Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/El-YoviYtpx8XQrBcJCOlqCn0rY.roa
File: El-YoviYtpx8XQrBcJCOlqCn0rY.roa (raw, json)
Hash identifier: dv+9ORKnVkc8MwIR3QlxMGPKeHkO4wLmQBXl6uWKh5k=
Subject key identifier: 12:5F:98:A2:F8:98:B6:9C:7C:5D:0A:C1:70:90:8E:96:A0:A7:D2:B6
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1954
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/El-YoviYtpx8XQrBcJCOlqCn0rY.roa
Signing time: Sat 22 Oct 2022 06:06:24 +0000
ROA not before: Sat 22 Oct 2022 06:06:24 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.128.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6484 (0x1954)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:24 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=125F98A2F898B69C7C5D0AC170908E96A0A7D2B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bb:3b:eb:af:16:75:f1:88:31:f7:a6:18:4f:
5e:16:23:33:ff:ff:49:3c:4d:26:01:72:58:9e:23:
4a:98:a0:96:7a:59:5d:00:e5:23:bc:36:ae:52:f1:
0b:82:f9:78:94:d3:23:30:95:b6:83:0b:7a:42:1d:
f2:6c:fc:8d:48:24:14:9f:37:f3:ac:da:26:be:0d:
29:b8:cc:98:ea:12:2d:f6:52:e2:f5:49:1b:ce:8f:
35:4a:c5:89:ad:57:07:65:e3:33:2c:03:8e:ac:20:
cd:a7:8b:7f:c9:50:c2:a1:b7:b8:73:73:64:ae:36:
c8:a1:0d:84:85:93:1b:7b:0b:2e:2e:0e:11:79:d5:
a1:26:26:ff:3c:2c:5d:a5:db:12:a0:35:73:99:a5:
6a:15:f3:6b:97:d5:0e:2f:16:46:bf:67:fe:14:69:
39:c1:71:e1:ab:53:57:f1:b9:67:eb:34:17:03:be:
19:1e:24:3e:47:9d:19:89:e3:c5:52:20:44:87:c0:
da:b9:1b:7a:92:ba:47:ff:9e:57:b6:2e:61:b9:ea:
db:e2:ae:7d:72:db:e8:33:cf:42:dd:75:18:f7:36:
af:4f:7c:9e:e6:cf:ac:c4:34:0e:f7:88:c1:47:e3:
1d:5d:d9:48:57:07:3e:20:5f:b2:bf:73:73:bc:85:
df:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:5F:98:A2:F8:98:B6:9C:7C:5D:0A:C1:70:90:8E:96:A0:A7:D2:B6
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/El-YoviYtpx8XQrBcJCOlqCn0rY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.128.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:36:f0:50:94:ea:49:ab:3e:8d:2b:95:37:0f:23:39:d4:ec:
81:11:e1:39:9d:b2:a8:59:3b:58:16:bc:0f:03:b5:89:33:2f:
9e:02:33:be:ca:2c:c3:79:cc:fc:ad:ac:5a:1f:8f:d0:6f:ed:
c9:7f:30:c1:96:b7:00:7b:62:ab:30:f3:87:08:26:1e:07:42:
67:29:eb:a2:51:1e:00:4f:0a:ec:27:51:8c:50:f3:9e:4e:27:
7c:82:8d:d3:57:b1:cd:9c:98:ce:de:43:cc:7e:57:e3:1d:e3:
b0:e0:f8:12:7a:e8:49:15:3a:10:fa:8d:84:ae:43:38:b9:fa:
9a:33:81:29:55:51:fb:78:cb:76:16:83:ca:23:a8:ff:39:fb:
b2:04:9b:79:2a:0e:45:7b:aa:a8:f9:59:ce:97:f5:f4:c4:aa:
5a:ff:51:65:8b:76:79:e6:cb:76:8a:52:26:50:d8:55:2c:e0:
91:b9:5b:d6:7c:85:f0:27:1f:c6:24:98:be:c7:38:58:63:f4:
59:7b:22:e1:f1:25:c7:4e:07:72:78:10:98:0f:47:73:70:49:
d7:c0:e5:8f:66:12:f1:02:7a:98:a1:75:35:03:e1:07:8d:6b:
df:57:e9:18:97:ae:3f:74:69:db:12:64:98:1c:f0:58:e3:56:
c2:fd:31:2e
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGVQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjA2MjRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDEyNUY5OEEyRjg5OEI2
OUM3QzVEMEFDMTcwOTA4RTk2QTBBN0QyQjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCguzvrrxZ18Ygx96YYT14WIzP//0k8TSYBclieI0qYoJZ6WV0A
5SO8Nq5S8QuC+XiU0yMwlbaDC3pCHfJs/I1IJBSfN/Os2ia+DSm4zJjqEi32UuL1
SRvOjzVKxYmtVwdl4zMsA46sIM2ni3/JUMKht7hzc2SuNsihDYSFkxt7Cy4uDhF5
1aEmJv88LF2l2xKgNXOZpWoV82uX1Q4vFka/Z/4UaTnBceGrU1fxuWfrNBcDvhke
JD5HnRmJ48VSIESHwNq5G3qSukf/nle2LmG56tvirn1y2+gzz0LddRj3Nq9PfJ7m
z6zENA73iMFH4x1d2UhXBz4gX7K/c3O8hd+pAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUEl+YoviYtpx8XQrBcJCOlqCn0rYwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0VsLVlvdmlZdHB4OFhRckJj
SkNPbHFDbjByWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
2oAwDQYJKoZIhvcNAQELBQADggEBAB028FCU6kmrPo0rlTcPIznU7IER4TmdsqhZ
O1gWvA8DtYkzL54CM77KLMN5zPytrFofj9Bv7cl/MMGWtwB7Yqsw84cIJh4HQmcp
66JRHgBPCuwnUYxQ855OJ3yCjdNXsc2cmM7eQ8x+V+Md47Dg+BJ66EkVOhD6jYSu
Qzi5+pozgSlVUft4y3YWg8ojqP85+7IEm3kqDkV7qqj5Wc6X9fTEqlr/UWWLdnnm
y3aKUiZQ2FUs4JG5W9Z8hfAnH8YkmL7HOFhj9Fl7IuHxJcdOB3J4EJgPR3NwSdfA
5Y9mEvECepihdTUD4QeNa99X6RiXrj90adsSZJgc8FjjVsL9MS4=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:14 2023 by rpki-client on console-fra.rpki-client.org