Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4Y4eBPQl66XWdaXuhl71zUpdgWQ.roa
File: 4Y4eBPQl66XWdaXuhl71zUpdgWQ.roa (raw, json)
Hash identifier: scRzTvf81glsAodR4gxSuQZozBXuAmjS/M+2d3iYfoQ=
Subject key identifier: E1:8E:1E:04:F4:25:EB:A5:D6:75:A5:EE:86:5E:F5:CD:4A:5D:81:64
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 190B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4Y4eBPQl66XWdaXuhl71zUpdgWQ.roa
Signing time: Sat 22 Oct 2022 06:06:02 +0000
ROA not before: Sat 22 Oct 2022 06:06:02 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 180.218.0.0/16 maxlen: 16
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6411 (0x190b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:02 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E18E1E04F425EBA5D675A5EE865EF5CD4A5D8164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cc:a5:62:a5:fb:59:77:d0:15:30:56:fb:71:
a2:8f:22:e8:dd:ea:48:33:99:c3:99:a9:70:df:d7:
68:74:66:64:7f:64:45:98:53:25:c5:c8:e2:77:6b:
fa:14:2a:15:ae:07:33:9a:08:d7:ce:bf:2e:55:78:
69:7f:f7:f5:9d:d6:06:76:af:12:17:9a:92:83:d6:
4d:56:95:ec:eb:88:ed:8c:88:bf:f0:f7:75:29:49:
0a:f4:3d:e1:45:4a:2a:4c:f6:28:5b:cf:71:e5:e3:
c1:5d:b6:f1:61:66:88:72:3c:8f:7f:39:ba:28:7b:
fe:da:bd:0a:02:81:c7:fa:87:aa:64:29:d3:bd:a7:
7e:42:07:dc:12:6b:7b:5a:2e:42:9d:60:ff:ef:c3:
11:37:da:15:3a:96:5e:f0:aa:ab:4d:f0:67:3d:27:
6e:43:80:78:a1:2d:93:d2:e1:4d:2b:ac:fb:4e:5e:
87:bc:2f:d6:a2:79:d4:14:89:f0:5e:c1:bc:5d:bf:
a7:7f:ad:01:f2:cb:95:58:ee:e3:37:85:12:1b:44:
37:bd:e2:bf:64:15:ae:f7:c6:8b:ca:24:3c:b2:ed:
56:21:9b:bc:39:6e:da:02:67:f5:30:07:70:2f:85:
80:59:27:d1:8f:a8:b4:87:21:f6:89:e2:7a:d3:49:
cf:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:8E:1E:04:F4:25:EB:A5:D6:75:A5:EE:86:5E:F5:CD:4A:5D:81:64
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4Y4eBPQl66XWdaXuhl71zUpdgWQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.0.0/16
Signature Algorithm: sha256WithRSAEncryption
93:2d:59:71:8c:3a:3b:6c:29:c4:c5:1c:c0:53:a9:5f:a1:0b:
c8:be:a5:ae:17:3e:cf:7b:c9:18:e8:ae:4d:60:38:0f:fa:95:
33:49:da:fd:39:c8:d9:b1:4b:9a:22:fc:93:c0:53:88:ae:4f:
e5:6d:1f:96:89:55:c7:36:e7:68:f6:08:77:6a:dd:47:48:aa:
7c:e3:83:cd:3a:76:b9:b1:61:22:c9:0a:9c:33:e5:0c:fc:10:
5d:e3:c0:7e:4c:e6:63:8f:8e:ab:44:36:7d:b1:68:e7:45:3e:
9c:1c:78:a9:03:de:33:77:56:0a:de:31:57:46:bf:6d:00:34:
8a:dc:6c:0b:8f:8a:b2:ad:0d:a4:d5:af:7c:02:dc:de:b6:e1:
cc:79:29:b2:f7:7f:84:b8:98:c3:31:c2:e8:60:32:07:33:cd:
d0:56:d5:dc:f1:c5:ce:48:7b:63:f8:39:e8:88:60:3f:cf:11:
34:f1:3d:4d:d5:f0:e4:9a:ed:fd:ab:9d:d9:4b:4f:61:b9:a6:
e4:27:9a:3a:71:bc:24:7f:c0:bc:4c:07:e2:df:1d:b2:e4:98:
e7:b1:a1:82:1b:bf:f0:a5:bd:41:37:2e:9e:ae:c6:58:69:ac:
54:cc:d6:a7:ab:c0:71:c2:36:d5:15:94:29:4e:e1:01:02:6f:
2a:58:32:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:13 2023 by rpki-client on console-fra.rpki-client.org