Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/U1TGzvrIHKmDi3GLLxInigKslvc.roa
File: U1TGzvrIHKmDi3GLLxInigKslvc.roa (raw, json)
Hash identifier: kUPB7ko8o6Rhv1pAb/rjhGAhwifkY72vF+dYx41YuVc=
Subject key identifier: 53:54:C6:CE:FA:C8:1C:A9:83:8B:71:8B:2F:12:27:8A:02:AC:96:F7
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 2174
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/U1TGzvrIHKmDi3GLLxInigKslvc.roa
Signing time: Mon 26 Aug 2024 05:33:01 +0000
ROA not before: Mon 26 Aug 2024 05:33:01 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 49.158.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:18:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8564 (0x2174)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:33:01 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5354C6CEFAC81CA9838B718B2F12278A02AC96F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:64:85:1d:f2:5f:92:0a:83:43:08:ee:09:f7:
8f:5e:d8:f0:9e:43:f8:89:4f:e8:7b:51:29:5d:87:
99:eb:71:ca:94:08:6d:ef:3c:4c:f5:68:f3:97:60:
05:bb:57:19:da:2f:a0:ea:7b:c4:2a:fc:ab:7c:d6:
0e:e2:0c:4d:ac:f3:00:9f:35:1f:40:2b:10:f6:d1:
50:bf:ca:5b:46:d2:77:b2:2c:aa:18:08:27:ec:31:
ef:36:e2:26:36:6d:58:23:8f:d9:12:b4:e4:73:09:
bb:62:6d:0b:25:7b:8e:8c:e6:19:81:51:44:66:fc:
a1:ac:b0:dc:0d:2a:2a:24:72:b2:b5:14:02:66:f5:
23:b2:ca:64:15:a5:0d:36:54:8a:72:e6:cb:ef:64:
08:b5:ee:fe:7a:24:bf:76:66:fe:ca:ee:66:fd:83:
5d:1a:78:ee:5c:36:25:a8:e4:44:99:51:d5:41:ba:
38:88:96:fd:e4:46:5c:8d:c4:d8:a9:9c:5f:ad:5e:
63:1a:7d:5c:fa:18:a3:14:10:b4:06:82:a9:82:a3:
1d:84:99:f7:d1:fc:ea:a5:e5:fa:e4:34:34:b1:be:
81:1f:8d:0b:d1:35:88:c5:ef:42:75:07:65:38:63:
a9:af:db:96:94:93:ec:2d:18:4c:3d:8c:85:72:2b:
7b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:54:C6:CE:FA:C8:1C:A9:83:8B:71:8B:2F:12:27:8A:02:AC:96:F7
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/U1TGzvrIHKmDi3GLLxInigKslvc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9d:72:4d:57:ee:08:bf:76:05:f9:e7:09:8b:f2:4e:cf:eb:8d:
e8:ac:03:71:9f:f2:7f:f7:b8:b1:50:cb:91:83:3a:e7:6f:f8:
15:4f:ea:cf:81:e1:fd:d5:87:60:4a:80:c6:5c:86:e8:75:6b:
0d:91:fd:6f:9e:2f:05:70:a2:89:7d:08:54:53:ca:df:a6:00:
33:28:5b:15:94:55:77:1a:02:ed:5f:cd:8c:43:b0:ef:64:5e:
0e:4b:bc:40:98:d0:dd:f2:4e:d1:43:17:62:23:2d:f3:20:3a:
97:18:61:4f:84:ae:df:3f:77:68:45:03:fe:2e:48:43:76:f9:
5d:61:4e:dd:74:23:e9:8f:50:09:8f:83:c8:c0:07:cf:90:bd:
a8:65:2a:d8:e0:08:c6:35:23:c3:0c:3c:72:77:0f:79:1d:77:
1d:56:93:93:ce:f2:4b:6e:d7:02:07:6b:d1:00:a0:8d:3f:fb:
b2:74:dd:18:9d:55:13:80:e0:06:89:e5:68:ed:c8:1d:44:e6:
87:df:79:73:d5:b8:f8:1c:7e:83:59:75:08:3c:53:22:bc:71:
da:32:9e:7b:28:14:02:2b:8e:1f:df:48:ec:e9:b5:b8:35:4c:
9a:38:81:48:f9:40:91:43:d6:9f:20:53:b8:2e:90:75:f7:8e:
21:2e:63:fc
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICIXQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw
NTMzMDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDUzNTRDNkNFRkFDODFD
QTk4MzhCNzE4QjJGMTIyNzhBMDJBQzk2RjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHZIUd8l+SCoNDCO4J949e2PCeQ/iJT+h7USldh5nrccqUCG3v
PEz1aPOXYAW7VxnaL6Dqe8Qq/Kt81g7iDE2s8wCfNR9AKxD20VC/yltG0neyLKoY
CCfsMe824iY2bVgjj9kStORzCbtibQsle46M5hmBUURm/KGssNwNKiokcrK1FAJm
9SOyymQVpQ02VIpy5svvZAi17v56JL92Zv7K7mb9g10aeO5cNiWo5ESZUdVBujiI
lv3kRlyNxNipnF+tXmMafVz6GKMUELQGgqmCox2EmffR/Oql5frkNDSxvoEfjQvR
NYjF70J1B2U4Y6mv25aUk+wtGEw9jIVyK3u/AgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQUU1TGzvrIHKmDi3GLLxInigKslvcwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1UxVEd6dnJJSEttRGkzR0xM
eEluaWdLc2x2Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwAx
njANBgkqhkiG9w0BAQsFAAOCAQEAnXJNV+4Iv3YF+ecJi/JOz+uN6KwDcZ/yf/e4
sVDLkYM652/4FU/qz4Hh/dWHYEqAxlyG6HVrDZH9b54vBXCiiX0IVFPK36YAMyhb
FZRVdxoC7V/NjEOw72ReDku8QJjQ3fJO0UMXYiMt8yA6lxhhT4Su3z93aEUD/i5I
Q3b5XWFO3XQj6Y9QCY+DyMAHz5C9qGUq2OAIxjUjwww8cncPeR13HVaTk87yS27X
Agdr0QCgjT/7snTdGJ1VE4DgBonlaO3IHUTmh995c9W4+Bx+g1l1CDxTIrxx2jKe
eygUAiuOH99I7Om1uDVMmjiBSPlAkUPWnyBTuC6QdfeOIS5j/A==
-----END CERTIFICATE-----
Generated at Tue Feb 11 03:42:58 2025 by rpki-client on console.sobornost.net