Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/F7NdJiZ-d3zqAjSGGI_DSlh_7Ic.roa
File: F7NdJiZ-d3zqAjSGGI_DSlh_7Ic.roa (raw, json)
Hash identifier: iMhbBaKp+krbeInnW1ThxazWIEIPCS8N1kYtQyPf8kc=
Subject key identifier: 17:B3:5D:26:26:7E:77:7C:EA:02:34:86:18:8F:C3:4A:58:7F:EC:87
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 2231
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/F7NdJiZ-d3zqAjSGGI_DSlh_7Ic.roa
Signing time: Mon 26 Aug 2024 05:33:46 +0000
ROA not before: Mon 26 Aug 2024 05:33:46 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 49.159.64.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:17:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8753 (0x2231)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:33:46 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=17B35D26267E777CEA023486188FC34A587FEC87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:25:84:97:c8:30:f2:32:dd:c4:cf:8a:50:74:
8d:56:a9:6e:e1:07:69:81:cb:64:c5:b0:59:37:cd:
2c:af:17:af:d1:14:e4:71:ab:7e:ca:dc:f1:e1:4e:
0c:65:56:32:a7:6c:d8:19:91:72:a6:f5:04:90:90:
53:ba:17:be:25:dc:4e:11:41:3e:f2:ce:71:11:0e:
6a:6c:2d:33:e6:58:88:f7:5f:3d:48:0e:03:5f:60:
dd:a0:08:1a:5f:e0:e3:d1:b8:20:01:c4:00:b0:4c:
df:f7:85:68:e3:95:10:86:3c:d3:db:80:72:d9:fa:
74:4f:b1:a3:c3:b5:cc:6b:83:5c:8d:b5:13:d6:fd:
2f:fd:ad:67:bf:f8:7b:22:d4:92:5d:79:0e:f0:b1:
cf:c4:24:ce:cc:f3:31:7d:b8:da:6f:f0:79:7f:f1:
92:2b:5c:8f:87:9d:31:03:c2:03:0d:72:40:b2:52:
6a:f9:a4:6e:14:83:5e:58:51:96:4e:be:ae:ab:07:
51:38:ab:f2:f9:92:ca:59:a0:7a:5a:a3:bb:65:92:
bb:3f:5c:9f:62:84:af:10:80:b3:78:0e:9b:1d:85:
59:b6:78:5e:6f:cb:49:8a:6a:d9:65:fc:90:d0:aa:
15:53:61:90:59:63:4f:17:6e:af:19:5a:78:61:12:
6e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B3:5D:26:26:7E:77:7C:EA:02:34:86:18:8F:C3:4A:58:7F:EC:87
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/F7NdJiZ-d3zqAjSGGI_DSlh_7Ic.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.64.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:b4:6d:e3:c2:ae:ca:66:93:9d:ec:43:1e:db:b4:cb:c9:64:
74:f3:f5:45:ed:f3:3f:42:44:8b:f4:bd:65:6e:20:ee:a7:20:
7e:7c:56:f0:dd:95:22:8c:0e:6d:2d:99:b1:cb:22:72:b7:17:
99:da:d0:15:70:0a:dc:21:f4:ae:a1:64:56:2f:ef:4d:8a:3a:
4f:06:7c:45:60:32:74:03:3e:3c:4f:f1:3c:f7:0f:62:87:7f:
98:fa:29:25:48:58:02:16:9f:f0:fc:6b:21:12:98:25:2c:d3:
be:12:13:ba:95:36:28:f2:0e:df:e2:45:40:2a:9d:39:d4:5a:
be:d8:c3:0f:5b:34:6b:83:ea:2c:ca:70:26:31:96:2f:00:92:
3f:56:74:7d:b3:f2:58:5a:e2:a0:fc:66:ff:47:2b:05:9b:50:
ac:54:c1:e6:61:72:bd:ba:5b:cc:d6:2b:18:97:be:5f:45:80:
76:e8:85:22:78:76:e0:54:e8:79:60:a4:21:9b:75:7c:ee:18:
3a:ad:d6:51:57:02:6e:ac:85:59:2f:e5:f5:33:1c:bc:12:f7:
65:47:9a:3d:b1:41:31:43:bd:3a:c7:8a:98:f2:9d:29:78:f1:
e6:50:be:50:c4:f2:64:92:51:05:b1:1e:54:0c:8c:09:f5:14:
b9:4f:b3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:00:58 2025 by rpki-client