Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CCz-GaDWljwbPF9zrYNFX4ik7ho.roa
File: CCz-GaDWljwbPF9zrYNFX4ik7ho.roa (raw, json)
Hash identifier: M8J2fZDXPGmkMEswBek60g+j3N6o9BRu3Y9Qzsb7aZs=
Subject key identifier: 08:2C:FE:19:A0:D6:96:3C:1B:3C:5F:73:AD:83:45:5F:88:A4:EE:1A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 2195
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CCz-GaDWljwbPF9zrYNFX4ik7ho.roa
Signing time: Mon 26 Aug 2024 05:33:07 +0000
ROA not before: Mon 26 Aug 2024 05:33:07 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24165
IP address blocks: 180.218.80.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:19:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8597 (0x2195)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:33:07 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=082CFE19A0D6963C1B3C5F73AD83455F88A4EE1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:43:fd:8d:1a:07:42:2e:4c:54:06:40:f4:e7:
28:91:14:57:40:13:a5:8e:31:e3:9c:7f:b2:c3:28:
36:bf:34:42:6c:86:7f:26:60:75:09:fa:98:36:3c:
dd:e5:49:31:ac:d3:62:2b:a7:0f:38:6a:cf:1b:de:
9f:9e:1d:93:f5:e7:47:d1:05:db:6a:61:b2:b0:66:
cb:33:68:87:76:69:04:21:26:02:99:0d:2a:14:08:
b9:d4:a3:c4:08:49:0f:73:df:cc:46:a1:df:12:8b:
94:6b:58:92:f4:bf:58:fd:4c:1b:c4:df:e2:ff:5f:
c1:cb:ec:c9:92:a2:eb:f8:f6:b4:9d:d1:0d:a6:93:
ea:a6:ba:1e:4a:0b:6c:48:25:5c:cb:5e:73:e2:77:
95:52:42:1b:98:45:7d:35:25:22:e2:8e:9d:34:8d:
32:1e:dd:50:26:98:90:36:e2:91:8c:19:71:11:23:
86:eb:81:29:24:c1:5d:38:5e:00:ea:0f:43:6b:5a:
c7:71:78:d9:50:75:0e:8e:9e:d5:e8:4f:90:23:aa:
27:92:0d:b2:2e:ea:83:bd:0b:18:6c:d0:2d:75:ec:
4a:85:8e:32:33:1a:1f:4e:95:04:ad:51:4e:29:39:
92:f8:3f:98:8f:50:fe:a7:62:ae:de:ae:95:21:80:
53:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2C:FE:19:A0:D6:96:3C:1B:3C:5F:73:AD:83:45:5F:88:A4:EE:1A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CCz-GaDWljwbPF9zrYNFX4ik7ho.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.80.0/22
Signature Algorithm: sha256WithRSAEncryption
15:1d:62:99:36:cb:8a:c8:a3:17:40:73:d0:c8:c8:1d:4e:48:
cd:d0:44:5d:23:0c:39:7c:d0:91:94:06:90:99:4f:6b:e8:8a:
bb:e8:5c:6c:60:4d:1e:07:82:3a:97:e5:eb:7c:06:96:40:f1:
a7:07:26:5c:b4:29:cf:e6:f7:e3:95:72:e8:1e:f4:22:ae:1f:
c6:97:a6:8a:56:03:dd:12:19:38:4f:44:32:28:f2:26:37:43:
c4:a7:e7:0d:14:f9:2c:6a:2d:d2:1e:a3:6d:54:4b:dd:87:ee:
8f:a2:ce:5d:0c:c7:08:35:3f:9d:79:b1:01:f8:2d:71:d4:5c:
cf:e2:2d:ca:a7:16:7b:fe:c9:b2:5f:37:b9:2b:ff:77:cd:10:
bd:44:ca:e2:96:de:cf:9d:91:a0:4a:c6:b7:42:f8:d0:27:02:
1f:1a:01:c9:fb:c9:f2:8f:65:f8:57:3a:f6:4c:6f:71:1b:66:
a0:77:d8:92:f3:3d:33:c7:c2:55:60:6a:69:ad:84:13:6c:23:
06:d3:f0:44:c6:a0:26:fd:00:7f:42:22:98:d3:d6:2b:89:02:
0d:e8:b4:32:27:4d:50:03:49:9c:70:68:cf:9c:5e:7c:22:33:
2c:85:59:0e:a5:5f:50:31:32:80:98:79:9f:3b:70:5b:b7:24:
bb:70:64:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:07:35 2025 by rpki-client