Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HzxjgtK_M_b9l2aJWEoAN6csOSs.roa
File: HzxjgtK_M_b9l2aJWEoAN6csOSs.roa (raw, json)
Hash identifier: o/fQ5xoIeAswGZv1Hd6Y0Mf6KzSbIH+8CQZSNFWP1Jw=
Subject key identifier: 1F:3C:63:82:D2:BF:33:F6:FD:97:66:89:58:4A:00:37:A7:2C:39:2B
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HzxjgtK_M_b9l2aJWEoAN6csOSs.roa
Signing time: Thu 15 Sep 2022 02:35:24 +0000
ROA not before: Thu 15 Sep 2022 02:35:24 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.192.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:24 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1F3C6382D2BF33F6FD976689584A0037A72C392B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8c:fa:38:d4:a1:11:6b:f5:66:ba:43:c2:60:
fd:2e:b6:58:9e:35:96:3e:91:47:b9:da:7a:d1:4e:
02:9d:3d:13:67:08:fd:04:e0:ca:c5:61:58:9c:99:
ba:67:2b:74:02:3f:9f:72:9c:f4:bd:0f:37:ef:70:
70:f0:ef:bb:80:4c:67:6d:59:20:3f:8b:4e:7c:2f:
10:7b:a6:7e:db:9b:92:22:2d:5f:77:c5:16:dc:e6:
63:cd:a5:1c:44:8c:97:0e:35:4f:d0:73:63:4b:58:
9e:7d:53:91:20:33:ea:28:66:c5:9b:06:92:8c:3b:
5f:1a:12:d4:a3:9e:d1:45:39:63:b3:6e:75:e0:89:
89:83:5d:04:4f:f4:08:32:35:9f:4b:02:a3:e6:5a:
39:09:80:58:23:7d:f9:60:a0:17:29:86:ac:de:24:
40:ed:0f:49:30:e9:b5:3b:67:cf:3a:d6:a9:cf:d3:
bb:8f:f3:99:ff:c4:bb:58:c6:56:bb:64:eb:3a:ae:
d1:22:59:9a:f8:b9:89:4b:3d:73:cb:46:e2:59:e1:
b7:b9:9d:50:41:85:43:48:cb:b4:8a:68:8b:46:f5:
07:56:60:bd:19:10:59:88:bf:79:27:c3:7f:8f:d3:
e3:be:aa:5e:6b:e4:1e:f5:e0:2c:80:c6:96:e6:8e:
88:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:3C:63:82:D2:BF:33:F6:FD:97:66:89:58:4A:00:37:A7:2C:39:2B
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HzxjgtK_M_b9l2aJWEoAN6csOSs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.192.0/19
Signature Algorithm: sha256WithRSAEncryption
3c:d0:c5:a0:ea:95:d5:49:6a:6e:b0:ee:9a:2e:88:49:8a:25:
20:1f:7f:af:86:d1:03:64:7b:bb:29:07:a3:87:bc:05:3c:93:
c6:ec:66:e3:8c:18:34:d5:9c:fc:39:fd:6c:03:02:5b:dd:a7:
b7:5f:83:18:ad:18:e7:d7:b0:36:d7:86:05:76:d0:83:f8:33:
0c:20:d8:73:ba:c8:34:fd:2b:43:65:9a:c3:c0:01:88:77:5e:
91:ee:c8:1d:13:5e:15:7b:ae:e8:a3:3f:b0:32:7c:59:41:65:
0e:61:39:0b:4e:bb:ee:39:1a:54:e5:c6:c8:fc:49:12:0d:eb:
db:67:a0:ad:22:d4:33:0b:ce:7a:fa:3b:be:24:4d:0d:3e:c0:
a8:38:e1:32:61:f5:3d:de:d4:f9:04:da:b4:4f:23:df:ff:d8:
ec:b2:b9:cc:23:33:2e:76:1b:71:37:ed:0b:4e:07:bc:1b:79:
21:63:5e:a3:46:80:ba:fe:c5:32:82:01:3e:6a:00:b7:3e:d8:
79:cd:b3:a9:9c:01:ee:df:1a:9c:9f:93:4b:d6:18:6f:93:c0:
6b:c2:07:dc:49:0a:46:1e:d9:e1:ca:22:ed:50:43:1b:2d:50:
38:5b:d1:a3:ed:9b:02:42:99:f1:90:c7:ca:23:ca:6c:4e:f9:
4f:1c:d9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:47 2023 by rpki-client on console-fra.rpki-client.org