![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dK4cADUtwWUqL_bAqcOzBeuQA_M.roa
File: dK4cADUtwWUqL_bAqcOzBeuQA_M.roa (raw, json)
Hash identifier: qUEskkvk2dOOIKNRmMce3NxdtKOvQRZR3EwPoUH4WAc=
Subject key identifier: 74:AE:1C:00:35:2D:C1:65:2A:2F:F6:C0:A9:C3:B3:05:EB:90:03:F3
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 2284
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dK4cADUtwWUqL_bAqcOzBeuQA_M.roa
Signing time: Mon 26 Aug 2024 05:34:05 +0000
ROA not before: Mon 26 Aug 2024 05:34:05 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24163
IP address blocks: 119.77.140.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:18:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8836 (0x2284)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:34:05 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=74AE1C00352DC1652A2FF6C0A9C3B305EB9003F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:31:94:37:fa:ea:6a:2d:b8:98:98:55:0a:fa:
8a:7f:59:c0:ae:8a:da:f9:2c:3d:54:74:e9:47:04:
39:92:1e:c4:e9:8c:df:cb:a0:53:56:3d:47:06:bf:
2a:dd:15:37:83:61:93:98:d2:e9:de:44:a3:1b:41:
50:58:54:39:7a:ae:ce:99:1a:fe:e7:ce:27:71:e9:
c3:48:c8:a3:d9:54:15:41:07:1f:c4:9e:a1:06:81:
42:32:6b:60:ec:49:20:85:88:77:7d:a2:45:e5:6a:
9a:94:36:23:ea:8f:2d:5b:f3:9c:79:0f:c2:a7:f5:
50:2b:7b:43:b4:56:24:b5:78:13:75:75:d5:81:38:
d3:42:99:a5:0c:9d:f3:a2:53:ff:e5:7c:bb:06:2c:
13:14:b6:42:95:bf:2c:e3:1e:18:09:ec:80:9f:a9:
a0:69:51:e1:fc:7f:a8:f0:e5:85:1e:3b:5e:37:e2:
4e:92:d3:b4:45:66:b9:f1:c4:b7:9e:af:04:61:6e:
57:d8:92:2f:07:d3:a1:40:41:1d:28:19:fd:f5:c1:
e1:be:48:29:6e:c2:16:3f:b3:45:89:11:b2:c4:7e:
a8:41:40:2b:ed:da:6b:a0:81:57:e7:c2:a4:78:51:
5f:2c:b9:7a:1b:b8:0a:31:53:a8:45:b1:f9:97:41:
4d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:AE:1C:00:35:2D:C1:65:2A:2F:F6:C0:A9:C3:B3:05:EB:90:03:F3
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dK4cADUtwWUqL_bAqcOzBeuQA_M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.140.0/22
Signature Algorithm: sha256WithRSAEncryption
22:7f:13:0e:a1:58:f6:80:e7:a5:a6:4d:a9:68:06:82:ff:17:
4a:60:30:3f:64:10:f8:64:3e:d9:54:0b:4d:20:89:9e:be:c2:
a0:00:c6:97:54:b6:a3:4b:6c:2a:f6:5a:15:85:28:d6:46:ea:
08:f7:74:1f:27:b4:7e:8c:63:5a:a3:56:82:3a:9e:be:2e:f0:
8a:b1:27:dd:ef:0f:89:e8:1e:76:3f:87:12:6d:01:6f:2b:90:
b8:c5:25:5c:9d:c9:0e:79:58:91:b2:62:5c:88:75:81:6f:70:
f5:ba:4f:bc:8a:b1:e2:1a:db:50:64:60:6c:a8:fb:18:f6:a1:
15:f7:6c:92:36:32:26:b7:d3:e2:26:48:e1:09:dd:7d:58:bd:
6a:de:b6:14:22:5b:7d:01:6e:ab:94:12:18:0e:02:db:61:e6:
47:e8:d5:f9:82:53:e0:88:a4:25:cc:77:24:07:8e:32:7b:bb:
13:b9:fe:53:be:a7:8c:0b:22:46:e2:f8:63:04:3c:1f:a4:6d:
48:72:b6:50:5a:f8:36:1b:89:4b:fa:e5:6d:66:a3:da:7a:6a:
6f:c5:89:93:56:79:9e:97:7d:97:41:e3:c6:c3:04:0f:4f:3f:
7e:9e:69:f0:db:a9:86:e6:df:c0:5a:75:05:e9:dc:40:4e:85:
7d:04:dc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:42:14 2025 by rpki-client