Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/35yxSU8vc2ankhc-4D5oF8xTffM.roa
File: 35yxSU8vc2ankhc-4D5oF8xTffM.roa (raw, json)
Hash identifier: BKgiMKNPf1G1AMBINjKLzezBJqoq+1xG8k2Y00NQ8+Y=
Subject key identifier: DF:9C:B1:49:4F:2F:73:66:A7:92:17:3E:E0:3E:68:17:CC:53:7D:F3
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/35yxSU8vc2ankhc-4D5oF8xTffM.roa
Signing time: Thu 15 Sep 2022 02:35:27 +0000
ROA not before: Thu 15 Sep 2022 02:35:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.128.0/18 maxlen: 18
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:27 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=DF9CB1494F2F7366A792173EE03E6817CC537DF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d8:c6:60:77:dd:22:f8:f8:d1:ea:3e:a6:4d:
30:cb:96:99:60:b2:9b:61:0b:16:fa:03:94:17:b3:
da:9b:0b:01:22:32:3c:d4:3c:3f:aa:e0:16:8a:6c:
29:ea:b1:e8:28:85:08:ea:53:d1:99:cd:9d:63:80:
70:6a:7c:e4:a1:b3:23:87:0a:0d:96:07:ce:c7:c0:
97:b8:01:18:1d:2c:48:62:e8:fb:bd:09:f2:e5:02:
a0:eb:37:7d:fa:92:bd:6d:8e:a3:39:ce:cc:ca:04:
22:97:44:1d:4c:75:d0:71:e7:ca:b2:c3:ca:f5:d5:
1f:35:f3:fd:7d:39:74:1e:18:34:5a:4a:47:32:2f:
ac:00:e8:f4:27:7f:99:6a:6f:a6:a4:f6:64:06:79:
f5:84:64:15:14:c3:e2:88:0e:f4:f4:e3:b1:7d:f2:
ed:40:62:86:ce:69:e4:fb:37:a6:d3:40:8e:ee:8c:
5f:b1:d9:ce:0f:f0:67:a3:13:bc:0d:d6:41:9a:41:
76:26:57:a6:ac:cc:94:84:c2:d4:22:2b:7e:bd:ca:
44:1b:a0:f7:6c:ab:d1:41:91:c1:bb:7d:d0:a9:76:
9f:95:c5:02:90:21:f1:2e:4d:bd:03:b9:99:59:26:
d4:99:5b:13:5a:3e:e5:2f:27:39:33:e7:e4:66:a5:
96:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9C:B1:49:4F:2F:73:66:A7:92:17:3E:E0:3E:68:17:CC:53:7D:F3
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/35yxSU8vc2ankhc-4D5oF8xTffM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.128.0/18
Signature Algorithm: sha256WithRSAEncryption
26:46:f3:ca:47:c7:80:3c:04:e2:82:51:04:fb:9e:31:6d:a0:
35:2a:35:8e:e6:c4:c7:cf:a0:87:cb:a0:fe:37:a0:4a:a1:85:
28:65:ae:fe:f9:6e:8b:ee:48:bd:bf:f7:48:25:12:ae:05:27:
e4:a4:b1:7c:7d:55:b2:48:16:76:ef:38:07:af:63:b6:03:a0:
78:e2:68:48:e7:f0:c7:30:76:e1:be:d9:42:07:3e:f7:63:f9:
eb:69:21:98:7a:7f:a7:96:b8:fa:8c:04:88:03:32:34:85:6f:
a5:79:bf:1d:a8:6f:ad:a4:ca:4b:7c:ee:e3:cc:24:9e:4c:e1:
0a:98:6b:a7:55:df:2d:58:47:bd:bb:cd:fb:c0:8e:fb:d1:ae:
c5:18:df:78:ae:7d:ac:3e:8a:b8:b3:d1:e5:b0:95:11:55:a5:
aa:63:ba:01:92:04:96:a7:be:e3:ce:db:ba:c5:64:04:42:0e:
6b:45:fa:97:84:09:6d:5a:a7:fb:fa:a6:68:be:44:8f:cf:2c:
a8:2b:87:ec:3b:bc:c4:b9:4e:1e:c0:bd:fa:e8:72:54:1d:52:
d4:ef:b1:da:38:f9:9c:44:1e:cd:51:06:22:4c:c1:57:77:0e:
dc:75:2c:9b:e4:a5:32:6d:8a:55:a1:8d:57:58:52:fb:a7:59:
45:68:31:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:45 2023 by rpki-client on console-fra.rpki-client.org