Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1MPi5zeEWqp6MzpGpr28jbpBgf0.roa
File: 1MPi5zeEWqp6MzpGpr28jbpBgf0.roa (raw, json)
Hash identifier: H/jJDjQoTWvpwcppLr5FX0kesmuiliWysKR7d87SOws=
Subject key identifier: D4:C3:E2:E7:37:84:5A:AA:7A:33:3A:46:A6:BD:BC:8D:BA:41:81:FD
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 18DC
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1MPi5zeEWqp6MzpGpr28jbpBgf0.roa
Signing time: Sat 22 Oct 2022 06:05:48 +0000
ROA not before: Sat 22 Oct 2022 06:05:48 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.189.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6364 (0x18dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:05:48 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D4C3E2E737845AAA7A333A46A6BDBC8DBA4181FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5e:fb:8b:eb:49:70:39:5c:e0:21:ba:b7:cb:
b9:19:0c:05:b2:e0:71:fc:7f:43:44:50:5c:97:65:
47:93:f2:f2:38:d2:33:b0:4e:13:77:bc:17:d8:d3:
49:b8:35:e2:23:db:6d:9f:e4:3e:b2:f6:94:ee:be:
1d:58:5a:c2:0d:bf:b6:59:2a:d0:57:f2:a4:e3:96:
c2:0a:c7:79:c8:a7:f6:4d:7b:bd:f7:04:28:da:5d:
b1:7e:15:05:48:2b:ae:6f:9d:47:3e:41:ae:a2:64:
bf:be:71:0c:12:73:f1:b6:81:e1:61:d3:ca:c8:81:
63:ad:16:8c:a4:90:cf:22:0d:43:7a:62:0b:62:e5:
28:50:35:a0:6a:94:14:42:74:03:f9:cc:f5:72:b6:
ed:b5:29:69:01:b3:83:cc:29:91:b5:d6:e9:09:f2:
63:b5:26:07:ad:34:f6:50:8d:aa:52:3b:85:be:5e:
60:a4:e1:85:6b:6e:bc:fb:2d:c2:c7:3d:c2:be:9f:
58:ea:cc:fb:b6:b1:71:37:bb:92:e9:38:d0:04:7d:
94:c4:5e:2e:e0:f0:1e:52:b0:44:95:29:41:99:e2:
3c:b3:d6:e9:35:f5:91:4f:eb:93:db:59:73:99:bc:
6c:90:d2:cd:d9:fb:ec:72:3a:0f:c3:f0:ba:b5:74:
32:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C3:E2:E7:37:84:5A:AA:7A:33:3A:46:A6:BD:BC:8D:BA:41:81:FD
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1MPi5zeEWqp6MzpGpr28jbpBgf0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.189.0/24
Signature Algorithm: sha256WithRSAEncryption
25:b9:76:9a:4d:62:41:a2:08:ce:e6:a2:87:6a:8b:67:13:01:
03:9f:e9:a1:a0:1c:ba:53:2e:ab:42:ad:6b:92:80:89:c3:c2:
63:8f:9b:27:86:38:e8:56:54:f6:8a:12:d7:20:b9:00:80:e2:
f2:fd:35:63:e5:8d:62:b8:cb:ed:9b:77:e2:9d:58:37:14:b2:
d1:09:73:63:c2:0c:b0:a8:38:e9:88:4d:40:25:2e:5c:ff:ce:
b1:7e:bb:e5:5b:e4:31:56:e0:66:b5:a3:9b:a0:04:16:fd:84:
9c:5b:bd:2a:86:f3:8f:39:50:1a:83:41:3c:9d:fd:4b:a2:16:
2c:f1:50:dd:dc:6c:34:ad:99:39:d1:9a:59:d7:49:e7:f9:cb:
32:78:db:52:4d:9e:e4:51:e4:05:a3:b2:6e:17:cf:66:e3:cf:
33:80:da:bb:38:11:46:1f:12:07:02:16:a1:77:8a:b4:1b:ed:
ca:3b:a5:8a:1b:de:d4:de:ec:8d:be:d9:d8:01:6d:2f:37:62:
a0:21:68:1b:0f:69:b2:b7:90:06:81:71:64:80:ff:f4:9b:43:
ef:80:f4:ab:b1:e1:06:ad:08:bc:b5:0b:8f:9f:e5:b1:33:74:
84:09:bf:70:a9:e8:87:f7:a4:8f:bb:93:e6:43:44:0d:f8:5d:
76:00:45:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:38 2023 by rpki-client on console-ams.rpki-client.org