Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/r63k9JosQFoBK5Q1Kw-yqkjEsrM.roa
File: r63k9JosQFoBK5Q1Kw-yqkjEsrM.roa (raw, json)
Hash identifier: PmlbXlMJ83nK0n2lyKf1KVhUHnk52YBDSoW5jmzatsY=
Subject key identifier: AF:AD:E4:F4:9A:2C:40:5A:01:2B:94:35:2B:0F:B2:AA:48:C4:B2:B3
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 22AF
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/r63k9JosQFoBK5Q1Kw-yqkjEsrM.roa
Signing time: Mon 26 Aug 2024 05:34:15 +0000
ROA not before: Mon 26 Aug 2024 05:34:15 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 180.218.216.0/21 maxlen: 23
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8879 (0x22af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:34:15 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=AFADE4F49A2C405A012B94352B0FB2AA48C4B2B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bc:9c:a0:11:97:8f:a5:8f:4c:83:7c:b7:0a:
b2:12:45:7d:f1:9e:82:4d:ee:f8:a3:65:d6:82:ff:
fa:69:17:f7:69:97:a3:31:63:97:b5:22:6f:16:40:
6e:64:f5:b1:69:ae:6a:6a:5c:db:00:db:81:36:b8:
a4:23:3e:b9:fc:51:96:e2:d1:da:9d:4e:19:90:4f:
46:98:18:d2:0e:68:15:1e:95:d9:99:1f:39:5c:aa:
51:b2:11:a9:7c:84:6c:48:f2:5b:fb:fb:e6:5e:7e:
fa:d1:f0:1e:7e:89:e8:ec:ce:c2:dd:31:fc:2e:27:
7b:05:01:d0:39:87:0a:8d:4d:1b:53:a3:66:97:27:
1d:31:f1:7f:37:e9:5a:3e:7f:a1:f8:04:b0:49:57:
40:94:17:c3:99:fd:18:09:8a:e4:f9:31:f6:1c:43:
10:32:2b:c8:96:0f:3c:d5:9b:40:39:d1:6f:eb:2f:
36:9d:5c:79:d2:34:eb:67:0d:e2:0b:a1:e6:ee:7e:
6b:3d:0f:7f:2a:26:e3:97:20:3b:e8:db:95:b6:35:
d0:91:09:82:84:15:ff:0c:66:31:53:18:97:34:ca:
0c:77:52:a5:13:3d:c8:f3:78:36:8d:84:0e:fc:0f:
ac:f9:98:de:df:d6:ed:d9:f4:79:92:8e:29:e9:5c:
6c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AD:E4:F4:9A:2C:40:5A:01:2B:94:35:2B:0F:B2:AA:48:C4:B2:B3
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/r63k9JosQFoBK5Q1Kw-yqkjEsrM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.216.0/21
Signature Algorithm: sha256WithRSAEncryption
52:43:32:c2:e1:00:fe:84:67:1c:61:46:cd:99:cc:c1:d1:f8:
c5:a5:0d:3e:ab:7f:0e:31:1d:71:f2:47:b8:54:b3:7a:90:4a:
ba:5f:75:04:5c:f7:66:de:82:8b:62:02:8b:69:32:85:6b:90:
e2:bb:d7:6a:ca:4d:bc:18:18:71:4c:29:f3:6c:b3:22:d9:3e:
fb:9b:65:2e:b6:1d:76:3c:f3:d3:6e:ac:17:55:81:1f:3c:3d:
0f:e3:3e:ca:35:53:e9:f1:46:12:37:d4:72:13:54:76:94:2d:
6b:e2:2c:21:56:c8:0b:f8:ca:07:68:c9:93:22:3e:f6:8d:80:
35:70:2d:9e:1f:b0:08:7e:00:5d:8e:ab:4b:02:93:a4:37:cf:
df:91:37:3c:4e:47:4e:fd:2e:01:47:d3:be:1d:ff:84:a7:a3:
b8:f7:15:8d:9a:9e:9b:a3:8f:12:e5:42:16:24:4e:5a:7a:1a:
13:4a:8d:80:7f:e3:3f:40:57:84:3f:50:72:64:e5:9b:72:be:
d9:79:cf:ac:28:21:6e:41:34:eb:ac:fd:ea:dd:b0:0c:f5:e9:
63:b4:28:5b:3f:e3:0f:10:b5:38:00:d5:9b:84:d2:fc:eb:89:
7e:15:0e:23:e7:c8:f6:6b:f1:10:2c:d6:af:74:90:fd:9a:a4:
ea:7b:e1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:52:30 2025 by rpki-client