Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EGcv6uWGHdELMYYi_f4mTGgCGkM.roa
File: EGcv6uWGHdELMYYi_f4mTGgCGkM.roa (raw, json)
Hash identifier: Oc68DyvFx2wV/7867RnfniYXf3S6X0skJzSMyZ0Ek3s=
Subject key identifier: 10:67:2F:EA:E5:86:1D:D1:0B:31:86:22:FD:FE:26:4C:68:02:1A:43
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14F8
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EGcv6uWGHdELMYYi_f4mTGgCGkM.roa
Signing time: Thu 08 Sep 2022 04:23:15 +0000
ROA not before: Thu 08 Sep 2022 04:23:15 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.216.0/21 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5368 (0x14f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 8 04:23:15 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=10672FEAE5861DD10B318622FDFE264C68021A43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b8:e1:87:37:ef:65:b1:f0:51:57:73:d1:21:
5b:6b:5c:b8:4d:48:ca:59:5a:25:60:24:bd:d8:cf:
af:e0:0b:9e:84:48:93:70:56:94:cd:a5:eb:b5:73:
98:41:32:88:bb:7d:cd:66:4c:64:64:aa:72:7d:13:
29:7d:34:d8:f1:b1:1a:20:d6:25:9a:03:a6:1e:94:
94:a0:8e:00:80:45:3b:28:00:11:b5:25:86:4f:b1:
c6:ed:a0:0b:c8:02:41:4b:36:58:11:b8:cd:98:64:
90:0e:b9:20:5f:da:59:61:bd:94:29:d0:38:4a:89:
cf:14:fb:75:cf:0e:bb:6d:1f:d9:74:67:20:e3:43:
c4:b1:50:d1:cd:f3:76:f3:a5:86:ae:c8:d6:29:47:
ac:63:67:7e:92:1f:79:5f:4c:3c:85:a6:81:a7:22:
74:bf:a5:30:50:d4:8f:ef:a4:57:ef:34:73:bc:fe:
5c:6e:72:4f:bc:c2:8a:8b:92:1a:2b:50:16:ea:49:
04:5a:01:ba:1a:b3:ae:3c:60:3f:d6:fb:8a:00:b0:
95:ec:8c:11:35:c9:05:cd:94:ac:4c:ed:f6:21:a9:
96:10:d9:5f:88:fa:9a:e6:89:14:e0:75:2a:2c:15:
c8:0c:0e:65:b7:9a:83:fe:60:9c:6b:4c:e1:59:47:
02:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:67:2F:EA:E5:86:1D:D1:0B:31:86:22:FD:FE:26:4C:68:02:1A:43
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EGcv6uWGHdELMYYi_f4mTGgCGkM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.216.0/21
Signature Algorithm: sha256WithRSAEncryption
35:d0:07:2c:a3:7c:c5:57:71:29:05:ce:e5:15:c7:ca:d1:91:
da:ac:1d:6a:4e:72:2c:e6:e6:34:11:79:ea:37:6c:fa:5b:98:
bf:67:8e:86:ee:40:b9:75:ba:94:b5:d4:c6:02:9d:b6:6a:49:
15:de:8e:5c:8a:1d:f3:f5:a6:c8:c3:be:2e:0e:a4:01:1a:9a:
09:36:af:a5:ab:0f:05:f8:81:3b:3e:92:4f:81:74:6d:50:d8:
e8:93:c4:ea:de:f3:f5:22:8d:37:3d:44:44:e6:75:dc:72:87:
99:87:9c:6e:c6:5c:5e:75:7d:96:36:82:20:61:0c:64:5e:ce:
33:fd:f2:bc:80:10:10:31:16:3f:79:2a:92:b1:79:75:7b:14:
f1:b2:89:c4:8d:97:d8:3c:f8:ad:e4:cb:eb:b8:fd:ee:3f:91:
0d:b8:db:5e:1c:0f:af:35:61:70:3c:81:da:08:b5:d6:60:fa:
07:0e:ce:15:d3:04:df:83:cb:cb:9b:15:ad:48:e4:0d:fb:15:
ef:18:b6:16:ca:11:2c:d3:49:97:81:7b:0e:b7:59:92:82:df:
23:13:76:7d:10:dc:80:3d:99:eb:aa:d4:b9:87:79:23:81:dc:
df:0e:09:76:8c:ca:fa:a6:95:51:05:29:3a:f0:52:62:69:16:
16:27:90:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:34 2023 by rpki-client on console-ams.rpki-client.org