Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zkx0iwPT3f_4dkjGlBRnhwxZMGw.roa
File: zkx0iwPT3f_4dkjGlBRnhwxZMGw.roa (raw, json)
Hash identifier: wMznnMa3nQgSBiKQKqF+FcXWmF98cTjFMOLcLpd5u68=
Subject key identifier: CE:4C:74:8B:03:D3:DD:FF:F8:76:48:C6:94:14:67:87:0C:59:30:6C
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 21E6
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zkx0iwPT3f_4dkjGlBRnhwxZMGw.roa
Signing time: Mon 26 Aug 2024 05:33:27 +0000
ROA not before: Mon 26 Aug 2024 05:33:27 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 180.218.116.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:17:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8678 (0x21e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:33:27 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=CE4C748B03D3DDFFF87648C6941467870C59306C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:34:88:2e:24:52:41:ed:9c:e2:97:cb:92:73:
7e:35:7c:22:cb:8b:78:6d:a3:06:56:01:73:a3:ec:
9b:14:72:b3:c7:6c:47:64:d7:24:84:a8:88:ae:6d:
a4:79:29:56:e4:b2:30:02:bc:4c:a8:7a:76:c3:87:
79:c5:6d:46:bf:a1:41:5d:4b:d3:92:74:b6:a5:88:
75:79:aa:b1:81:95:b6:c5:82:1f:48:1b:e2:7d:08:
b1:f7:2c:f6:42:b9:86:d1:a0:e8:a3:ec:72:14:8d:
0b:56:97:2d:0f:95:cf:e2:95:b6:6a:41:42:d3:dc:
e2:2a:52:7c:fb:57:67:e2:d7:89:28:70:d8:13:ed:
51:b8:a2:e1:b6:a8:03:bb:34:d1:1f:34:fb:d7:03:
d1:2a:3a:d5:47:08:50:23:5c:18:a5:73:9e:69:c9:
e9:0a:88:13:21:7d:a9:7c:5f:b2:34:a7:32:44:12:
ba:a8:28:39:fe:2e:6f:50:fe:1d:07:3e:82:48:12:
ee:6c:96:f9:97:3b:e2:17:47:e3:c1:08:d1:40:61:
86:9b:17:b7:aa:81:08:52:31:0c:de:c9:42:ce:9f:
0e:3e:f4:2d:42:9a:82:cd:71:22:21:d5:36:ef:34:
75:68:e5:ac:27:cb:41:b8:91:7c:5c:65:d1:34:10:
d4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4C:74:8B:03:D3:DD:FF:F8:76:48:C6:94:14:67:87:0C:59:30:6C
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zkx0iwPT3f_4dkjGlBRnhwxZMGw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.116.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:5a:ad:07:38:3d:ba:ee:06:16:e9:0b:1b:d5:ee:19:37:0d:
84:e7:ca:76:6b:d2:df:46:f1:3a:4c:fc:b4:db:41:03:3f:8e:
70:ad:f3:51:03:be:24:42:d6:5e:9f:fe:17:ec:c2:44:94:03:
79:75:4d:6a:43:ad:73:c2:ee:16:5d:e0:79:5c:06:eb:6c:26:
56:47:f3:96:eb:71:fe:58:74:ef:d8:20:45:ed:4c:32:01:13:
31:10:c9:e0:de:9b:f0:cc:73:6a:df:aa:4f:f4:be:a0:a4:ac:
62:9f:4e:69:52:8b:01:03:29:65:e6:0f:08:0e:65:3c:06:58:
2d:5f:2e:f4:c0:d9:2f:85:99:66:dc:04:27:98:f5:3b:68:f3:
f9:74:1a:8d:73:e6:2a:81:73:fd:17:94:90:84:a7:12:59:09:
c0:70:eb:69:d5:f5:1e:07:0f:d2:d8:d1:91:4b:a4:73:e0:29:
81:cf:92:f0:a8:44:01:c1:66:12:6e:ba:0b:e3:8b:18:d4:b4:
85:59:42:ba:32:f9:42:ae:db:92:e1:33:ab:5a:fe:10:59:d8:
76:93:53:b3:8b:c8:87:b3:0f:91:72:c4:55:86:2f:01:dd:bd:
dd:81:1d:a1:b2:71:50:0b:4b:4e:a1:21:a4:ce:54:cd:5c:74:
56:1c:6e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:56:04 2025 by rpki-client