![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Xmploe5TzHHkW6vKV56vm4LFESE.roa
File: Xmploe5TzHHkW6vKV56vm4LFESE.roa (raw, json)
Hash identifier: IvNawGBRLJXKQA9gKvPl29rCo5THaXi8+jU57Hsj/sM=
Subject key identifier: 5E:6A:65:A1:EE:53:CC:71:E4:5B:AB:CA:57:9E:AF:9B:82:C5:11:21
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 2216
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Xmploe5TzHHkW6vKV56vm4LFESE.roa
Signing time: Mon 26 Aug 2024 05:33:39 +0000
ROA not before: Mon 26 Aug 2024 05:33:39 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24163
IP address blocks: 61.58.96.0/20 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:17:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8726 (0x2216)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:33:39 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5E6A65A1EE53CC71E45BABCA579EAF9B82C51121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:58:07:db:57:37:e4:08:4e:21:c2:bf:d3:7d:
f5:af:5d:47:45:99:f3:8c:e2:50:74:f1:0a:79:b4:
3a:85:78:72:a2:ff:e5:6f:6f:fb:0d:89:3e:98:ce:
d3:4f:80:b5:05:eb:71:d2:91:9e:bf:63:e2:9f:08:
3c:44:cd:8f:7f:7a:8d:72:41:76:1f:63:ce:96:f0:
83:fa:ca:cb:45:7a:4b:2c:fc:87:74:25:8e:75:4f:
dd:de:92:66:8d:6c:32:94:83:98:bb:5d:8c:a8:46:
5a:18:66:ca:2f:65:8b:ee:b8:bb:33:2c:04:19:36:
82:58:8a:a7:d8:1c:85:1d:39:3b:aa:be:6e:9f:e2:
9d:b0:4d:e5:6a:53:ad:f9:98:9b:cb:fd:77:1c:06:
19:1c:00:92:2b:a9:13:3a:34:ec:ef:aa:49:0f:27:
4b:4b:87:70:ae:c4:25:0c:00:f7:89:92:06:5d:fe:
55:1c:b6:c6:54:9d:27:6e:d6:be:36:b1:3d:23:75:
17:d5:dd:32:ea:b7:86:52:10:26:0b:4e:65:f0:4a:
db:1a:29:79:55:35:a1:52:b9:d4:10:b6:71:fa:4f:
08:fd:95:34:d3:fc:53:f2:17:c2:29:98:c8:fa:69:
58:db:f9:5e:ad:7f:82:ff:1c:a2:9b:64:3f:ed:db:
28:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:6A:65:A1:EE:53:CC:71:E4:5B:AB:CA:57:9E:AF:9B:82:C5:11:21
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Xmploe5TzHHkW6vKV56vm4LFESE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.96.0/20
Signature Algorithm: sha256WithRSAEncryption
5b:f6:ed:6e:2c:bd:6e:d8:94:b4:bc:ef:7b:f6:ce:2e:1b:47:
5c:ba:03:24:74:50:fb:e5:37:6c:72:e0:31:b2:e2:db:b1:ab:
67:95:cc:3f:27:b9:ab:89:4a:4b:75:42:41:79:21:cd:e3:02:
df:98:13:69:be:3c:dc:c2:70:a3:91:57:b2:73:45:6d:b2:fc:
30:7a:ee:8c:4f:a3:3c:a4:62:66:7e:db:56:4a:7b:95:da:13:
86:23:be:72:08:6f:5f:0f:b4:92:14:be:d4:18:9d:8a:06:cb:
7a:71:8c:dc:9e:e0:04:78:4b:c8:a0:5a:38:b5:b9:fc:0d:22:
39:fc:b1:64:23:2a:d9:ce:d4:50:16:fb:d4:5c:f6:c5:04:6d:
bf:ae:97:0f:71:93:ce:f8:3e:40:13:88:b6:9e:12:c8:bb:db:
ac:66:70:4e:9f:e3:2b:80:30:6c:24:86:1a:ff:93:fa:38:38:
cf:09:d6:27:15:b0:fe:5a:c8:80:03:06:95:f0:8b:08:1e:4f:
7a:d7:73:89:4a:76:54:e7:d6:8f:a0:d5:f6:b5:99:6b:5a:b5:
86:39:d3:d4:c9:d3:fd:4a:c8:e8:e7:07:a8:1e:15:f0:63:aa:
a2:35:55:0f:fd:2b:64:1e:cd:6c:8c:5b:7a:3a:59:e1:27:1c:
be:a2:da:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:58:35 2025 by rpki-client