Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3hwhprtHqAUrc2NoOBe3MwRY1ow.roa
File: 3hwhprtHqAUrc2NoOBe3MwRY1ow.roa (raw, json)
Hash identifier: Av9w/aLaIdTX3x3wLDhAVm/+MnXXUCl20yctAeHHzgo=
Subject key identifier: DE:1C:21:A6:BB:47:A8:05:2B:73:63:68:38:17:B7:33:04:58:D6:8C
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1951
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3hwhprtHqAUrc2NoOBe3MwRY1ow.roa
Signing time: Sat 22 Oct 2022 06:06:23 +0000
ROA not before: Sat 22 Oct 2022 06:06:23 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.148.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6481 (0x1951)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:23 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=DE1C21A6BB47A8052B7363683817B7330458D68C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b9:83:8c:7b:18:42:ad:fd:0c:f2:04:c4:bf:
27:e2:4d:ef:a1:67:5a:bf:db:8f:be:a1:cf:fa:e3:
23:76:3b:63:fe:c8:b3:59:12:7f:68:b4:1e:1a:f4:
03:d0:17:4e:cf:2a:d3:02:91:87:14:36:08:d0:e7:
89:e5:bb:4f:c0:e6:ae:99:f5:66:76:16:78:26:2c:
33:75:de:2e:01:41:2e:20:b2:68:ef:f3:dd:cb:20:
cb:a2:54:c9:92:69:15:84:c5:43:39:e8:0e:d2:c8:
a3:24:cc:5f:bf:04:2a:7f:3b:bf:49:89:06:e3:25:
93:3c:88:60:74:6f:88:36:06:9e:6d:3b:37:37:0e:
40:72:fe:58:cd:72:d5:d3:f7:84:b0:bc:53:ca:d2:
5a:b3:04:2d:4c:4d:e8:ad:8f:b2:08:c0:31:05:c4:
a3:cd:9c:27:e6:df:a4:05:3c:70:b4:10:e3:d3:73:
f5:b7:39:77:7b:bc:34:4a:b3:68:b5:a8:c3:74:43:
81:ee:25:f6:e4:a3:5b:e2:03:28:a9:58:0c:ac:49:
c7:23:5a:f7:a2:72:27:be:f2:5d:2f:f9:c0:67:88:
52:6b:40:b1:11:e4:a3:36:43:5c:7e:b1:da:6e:f6:
2f:a9:1b:76:2a:c1:36:eb:58:d1:66:ab:52:f5:08:
c7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:1C:21:A6:BB:47:A8:05:2B:73:63:68:38:17:B7:33:04:58:D6:8C
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3hwhprtHqAUrc2NoOBe3MwRY1ow.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.148.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:68:62:f1:dd:7c:0d:cf:ba:70:eb:9c:f5:e0:63:92:63:7e:
7f:f8:00:c7:f0:57:dd:01:a4:6d:c4:0f:35:0b:1f:3b:7a:8d:
67:7c:cd:4d:de:1a:b7:77:64:a2:86:99:11:dd:16:62:54:b3:
ab:22:f8:48:2a:42:95:b3:33:41:86:5b:bd:5d:fa:73:4b:c3:
5a:0c:83:3b:52:b4:6e:34:b9:85:2f:e7:65:9d:e9:f8:d5:01:
b9:5d:bb:3e:a6:da:93:f4:d1:86:e5:8c:0c:ab:79:06:b1:4c:
48:d6:8e:fe:0c:95:af:72:de:4a:1e:a6:b7:ac:b0:f1:75:2c:
da:45:28:82:1c:13:56:87:5f:14:fd:b3:eb:02:da:98:17:a7:
9a:2c:ab:91:33:f0:52:7a:aa:a2:03:1f:03:6a:11:ad:30:9b:
7b:22:f7:7a:c0:a4:fc:e5:21:de:35:5d:74:c5:f4:32:dc:b9:
9e:57:04:dd:cf:e3:fe:b8:eb:87:7b:0f:43:90:88:c3:1d:39:
4a:e1:30:aa:66:99:0f:5c:52:6a:5c:e5:e0:ff:18:46:0c:a7:
9a:76:20:36:a9:7c:45:93:9d:b9:e7:dd:4b:e0:f3:fe:c9:2e:
e2:aa:c8:b1:29:0f:b4:19:47:44:e5:d0:78:e8:b5:57:d3:49:
83:35:44:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:13 2023 by rpki-client on console-fra.rpki-client.org