Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/p4RbbODpI_Am-P5gK2OfY17LVzQ.roa
File: p4RbbODpI_Am-P5gK2OfY17LVzQ.roa (raw, json)
Hash identifier: KUjX1C0cM4CGdAplV3J+TVbDN2qTkzyoD1e14DIBSh0=
Subject key identifier: A7:84:5B:6C:E0:E9:23:F0:26:F8:FE:60:2B:63:9F:63:5E:CB:57:34
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 21C1
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/p4RbbODpI_Am-P5gK2OfY17LVzQ.roa
Signing time: Mon 26 Aug 2024 05:33:19 +0000
ROA not before: Mon 26 Aug 2024 05:33:19 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24165
IP address blocks: 122.254.32.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:18:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8641 (0x21c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:33:19 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A7845B6CE0E923F026F8FE602B639F635ECB5734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:37:c5:7a:8e:c6:18:c4:27:e5:2c:a6:c4:41:
7d:94:43:63:6f:b1:3b:7f:82:84:07:3a:a0:a9:c0:
4d:af:ff:35:bc:60:3b:d1:6c:93:44:59:86:d7:25:
9f:4f:e4:8c:75:b3:6c:25:c0:c8:07:64:78:59:be:
0d:6a:b5:29:1f:04:80:2e:1f:f9:04:c4:45:11:66:
be:ff:29:55:fa:91:64:c1:f8:b8:21:19:d5:32:d3:
4e:74:3c:73:96:f4:ae:f6:9f:19:48:bc:30:70:19:
37:ac:f2:d4:ab:23:db:3e:f4:df:2e:11:16:12:c4:
ad:19:da:1a:f1:c7:00:14:b7:c3:c2:dc:18:cd:e0:
7d:ca:40:34:95:1e:07:27:35:26:05:16:45:28:4e:
67:e2:a7:21:08:f0:74:32:6b:70:5c:0e:f6:82:e4:
25:6c:03:9f:03:c1:ae:70:94:82:d6:22:c0:14:ec:
c3:82:21:30:ab:db:e5:8f:18:fb:01:2f:02:56:18:
15:2c:58:6a:d3:86:1d:c6:fe:b2:45:a8:b0:40:eb:
97:40:96:9f:05:b8:2d:16:18:2a:6e:c4:73:f3:60:
9b:00:c0:9f:0c:bb:21:b1:08:15:d2:01:c5:f5:31:
af:0b:71:b5:de:67:44:14:ea:4b:cd:2d:ed:89:7d:
ba:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:84:5B:6C:E0:E9:23:F0:26:F8:FE:60:2B:63:9F:63:5E:CB:57:34
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/p4RbbODpI_Am-P5gK2OfY17LVzQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.32.0/22
Signature Algorithm: sha256WithRSAEncryption
38:48:6b:3c:20:0c:1e:54:20:3d:03:f8:01:3a:f8:e8:b9:f2:
38:e3:81:cf:28:96:6f:e6:59:1b:2b:6c:93:a1:7c:51:74:e1:
5d:17:e5:44:9b:ee:98:e7:75:ea:61:78:75:b8:d1:6f:c5:33:
c4:2b:c7:90:0a:9b:66:82:43:79:47:28:c5:79:04:bd:dd:19:
72:37:33:41:90:48:34:86:89:f4:64:b7:0e:ac:0e:be:76:e6:
d9:1a:a3:e7:d3:3a:e3:93:9e:9f:a8:f2:be:d7:5c:1b:0d:c7:
bc:72:0a:24:db:b4:28:10:ee:6a:cf:49:b8:4a:be:c7:5a:f9:
6e:ab:ae:10:f3:3f:52:12:83:dd:7e:88:eb:35:28:8f:9d:89:
b6:8b:83:e9:b0:2a:15:5a:9f:68:c3:b5:ba:ce:52:cf:5a:55:
9c:c5:c2:1d:71:41:6a:21:4b:e6:6e:69:50:e0:4b:06:d4:f4:
82:e9:09:5d:3f:f2:e6:a8:5a:49:ef:56:d6:a5:f5:1c:82:a4:
05:9c:15:ab:a7:9a:66:ef:be:ca:f1:ae:e4:06:ec:74:c0:db:
c8:b0:e1:71:1d:e2:6e:49:79:53:1a:b2:e3:d4:a5:fa:04:df:
f4:ca:fd:d2:8f:8a:3f:ad:a8:d4:fc:48:03:94:0a:6c:9f:a8:
5d:a5:98:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:56:19 2025 by rpki-client