Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/q-RoBBqls15o0i0sfSgGVmn9tEE.roa
File: q-RoBBqls15o0i0sfSgGVmn9tEE.roa (raw, json)
Hash identifier: uu2XNGrWRThb1qxpHW7AAX2FGW9bvug5ZOtNNHB0dmY=
Subject key identifier: AB:E4:68:04:1A:A5:B3:5E:68:D2:2D:2C:7D:28:06:56:69:FD:B4:41
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 2234
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/q-RoBBqls15o0i0sfSgGVmn9tEE.roa
Signing time: Mon 26 Aug 2024 05:33:47 +0000
ROA not before: Mon 26 Aug 2024 05:33:47 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 49.159.16.0/20 maxlen: 20
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:17:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8756 (0x2234)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:33:47 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=ABE468041AA5B35E68D22D2C7D28065669FDB441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6e:fb:d1:2d:63:b2:0c:3a:88:af:e4:e1:13:
21:e8:f5:2b:85:1f:d6:d9:33:82:5c:81:4b:74:bd:
47:12:0d:2a:1c:3e:ce:d2:cf:c7:ee:17:05:72:89:
c3:2e:5b:18:a5:af:71:07:74:1e:28:34:71:a8:0e:
27:f7:1a:71:f6:c8:bb:91:3b:c4:75:94:07:49:fe:
3c:7b:29:d9:59:12:c7:dd:ba:03:76:98:70:87:da:
47:66:76:88:22:4d:8b:30:4c:d7:e2:ce:56:06:01:
8c:6c:42:c6:37:db:83:63:59:53:cf:56:ae:b6:fd:
7e:d5:ce:92:05:77:9f:30:6a:5f:97:68:05:36:1f:
5b:7a:fa:03:b7:7c:5e:e8:93:70:25:e7:64:1c:92:
00:29:d4:5e:6c:36:ac:35:2d:de:ff:a2:1f:0b:e4:
1a:2a:32:67:d1:75:a3:04:b0:5c:bd:99:2c:f0:1f:
4c:79:dc:92:97:24:4d:14:7d:95:07:2b:da:ff:0b:
04:3c:b0:4c:e9:1e:7c:5d:57:dd:bc:1e:45:62:ea:
80:98:ae:91:8b:1f:0a:c1:0d:5e:56:72:f6:cf:91:
dc:17:0d:bb:91:ad:cb:5f:36:36:00:42:b3:4c:7a:
bf:f6:d5:4c:85:32:82:07:0b:f5:fd:74:46:20:14:
f3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E4:68:04:1A:A5:B3:5E:68:D2:2D:2C:7D:28:06:56:69:FD:B4:41
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/q-RoBBqls15o0i0sfSgGVmn9tEE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.16.0/20
Signature Algorithm: sha256WithRSAEncryption
5f:20:5c:68:12:da:c0:37:16:9c:5b:62:64:af:3a:f1:61:e8:
fc:9e:9a:41:9f:e4:b4:96:db:13:68:60:74:ce:7f:7f:8e:68:
f3:49:69:45:e0:ab:31:ea:e3:a0:a5:67:71:2e:0f:be:58:f2:
05:22:5f:07:69:c6:d3:98:fa:5f:b5:12:3d:63:d6:fa:88:23:
f4:71:1a:01:cb:e7:9b:0d:c3:e1:5c:b7:8a:99:98:70:40:85:
df:e4:a2:fe:90:37:1f:2e:13:38:61:54:97:ea:04:a9:0b:87:
f5:88:48:25:3e:8d:17:d9:24:f5:72:17:46:3a:2e:a1:6b:7d:
74:9e:26:ef:82:53:96:01:91:e7:77:e6:00:2f:5d:76:22:c4:
6a:d7:f1:65:81:63:84:76:fc:86:5f:d6:ff:f7:a3:36:2f:9e:
c8:4b:47:4d:8e:4e:03:bc:3a:d4:7f:e6:9a:14:bd:05:17:f2:
cc:43:12:d3:d6:03:4c:35:16:18:5e:7a:27:ef:ee:36:45:ec:
75:2f:cf:c9:ca:16:f1:9e:16:d6:b0:e8:9b:b2:d5:f3:5a:8d:
16:64:02:c1:f0:c9:a7:c7:22:29:22:64:1a:7f:b1:27:e7:df:
a7:86:46:e5:32:8f:18:14:80:f8:62:83:ae:97:40:8d:7b:89:
1b:1a:6e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:01:22 2025 by rpki-client