Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6pP6a5-84MzM0jjPDEowkKDqo2c.roa
File: 6pP6a5-84MzM0jjPDEowkKDqo2c.roa (raw, json)
Hash identifier: kJz7Gcqj05at/VlF11xXHkzw+BckVv7y/Lz7JfBkUuM=
Subject key identifier: EA:93:FA:6B:9F:BC:E0:CC:CC:D2:38:CF:0C:4A:30:90:A0:EA:A3:67
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 197C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6pP6a5-84MzM0jjPDEowkKDqo2c.roa
Signing time: Sat 22 Oct 2022 06:06:35 +0000
ROA not before: Sat 22 Oct 2022 06:06:35 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 180.218.232.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6524 (0x197c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:35 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=EA93FA6B9FBCE0CCCCD238CF0C4A3090A0EAA367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:97:bd:0f:38:64:a0:e9:4b:10:fe:59:92:f1:
22:cc:9c:91:67:a5:6d:c1:a2:aa:56:36:f9:40:90:
c6:45:20:62:ca:30:4f:9a:e7:73:1b:fd:7c:84:63:
fa:06:9c:e0:17:13:ea:01:9d:35:58:e8:8b:2a:eb:
27:11:b1:d4:6e:fc:41:98:43:9b:4b:40:3b:13:43:
24:90:63:9d:2a:86:20:1d:64:a7:48:48:3d:07:78:
3a:cd:e3:8f:0b:fe:0d:64:b2:b8:3b:86:74:6b:c2:
92:a6:7b:4c:b0:6b:7d:da:86:f1:68:1c:29:19:3b:
07:f1:8f:8a:eb:56:2c:8d:15:f7:b8:5d:38:84:a8:
f1:98:77:2b:4e:57:22:2c:9e:9e:6b:54:a6:7c:6f:
e3:39:54:74:19:1e:bf:b8:d8:ad:0c:85:bd:bf:c6:
23:a9:55:1f:92:9d:71:10:b2:c4:c9:3d:b5:fe:20:
5e:4e:87:ee:d4:60:64:06:41:89:4e:f4:4f:75:d6:
6d:eb:fc:b0:c7:df:0c:8a:fa:2c:18:fa:75:31:2d:
01:eb:81:44:c4:24:b4:6f:ff:f2:65:51:e9:10:ca:
dd:f3:74:cc:a6:b5:38:12:cd:8f:6b:d9:0e:d8:3e:
3b:3c:ef:ee:80:2f:1c:85:8c:0f:d1:0d:27:78:e7:
e7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:93:FA:6B:9F:BC:E0:CC:CC:D2:38:CF:0C:4A:30:90:A0:EA:A3:67
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6pP6a5-84MzM0jjPDEowkKDqo2c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.232.0/21
Signature Algorithm: sha256WithRSAEncryption
8c:f3:ee:64:cc:e4:61:ba:0f:e3:5d:0a:dd:f0:88:b6:f5:6a:
27:c2:08:63:91:fa:47:b6:79:ce:34:b0:c1:5c:97:14:33:87:
1e:42:0c:0e:60:3a:7f:74:c7:ac:5e:12:c2:15:69:52:11:1d:
71:ab:ea:7c:77:70:9f:65:f2:7c:2d:6f:65:5e:37:b3:25:69:
98:c6:13:83:ca:2f:1e:95:0e:62:6b:4d:d9:8d:cc:64:54:74:
39:80:8c:22:ec:69:79:a6:ab:6b:ed:2c:8d:30:68:c5:54:38:
1e:28:50:e7:0e:0b:bb:7f:d3:7e:23:32:f5:8f:3b:e4:75:63:
a8:57:af:9d:40:6f:79:b5:31:2c:1c:0f:06:bc:7d:b2:f2:66:
39:72:bf:c8:f4:4b:70:ab:3b:1b:3b:f4:88:72:40:56:86:72:
b7:68:26:d3:86:fd:3b:c7:65:be:f9:7e:ca:88:ff:b5:dd:34:
09:b2:2c:50:ec:fe:ea:27:b3:f2:48:4b:1f:c2:26:a5:15:30:
0f:98:b1:18:14:cc:4c:f2:13:16:24:6a:2e:85:2a:7a:2e:fc:
c4:d1:f8:59:08:3d:9f:9b:11:dc:c6:27:f1:8f:0d:90:a2:93:
c8:4a:7e:8d:cb:ba:e8:d9:ec:18:2c:00:28:53:10:87:b4:f8:
d8:ae:6a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:38 2023 by rpki-client on console-ams.rpki-client.org