Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JBS6SHxR8sE_Cn56zb1YEGXHR9k.roa
File: JBS6SHxR8sE_Cn56zb1YEGXHR9k.roa (raw, json)
Hash identifier: k4/KNhU1hU5jLQ48Fwukxdg1kV7u3fsc4x8HXbI/sFQ=
Subject key identifier: 24:14:BA:48:7C:51:F2:C1:3F:0A:7E:7A:CD:BD:58:10:65:C7:47:D9
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1953
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JBS6SHxR8sE_Cn56zb1YEGXHR9k.roa
Signing time: Sat 22 Oct 2022 06:06:23 +0000
ROA not before: Sat 22 Oct 2022 06:06:23 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.186.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6483 (0x1953)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:23 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2414BA487C51F2C13F0A7E7ACDBD581065C747D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:bb:51:c6:7d:4b:23:f0:4f:c3:75:94:e2:28:
86:29:a5:ab:83:c9:73:ac:77:fe:96:f2:4f:47:34:
0c:6b:a8:36:79:3c:ae:0f:a0:18:0f:59:42:b2:5c:
39:ff:77:e7:95:e4:61:8b:ad:7e:9f:4c:76:61:ff:
e2:1e:83:fe:15:73:02:19:e9:c9:e2:73:d5:dd:1e:
27:ec:59:c8:dc:28:c0:ce:03:cc:4e:fb:fe:1a:52:
2a:8d:ef:13:63:c8:ab:bd:0f:c3:0d:f5:a3:9e:51:
4c:1c:ec:3d:96:b1:c3:c4:5b:fe:20:c0:1a:1d:a7:
1a:de:1f:db:06:69:64:1b:df:6c:88:45:af:d7:a0:
3b:8e:96:bf:a2:a6:4c:4e:4e:e1:2b:89:61:6c:3c:
6f:8f:5f:61:be:3c:ab:e9:e2:69:e9:64:f0:43:ab:
c2:44:2f:4b:bd:c0:1a:c5:ee:a1:c0:28:1f:34:ea:
38:45:44:ff:93:d5:b9:81:96:95:08:a0:24:f2:b7:
7c:ec:65:f4:cd:7b:16:3e:0d:34:c5:41:ca:5a:04:
27:ed:02:4f:42:40:e2:59:08:dd:e9:03:ef:80:63:
3e:a0:6d:1c:99:81:a5:90:1c:7b:9f:9d:3d:01:00:
fc:ae:dd:56:87:46:d0:95:b0:80:55:98:99:f3:e3:
aa:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:14:BA:48:7C:51:F2:C1:3F:0A:7E:7A:CD:BD:58:10:65:C7:47:D9
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JBS6SHxR8sE_Cn56zb1YEGXHR9k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.186.0/23
Signature Algorithm: sha256WithRSAEncryption
80:64:db:38:dc:d9:80:89:5e:2c:86:99:ef:83:0a:3b:27:ef:
46:e9:91:a2:c9:17:fc:60:8f:af:c6:f9:fc:99:f8:f8:21:b4:
23:61:cd:d5:d0:7e:ed:eb:17:48:3a:6c:ee:75:fc:46:dd:f1:
4a:e4:09:49:07:c6:41:6f:17:cd:6a:dc:98:ae:af:64:22:ac:
09:4b:81:71:15:70:c9:6c:34:dd:ca:d0:24:fa:97:6c:d0:45:
82:53:c3:d9:f0:f0:26:7d:4b:ae:af:84:51:90:03:3a:44:76:
a4:63:8d:2f:ab:dc:0e:58:f8:8b:ec:0e:a4:9f:10:ba:a4:a8:
a1:c0:09:e0:99:ee:0b:75:a1:27:5e:ec:f7:e7:06:5b:1a:97:
c3:a3:e7:16:bd:f0:f9:15:80:25:b8:53:5d:ef:b1:6d:70:13:
cb:33:61:ec:61:9f:8f:8b:ee:43:e7:8b:ac:3a:e1:13:75:6f:
b2:6f:08:1c:d6:09:46:95:61:93:20:fb:65:94:5f:9c:74:af:
77:48:ab:a2:2f:67:78:08:bf:a9:ad:e1:fa:7c:ab:a1:8a:6e:
16:a9:bd:c4:e2:d9:78:97:ed:35:03:9c:08:47:ac:ee:fc:f3:
74:56:c0:20:c6:eb:c1:be:8c:73:84:95:38:9e:c0:ad:c5:94:
fe:5c:b6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:39 2023 by rpki-client on console-ams.rpki-client.org