Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MMZt8iQ106eLQu-Ylkrkq9EY518.roa
File: MMZt8iQ106eLQu-Ylkrkq9EY518.roa (raw, json)
Hash identifier: BlMFH61w87BH7RFjjU6Zuxykv8gnuPwT6cTvVfjAakc=
Subject key identifier: 30:C6:6D:F2:24:35:D3:A7:8B:42:EF:98:96:4A:E4:AB:D1:18:E7:5F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MMZt8iQ106eLQu-Ylkrkq9EY518.roa
Signing time: Thu 15 Sep 2022 02:35:54 +0000
ROA not before: Thu 15 Sep 2022 02:35:54 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 180.218.124.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:54 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=30C66DF22435D3A78B42EF98964AE4ABD118E75F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e8:52:2e:5d:13:69:fc:d8:8b:54:37:7c:98:
ae:e6:87:dc:e2:bd:92:79:8d:94:81:5b:d8:2f:f6:
a6:f3:54:bf:46:1b:07:83:74:8f:dc:d9:68:3b:18:
67:e5:a2:95:a8:d0:71:0b:ae:9b:ef:17:f9:20:75:
d0:b9:8b:47:f0:f6:b9:68:c1:0e:04:87:eb:9c:73:
76:09:2f:7f:b0:83:32:88:a2:a1:62:b2:e3:ec:ea:
9f:3f:26:83:55:4b:96:0a:f3:a4:3d:e7:01:3e:e3:
25:a7:7c:26:2f:9c:63:84:88:1a:8d:2e:0e:08:9f:
92:f4:5e:23:9a:20:26:dc:8e:c2:90:c3:89:ef:9a:
44:92:ac:41:c0:c9:fa:25:4c:b3:7a:41:62:a9:58:
2c:5e:e1:66:b0:71:86:d2:ea:f8:58:26:1e:68:82:
72:08:75:c8:9d:90:96:5a:fb:21:52:2b:ee:ff:3c:
27:e2:14:46:ee:60:47:b0:43:fd:3b:34:59:38:2c:
19:e2:b6:9a:be:30:69:9a:58:6d:48:78:03:e3:9f:
84:6e:9b:ea:1f:f6:ad:b1:8f:26:36:83:b5:18:33:
5b:2f:33:ec:19:0c:b3:5d:13:9a:e4:54:45:78:7f:
2e:33:52:c2:17:98:1c:b7:a0:85:9a:93:3a:72:6b:
97:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C6:6D:F2:24:35:D3:A7:8B:42:EF:98:96:4A:E4:AB:D1:18:E7:5F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MMZt8iQ106eLQu-Ylkrkq9EY518.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.124.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:6f:06:67:db:90:6c:4d:ec:42:97:88:47:86:e7:c5:28:e1:
1e:82:12:00:42:b4:2e:b5:60:bb:22:bd:75:ef:9c:5e:a3:71:
37:8c:f9:b2:f4:ee:cd:0a:f5:13:4d:0f:95:a1:7b:13:fb:31:
aa:eb:51:ee:36:7e:d2:69:74:84:82:a0:5c:c8:de:41:79:8f:
7c:6d:09:67:21:2a:09:26:fe:62:64:87:cc:44:d5:b2:83:4d:
68:15:c5:0d:8a:14:35:f9:e8:78:a1:2b:cb:46:39:b6:1b:8a:
08:2b:69:54:92:e2:f1:ab:37:51:7b:2f:80:39:cf:7b:0a:27:
b2:1e:1d:1e:32:14:64:a9:65:f2:e3:60:3d:7c:08:f8:66:98:
ac:ca:1b:78:04:d3:d7:26:71:09:42:57:83:d6:89:3e:bd:28:
8c:b7:60:11:71:81:3a:a1:7c:48:1a:37:c1:74:a6:b3:b4:f5:
00:b7:fa:db:88:b3:3a:23:08:b0:92:07:ce:d2:d1:09:d7:78:
6f:2b:99:00:11:ae:a3:97:c8:87:1e:8c:72:2b:67:9e:9b:d1:
1d:ce:89:02:07:8b:4c:16:db:9c:df:d3:7b:36:02:6a:af:c8:
ec:51:f0:4a:e9:dd:6b:b7:9c:e3:71:c0:d3:2f:b6:7e:ee:2d:
9c:29:95:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:36 2023 by rpki-client on console-ams.rpki-client.org