Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ytA4cJHjndj57RRqbGInz26S1-M.roa
File: ytA4cJHjndj57RRqbGInz26S1-M.roa (raw, json)
Hash identifier: fSx0rM6JdAR5AznLpLtA1frzNPwBgyw5d9vdhZSC0ek=
Subject key identifier: CA:D0:38:70:91:E3:9D:D8:F9:ED:14:6A:6C:62:27:CF:6E:92:D7:E3
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 222E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ytA4cJHjndj57RRqbGInz26S1-M.roa
Signing time: Mon 26 Aug 2024 05:33:45 +0000
ROA not before: Mon 26 Aug 2024 05:33:45 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 123.0.32.0/19 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:17:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8750 (0x222e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:33:45 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=CAD0387091E39DD8F9ED146A6C6227CF6E92D7E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:25:70:51:57:e1:86:d1:e6:ae:40:08:87:94:
3e:87:37:c9:fa:64:64:60:9e:23:68:7c:88:0e:24:
32:8e:d1:7d:07:82:e5:ba:f2:c8:81:c3:f7:c3:ab:
b0:bd:53:fe:5c:1b:e0:4a:cd:37:b1:09:14:d6:28:
1b:70:69:0e:43:68:d8:e7:5a:cc:1e:d6:49:99:b9:
d2:57:ee:ea:56:e8:3d:d1:1d:c3:5d:6d:6f:fb:eb:
b4:a7:15:81:44:14:3f:8f:a7:61:f0:1c:74:99:17:
23:e9:dc:87:b6:79:c5:65:34:53:ff:13:b2:77:a0:
61:51:0a:bc:9a:46:03:20:64:c4:dd:51:bd:9e:ab:
87:cd:35:e1:c9:b2:92:3d:36:50:af:65:9a:0f:63:
1e:f0:d5:2f:a4:79:44:43:03:5c:ce:0a:47:e4:21:
3a:f5:a2:f6:7e:56:53:f5:36:f0:c6:66:b5:8a:50:
f3:34:ed:c1:cc:45:34:28:af:1b:72:b7:55:9b:d6:
f3:a4:0f:e3:85:5f:bf:8f:73:31:ff:f1:45:e2:d7:
4b:86:6b:21:4a:51:ac:0c:a0:60:1b:f7:d9:58:66:
5a:a0:76:0d:ab:4c:ad:1e:37:44:b4:93:f1:67:6c:
26:26:90:df:ce:9e:d8:03:4a:b3:f0:8f:53:33:fd:
0b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D0:38:70:91:E3:9D:D8:F9:ED:14:6A:6C:62:27:CF:6E:92:D7:E3
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ytA4cJHjndj57RRqbGInz26S1-M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.0.32.0/19
Signature Algorithm: sha256WithRSAEncryption
1c:f7:5c:2c:95:12:e8:0a:62:2f:52:30:bc:48:70:9b:51:b0:
78:bd:ca:50:53:6f:75:5c:8d:c6:7e:d1:91:e5:04:7a:35:70:
da:bf:43:83:cc:0c:6b:23:a6:43:01:f6:80:26:bd:ef:5c:58:
db:65:78:86:89:c9:75:7e:2d:3e:a2:97:30:ed:a4:17:63:b5:
11:6e:91:f1:04:8c:fe:92:0f:18:c2:47:4a:5d:c4:1e:da:6a:
a0:ea:8a:dc:bb:24:59:db:35:2f:e5:2d:7b:bf:86:b3:51:6b:
73:7a:f5:21:ad:9b:33:bd:04:05:bb:11:0c:a4:65:43:19:58:
5d:f4:ad:b2:0b:12:a3:31:27:e2:a6:25:9d:b1:16:5d:e1:06:
0a:bb:b6:92:b9:41:f6:fc:d6:0d:5d:8f:2c:80:c6:60:21:6f:
31:21:1a:e1:94:bb:a7:ef:e7:17:20:50:13:47:70:0c:3f:e1:
72:35:69:e8:1a:97:9f:38:06:d8:05:8b:2d:eb:d4:6f:bf:24:
f0:4d:14:32:55:a6:92:c5:76:d7:ac:8c:07:16:89:50:99:03:
d3:99:34:e2:87:aa:4f:dd:f4:a8:f0:eb:d7:4d:69:53:52:29:
97:70:79:e6:a9:0e:03:df:aa:e6:3a:e6:9a:20:4f:e9:64:4d:
a0:ec:6d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:52:33 2025 by rpki-client