Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DLCLmH0D2m9hSfFyQazURkGtoj8.roa
File: DLCLmH0D2m9hSfFyQazURkGtoj8.roa (raw, json)
Hash identifier: E67XXwyh8+625oviounnUA57SsT3tIGGEOd11IZxVw8=
Subject key identifier: 0C:B0:8B:98:7D:03:DA:6F:61:49:F1:72:41:AC:D4:46:41:AD:A2:3F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1A60
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DLCLmH0D2m9hSfFyQazURkGtoj8.roa
Signing time: Thu 27 Oct 2022 03:04:18 +0000
ROA not before: Thu 27 Oct 2022 03:04:18 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.136.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6752 (0x1a60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 27 03:04:18 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0CB08B987D03DA6F6149F17241ACD44641ADA23F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b0:2d:69:5e:85:2c:fb:12:24:e8:57:75:0e:
33:99:a0:72:96:6a:7d:fb:06:85:90:b8:b1:65:ee:
2a:a7:cf:25:04:3f:7c:27:75:27:2b:9f:08:b7:c8:
79:89:37:79:d9:a7:8b:c8:9c:84:2b:f7:26:1d:9b:
dc:d2:7f:f7:ef:9c:95:b9:31:fc:ab:43:47:6e:ab:
2c:36:54:2e:ce:e3:b3:65:a6:75:7a:dc:1d:9d:02:
04:34:5d:cd:74:e5:8f:80:ef:f3:69:cc:a6:3e:0f:
8e:5e:e7:1f:f1:9f:92:30:e8:3d:30:29:78:0b:79:
43:44:5c:3a:87:65:92:c5:eb:3f:91:ad:8e:de:c2:
63:e8:ce:94:42:0a:9b:a2:68:5f:03:3a:59:69:9a:
31:a0:a6:3a:d9:00:41:9d:03:12:41:16:f8:f4:19:
c3:d7:11:14:b6:8f:72:03:04:97:8b:fc:f1:6b:8d:
6d:64:70:3a:29:7d:60:f8:6d:59:2d:95:55:7c:3c:
ff:86:7d:6f:16:a3:45:24:e7:1b:c1:14:fa:69:94:
01:d4:dd:50:12:00:17:55:c0:fe:90:69:45:71:5a:
a8:e7:6c:ac:2a:40:7c:09:82:0a:23:b7:ee:20:d4:
09:21:b8:78:62:be:1b:7b:33:cb:bb:32:fa:4f:47:
c8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B0:8B:98:7D:03:DA:6F:61:49:F1:72:41:AC:D4:46:41:AD:A2:3F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DLCLmH0D2m9hSfFyQazURkGtoj8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.136.0/21
Signature Algorithm: sha256WithRSAEncryption
5f:4d:02:4c:8a:83:c7:e1:0e:4f:ce:a9:53:41:66:3a:6d:0b:
46:12:6a:27:b9:2e:ee:d4:32:be:0c:00:27:ab:dc:cd:43:ce:
52:ed:f6:1c:81:fa:06:b4:19:9d:94:77:d5:25:df:43:b2:25:
b7:73:89:ad:6c:ef:fa:a9:7b:c3:bd:28:d7:c7:2d:00:12:5e:
6b:a1:d2:81:c8:15:b9:3f:fd:8b:6e:97:03:cc:53:4e:e8:6c:
3f:6f:85:4f:45:ee:53:e5:12:53:9d:b9:f4:41:79:60:02:bb:
72:5c:50:d5:f1:e5:31:a8:ff:bd:81:9b:21:fe:81:a1:db:bc:
e1:97:7c:44:0a:25:67:49:aa:79:d8:d5:c3:a2:37:e3:ad:78:
11:c6:0b:1e:88:90:ac:37:39:b4:a0:fc:15:93:e8:2f:74:bd:
ab:21:94:f1:08:d9:f4:52:6a:ab:68:e2:ad:e8:4d:4b:d4:16:
ea:0f:f3:be:57:2a:fd:04:33:60:60:97:81:40:e1:18:df:cb:
be:6f:a0:8e:c8:50:2c:ce:e7:f5:79:f2:4b:25:3d:0d:22:f4:
e8:b1:5b:3c:84:7b:0a:41:1a:e2:ae:0b:8d:4e:29:94:8e:6a:
f5:44:8b:b5:4f:99:c1:a7:b6:a5:32:e3:4f:0d:bd:76:97:ac:
5f:cb:a6:c2
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGmAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjcw
MzA0MThaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDBDQjA4Qjk4N0QwM0RB
NkY2MTQ5RjE3MjQxQUNENDQ2NDFBREEyM0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8sC1pXoUs+xIk6Fd1DjOZoHKWan37BoWQuLFl7iqnzyUEP3wn
dScrnwi3yHmJN3nZp4vInIQr9yYdm9zSf/fvnJW5MfyrQ0duqyw2VC7O47NlpnV6
3B2dAgQ0Xc105Y+A7/NpzKY+D45e5x/xn5Iw6D0wKXgLeUNEXDqHZZLF6z+RrY7e
wmPozpRCCpuiaF8DOllpmjGgpjrZAEGdAxJBFvj0GcPXERS2j3IDBJeL/PFrjW1k
cDopfWD4bVktlVV8PP+GfW8Wo0Uk5xvBFPpplAHU3VASABdVwP6QaUVxWqjnbKwq
QHwJggojt+4g1AkhuHhivht7M8u7MvpPR8hdAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUDLCLmH0D2m9hSfFyQazURkGtoj8wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0RMQ0xtSDBEMm05aFNmRnlR
YXpVUmtHdG9qOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
2ogwDQYJKoZIhvcNAQELBQADggEBAF9NAkyKg8fhDk/OqVNBZjptC0YSaie5Lu7U
Mr4MACer3M1DzlLt9hyB+ga0GZ2Ud9Ul30OyJbdzia1s7/qpe8O9KNfHLQASXmuh
0oHIFbk//YtulwPMU07obD9vhU9F7lPlElOdufRBeWACu3JcUNXx5TGo/72BmyH+
gaHbvOGXfEQKJWdJqnnY1cOiN+OteBHGCx6IkKw3ObSg/BWT6C90vashlPEI2fRS
aqto4q3oTUvUFuoP875XKv0EM2Bgl4FA4Rjfy75voI7IUCzO5/V58kslPQ0i9Oix
WzyEewpBGuKuC41OKZSOavVEi7VPmcGntqUy408NvXaXrF/LpsI=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:14 2023 by rpki-client on console-fra.rpki-client.org