Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6Tz9dEtVb9bbCUZvooRzo2K-bG0.roa
File: 6Tz9dEtVb9bbCUZvooRzo2K-bG0.roa (raw, json)
Hash identifier: bdBk2qWbkmvmNtBLsdy91vBBNTb6RJ8B1dXdz91SJIQ=
Subject key identifier: E9:3C:FD:74:4B:55:6F:D6:DB:09:46:6F:A2:84:73:A3:62:BE:6C:6D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1A7A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6Tz9dEtVb9bbCUZvooRzo2K-bG0.roa
Signing time: Thu 10 Nov 2022 08:28:54 +0000
ROA not before: Thu 10 Nov 2022 08:28:54 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 180.218.240.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6778 (0x1a7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Nov 10 08:28:54 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E93CFD744B556FD6DB09466FA28473A362BE6C6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fe:44:44:f2:2c:19:8e:df:d9:48:7b:56:1d:
6c:1b:e5:5e:d5:be:f1:b9:ae:39:5c:fe:5f:27:ee:
5a:27:9c:0d:86:bf:e1:a4:2d:64:f6:13:c6:f8:e1:
35:e0:33:8f:af:c6:63:4e:82:42:69:05:9a:04:87:
22:b3:e1:da:ae:b5:aa:db:8a:30:11:27:e1:18:8b:
47:13:c1:df:62:f7:ab:7f:22:c2:75:d3:2f:4b:60:
53:88:2e:8a:af:8e:05:24:70:e5:94:80:03:59:e5:
25:4e:82:24:56:50:62:29:3b:9d:19:31:f8:b6:7d:
b2:4b:ed:a3:23:8e:6c:55:14:02:1c:91:60:2c:6d:
6a:27:fb:b1:5b:1b:f1:29:d1:59:45:74:89:14:b7:
9a:b4:26:96:f3:d6:79:5a:c2:cd:58:7c:bb:f2:06:
6a:b9:b5:f1:7e:2a:cf:ab:94:a8:48:37:ca:ae:23:
6e:0e:28:49:be:3d:43:f9:1e:a5:68:23:63:c3:a3:
a5:99:67:6f:a2:83:f8:b4:88:24:c8:ab:db:0b:07:
f4:60:63:67:9d:40:6c:8a:ec:cd:e4:30:a5:b5:f6:
23:c4:9e:44:e9:99:e1:15:49:97:14:42:75:5c:80:
68:83:67:aa:c1:e4:ac:d8:23:98:5a:6b:02:3d:5e:
71:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:3C:FD:74:4B:55:6F:D6:DB:09:46:6F:A2:84:73:A3:62:BE:6C:6D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6Tz9dEtVb9bbCUZvooRzo2K-bG0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.240.0/20
Signature Algorithm: sha256WithRSAEncryption
7e:29:2d:1f:8e:ee:e6:56:87:1f:c8:e8:c2:52:af:7d:2f:0b:
05:ed:37:aa:03:48:73:0f:e6:9c:1d:72:99:7a:1c:e2:aa:30:
a5:34:a1:0e:32:d4:a5:37:04:d2:c0:d4:03:47:fa:04:78:b0:
3c:0a:a3:50:d6:0c:2b:9a:53:bd:79:28:89:f0:92:32:35:33:
3f:d2:2d:b2:88:d9:a7:17:51:23:2a:75:61:5c:c8:3b:8b:aa:
b0:fa:56:67:2e:72:ef:4f:4f:dd:d0:2f:89:24:59:7f:fb:79:
81:95:b7:c0:41:75:64:f6:6c:95:3f:5e:68:e9:de:72:be:df:
a2:55:9c:c7:d9:2b:af:0f:25:38:bb:9e:93:fb:56:c5:5d:48:
eb:e5:b1:a8:ee:8c:a2:20:97:22:2d:b0:f3:e2:c6:c1:fb:11:
ce:ea:11:ae:a4:7d:f3:c7:c9:70:42:83:f2:76:99:3f:47:cc:
9e:a1:8e:a0:e6:d8:4e:72:ec:08:a5:03:be:ee:5e:f6:12:a0:
97:5f:9a:dd:b3:10:02:8e:ce:3f:12:c5:5b:47:9c:06:d7:c3:
e5:d7:90:05:d1:67:18:a4:15:ee:56:6b:11:a6:16:a3:73:cb:
37:ec:8e:92:95:2b:17:e6:cb:1a:d3:62:d5:59:1a:d2:f6:ff:
2c:2c:c2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:38 2023 by rpki-client on console-ams.rpki-client.org