Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/C6xokYlazVvlqgjrqC7lk3WHSMU.roa
File: C6xokYlazVvlqgjrqC7lk3WHSMU.roa (raw, json)
Hash identifier: yb4LdqScVE5tH2HDkRNEi4aJYJQbSU3Vt3Z6vLWV6po=
Subject key identifier: 0B:AC:68:91:89:5A:CD:5B:E5:AA:08:EB:A8:2E:E5:93:75:87:48:C5
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 223F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/C6xokYlazVvlqgjrqC7lk3WHSMU.roa
Signing time: Mon 26 Aug 2024 05:33:49 +0000
ROA not before: Mon 26 Aug 2024 05:33:49 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 61.56.160.0/19 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:17:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8767 (0x223f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:33:49 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=0BAC6891895ACD5BE5AA08EBA82EE593758748C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6f:fc:f4:07:74:ba:7b:e5:92:09:d0:a9:16:
bf:ce:d0:55:95:59:4d:8a:f7:ac:0c:23:38:32:ab:
b2:41:5b:e1:c9:3b:34:e5:08:9a:c9:b1:7a:78:72:
aa:a6:28:a6:ae:af:5d:3a:7e:a8:e3:f0:b4:a8:a7:
d6:a5:62:94:4a:7d:ae:d6:01:66:c6:ca:3a:cd:82:
2f:7a:7b:ac:d6:14:17:cb:41:c2:2b:65:d5:f3:8c:
e2:5d:c2:c0:b1:9e:95:d5:c6:62:ae:d7:3c:9b:79:
65:52:b7:20:79:d2:a8:e4:2c:97:56:af:22:cd:af:
49:85:a0:d8:15:96:f2:b9:78:ae:87:f2:51:93:2b:
1a:31:f4:e6:5f:05:eb:55:8c:2f:3d:49:bc:95:ee:
f8:49:b0:b8:32:64:11:ec:a8:cb:f6:b2:ec:a0:52:
42:b8:86:f7:45:3e:26:8a:8b:98:ad:6e:db:4b:94:
3b:0a:80:2d:eb:7f:72:53:a5:68:da:f9:56:d8:86:
45:2e:c3:81:37:09:7d:6a:02:26:40:da:2a:2a:57:
53:b6:64:c0:65:01:ef:24:34:b3:70:cd:28:90:a1:
69:18:e5:f0:2e:44:24:e9:dd:9b:83:a7:90:e3:6f:
4c:3e:fa:d7:e4:d6:0f:78:cc:c1:9a:28:d0:07:ed:
59:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AC:68:91:89:5A:CD:5B:E5:AA:08:EB:A8:2E:E5:93:75:87:48:C5
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/C6xokYlazVvlqgjrqC7lk3WHSMU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.160.0/19
Signature Algorithm: sha256WithRSAEncryption
45:4c:34:0a:16:05:32:ec:61:c3:ff:8d:e5:e8:a5:9e:d7:51:
1b:3d:46:3c:54:2f:03:ff:a7:6b:82:80:dd:e2:02:d1:d1:53:
fb:a3:e4:e1:a0:5e:7c:de:c9:e1:c1:5b:ee:09:da:ed:db:9b:
12:df:64:0c:a2:a6:de:cc:b3:24:86:b5:5e:cb:3f:15:46:68:
56:ee:78:c0:b3:b0:a6:dc:a7:c8:24:86:47:25:6c:58:e0:a7:
4b:38:cb:8c:1b:f3:50:af:e0:91:03:f3:c0:68:4e:33:01:81:
91:c5:01:6a:b3:fd:9d:78:b5:3e:d2:f4:4d:4e:85:5d:94:e0:
35:43:1f:11:1b:27:2a:f3:4e:df:cd:49:bd:2a:0a:d2:eb:2b:
59:35:b8:6e:17:1c:48:7d:bd:ae:51:59:ad:b4:d6:16:38:c3:
98:f6:a4:fa:77:2c:cb:c2:be:ff:8b:ab:c9:8e:58:19:26:99:
98:49:7d:69:3d:c4:01:51:d3:1d:06:90:e9:3b:ad:a6:cf:25:
47:bc:d4:c0:a0:91:10:6c:86:d0:3c:fd:9e:ba:62:9d:ad:58:
04:2e:37:f7:66:a7:e6:5e:d0:11:05:1a:f4:0e:53:2f:78:e0:
7e:dc:cb:27:e3:e9:aa:8b:e9:64:a0:bf:00:07:50:29:6d:e5:
c5:9d:cb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:59:24 2025 by rpki-client