Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZhblDGJSVZbmVItAXCpfwZx9q88.roa
File: ZhblDGJSVZbmVItAXCpfwZx9q88.roa (raw, json)
Hash identifier: B2hBcljVR3PUydxrdABT2TgxjgPE+rIpaS/J9SoJg74=
Subject key identifier: 66:16:E5:0C:62:52:55:96:E6:54:8B:40:5C:2A:5F:C1:9C:7D:AB:CF
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 2189
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZhblDGJSVZbmVItAXCpfwZx9q88.roa
Signing time: Mon 26 Aug 2024 05:33:05 +0000
ROA not before: Mon 26 Aug 2024 05:33:05 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24163
IP address blocks: 103.225.0.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:19:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8585 (0x2189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:33:05 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=6616E50C62525596E6548B405C2A5FC19C7DABCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f8:0b:6c:50:03:52:18:27:d8:e3:ee:39:c4:
e9:b4:af:76:c3:4a:7d:05:50:65:0a:fd:42:66:39:
3d:78:ad:30:cf:3c:e7:1d:bc:d1:bb:97:a9:80:48:
29:2a:3f:0d:0a:fd:95:ab:8b:3a:aa:87:0f:9a:e1:
32:0a:c4:e6:9b:73:34:2c:df:79:b6:59:45:93:6f:
6c:b7:cb:eb:06:a9:2e:f2:b3:fa:92:e9:d7:f6:f6:
bb:3d:51:5c:4c:01:84:a9:99:c0:4e:af:ef:11:17:
a6:4b:e5:ef:ca:8d:d7:fc:3e:d5:75:1c:34:7b:c9:
da:5b:25:29:d5:9e:a1:e1:a7:0e:e4:b2:f5:d8:74:
5b:9c:07:22:41:10:9f:e9:9a:ac:07:75:b9:3f:2d:
6d:e6:67:70:a4:19:2b:74:75:3c:c1:ca:bb:5e:1f:
ba:e7:94:3a:38:90:7d:4c:87:58:45:b2:5e:3f:e6:
fb:42:5a:54:87:19:d5:0c:95:b2:e0:25:b0:22:fb:
97:53:62:31:a1:7a:3c:a3:a9:9c:4b:d6:a0:3d:46:
69:89:e2:24:09:6e:75:d1:00:51:99:3d:47:55:d7:
f8:c8:63:4a:2e:e7:01:93:28:be:76:4a:0c:32:39:
a6:4c:d3:c2:01:1a:67:f6:e6:a0:12:71:c4:24:0f:
95:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:16:E5:0C:62:52:55:96:E6:54:8B:40:5C:2A:5F:C1:9C:7D:AB:CF
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZhblDGJSVZbmVItAXCpfwZx9q88.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.225.0.0/22
Signature Algorithm: sha256WithRSAEncryption
22:56:5c:dd:b0:73:49:1c:83:b1:af:96:77:1e:26:21:0e:af:
4a:aa:43:fd:9d:f6:4a:4e:e1:f9:92:85:64:15:dd:a5:0f:b9:
ae:f1:c2:2f:14:ce:07:7d:2e:da:5e:0c:4a:9e:8e:fe:33:0c:
cf:7e:0a:37:4c:9c:7d:f1:c7:3c:73:5f:41:44:28:2f:c8:eb:
32:1d:ca:e0:e4:fc:b2:c4:75:93:28:08:85:d9:2a:a4:89:83:
26:dd:a5:b9:5a:0b:69:ca:e4:7b:92:41:6a:b9:8c:67:f0:52:
57:ba:ba:74:e8:cc:14:d6:a4:d8:db:09:b9:33:c0:16:7b:8e:
89:3e:87:5b:49:ed:6b:8f:fd:70:5c:b2:2e:6d:05:85:a1:2f:
4e:ac:5d:1b:a2:1e:5f:56:62:eb:e2:ed:01:48:dc:4f:d2:4e:
df:64:61:db:72:36:9a:d2:87:46:1a:ea:7f:bf:4b:91:f1:02:
8e:12:d7:ec:d9:3b:9c:c2:02:35:99:dc:ce:90:ce:4d:b3:4f:
79:00:0b:b9:fb:fa:67:0f:94:64:06:2a:fc:8b:97:66:01:08:
a7:3a:77:9e:fa:f6:90:72:08:0d:b2:2d:28:35:df:79:5e:b2:
0f:29:f6:d7:27:38:92:0f:43:4f:ae:1b:56:71:f7:22:ce:f8:
3c:d8:15:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:45:35 2025 by rpki-client