Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6ov1E29pKdS6gPY-fb04N1Q_RQg.roa
File: 6ov1E29pKdS6gPY-fb04N1Q_RQg.roa (raw, json)
Hash identifier: 3KjB7Y19FngUHqAy8a5p2TdEL2tcxvz6DqPmgevzLo4=
Subject key identifier: EA:8B:F5:13:6F:69:29:D4:BA:80:F6:3E:7D:BD:38:37:54:3F:45:08
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6ov1E29pKdS6gPY-fb04N1Q_RQg.roa
Signing time: Thu 15 Sep 2022 02:36:30 +0000
ROA not before: Thu 15 Sep 2022 02:36:30 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.200.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:30 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=EA8BF5136F6929D4BA80F63E7DBD3837543F4508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:76:a0:ba:35:09:2f:75:ea:ae:64:58:57:82:
55:b4:09:6d:c8:90:7b:2c:f0:cc:b3:f3:5c:a9:0e:
cb:e7:1c:60:96:46:d3:4e:f8:dc:9e:12:2c:e5:fa:
55:07:ec:ee:eb:13:64:70:91:b8:a7:33:ca:8c:53:
8f:64:bd:8e:63:04:92:29:3e:a4:3a:85:fe:49:c0:
28:3c:1f:25:de:a1:94:0b:d4:20:9c:8d:57:4e:e5:
c0:c5:12:b9:9c:83:c3:f5:0a:1c:b3:9e:d6:c0:62:
d4:bb:78:7d:68:a2:7d:89:3c:60:38:5f:12:6d:33:
b1:b1:0d:c9:cf:af:83:ec:8d:32:bc:45:6e:44:ca:
a9:04:b2:ee:eb:ec:a1:8c:37:93:7d:25:a4:7f:59:
56:0a:6d:2c:fa:85:ed:a3:6e:e2:79:02:24:a3:20:
23:b7:f3:fc:ae:04:1b:0d:b3:eb:42:0a:05:2b:fc:
7e:f2:27:d8:b2:12:aa:b6:11:80:a8:4c:49:e3:e9:
17:d2:4c:72:10:20:0d:04:99:42:8d:26:dd:e8:d5:
5a:9a:d9:23:ee:e2:01:b6:a4:b6:54:a0:86:eb:90:
21:98:fc:65:e2:56:d9:db:f4:8c:bd:a9:ec:08:39:
d8:26:1b:8e:92:6f:64:67:e2:f4:d3:d2:c2:e6:ba:
97:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8B:F5:13:6F:69:29:D4:BA:80:F6:3E:7D:BD:38:37:54:3F:45:08
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6ov1E29pKdS6gPY-fb04N1Q_RQg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.200.0/21
Signature Algorithm: sha256WithRSAEncryption
4e:75:6e:2d:61:04:a2:03:91:f0:67:be:f8:b6:08:20:df:b5:
91:36:9c:48:c0:a4:da:7b:10:a7:b1:51:72:e7:2e:65:36:dd:
80:a3:6b:28:a1:42:a5:83:cd:2b:25:bf:ac:0a:67:35:80:4e:
99:52:4d:d9:67:fe:ed:52:44:38:fe:a5:74:88:83:d5:ff:df:
f8:2a:43:18:0d:cd:00:ee:7a:3c:4e:c3:ce:ba:b3:44:c3:50:
41:a5:7e:98:e8:29:f0:f4:cf:74:4f:d9:9e:34:a4:2b:e7:47:
6f:ac:ac:b7:a3:09:6a:13:08:7f:c3:94:c4:61:9e:53:31:55:
ff:be:bc:b3:21:4c:f3:1f:97:5c:6b:85:56:ed:d2:be:84:4e:
9c:0f:a6:45:50:8e:97:b8:e3:c4:e7:bf:d5:7e:c3:47:4a:67:
24:80:d2:c6:dc:6e:a9:af:60:2f:40:bd:6a:2f:b1:74:ef:73:
ef:e0:77:ac:42:e9:4a:e5:a0:b7:c3:fb:99:ab:0e:10:5c:4c:
34:f0:5e:6f:77:5c:7b:6a:fe:c9:3d:ab:3d:87:74:0b:ce:3f:
f4:27:cb:d2:2b:44:32:b9:75:cd:a0:6f:14:ff:3e:b0:ed:5a:
85:7c:a7:35:dd:22:6d:cd:e1:56:a3:fb:45:02:b9:f1:ca:42:
9c:c7:9d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:45 2023 by rpki-client on console-fra.rpki-client.org