a:56:d4:
69:b6:6d:88:4a:7a:e1:54:4d:5e:e5:5a:07:ae:d5:3f:22:63:
d9:a6:d4:df:a1:8b:8b:45:26:c8:9c:91:6b:32:07:27:8f:77:
85:39:63:af:22:ad:e5:40:1d:47:88:dc:53:28:ed:d4:b5:de:
97:c8:0b:18:72:ec:ee:7a:9f:1e:69:07:67:17:5f:7e:d5:66:
47:8e:ba:b8:a5:e3:11:07:a5:e0:e6:8f:54:ff:8c:77:38:44:
2c:2d:71:47:f5:c4:76:ee:62:6e:4e:a7:7c:38:e2:5c:82:e9:
35:00:00:1a:bc:b1:62:93:61:dd:83:07:4d:8a:30:b5:61:82:
70:f9:7f:22:20:b7:c0:27:fa:6e:8a:12:a1:78:ad:78:01:11:
1a:fd:63:6a:1a:05:bd:79:50:ee:b1:ea:3e:da:a9:c8:7e:04:
7f:d9:78:75:ed:21:09:c9:fd:67:0a:b9:9e:f8:1e:a1:4e:23:
77:e3:50:ba:99:d6:b1:df:66:58:96:b5:1e:c9:cb:e2:87:af:
f0:7e:2b:e1:4e:24:31:7a:b8:9e:d2:73:27:17:f2:da:b5:57:
c2:bb:e5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:52:59 2025 by rpki-client