Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Mmw4PKXEOWTi2xYI2S9JPHPWwbk.roa
File: Mmw4PKXEOWTi2xYI2S9JPHPWwbk.roa (raw, json)
Hash identifier: fAYjFe51JfqSE/chd66Qkn5p0krs4lJY7EwJzrewXE4=
Subject key identifier: 32:6C:38:3C:A5:C4:39:64:E2:DB:16:08:D9:2F:49:3C:73:D6:C1:B9
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1962
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Mmw4PKXEOWTi2xYI2S9JPHPWwbk.roa
Signing time: Sat 22 Oct 2022 06:06:28 +0000
ROA not before: Sat 22 Oct 2022 06:06:28 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 180.218.112.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6498 (0x1962)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:28 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=326C383CA5C43964E2DB1608D92F493C73D6C1B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c0:0e:20:51:1c:e0:d2:84:d1:15:48:92:e3:
ae:05:16:fc:f1:f1:c9:54:ff:75:8a:17:2c:43:aa:
be:b8:6b:90:cb:8d:39:9a:79:c7:d7:5a:ad:99:e2:
8b:c3:03:35:d6:c1:ae:b3:e2:c8:b8:c7:b0:4b:6d:
c9:0e:52:96:d1:25:8c:95:b4:1c:3a:72:3a:e3:ac:
ed:c3:ec:03:2d:e0:a7:72:ff:72:1f:68:bf:bc:6c:
4a:81:4a:d1:4f:47:0d:03:91:4c:78:b5:2a:b2:b0:
01:b4:7b:6b:d0:de:8c:30:ca:81:2c:fb:cd:54:3a:
64:e2:cc:70:d1:dd:ee:1b:c6:51:50:86:d6:db:cc:
e4:01:dd:66:9c:ae:05:40:bf:0b:d8:93:a5:5e:49:
ea:61:16:e9:56:6b:b4:1e:6d:99:b5:f1:03:1f:e6:
7f:cd:de:2d:b1:84:e3:0c:97:d4:99:00:96:0d:61:
10:61:b9:b4:ce:0b:c7:3f:f5:d1:e5:cb:9c:7e:4a:
98:02:08:ac:7c:d4:d4:08:6b:66:21:de:aa:2c:86:
e7:a0:1d:3b:36:41:97:31:72:e0:9f:a6:03:f5:cf:
cc:33:c5:e7:e9:ad:a9:37:1d:f9:ab:c5:14:d2:f1:
90:50:a6:38:b2:cd:d5:17:56:8c:0b:d5:0b:77:0d:
ac:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6C:38:3C:A5:C4:39:64:E2:DB:16:08:D9:2F:49:3C:73:D6:C1:B9
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Mmw4PKXEOWTi2xYI2S9JPHPWwbk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.112.0/21
Signature Algorithm: sha256WithRSAEncryption
75:ea:24:c2:84:e7:53:d8:e8:6d:c2:8a:5f:dd:cb:9f:dd:69:
be:fa:29:90:85:92:c6:2a:ae:e3:e6:56:91:3e:4c:34:8e:af:
23:ab:2e:fd:e7:50:6c:7f:e0:92:c2:c2:8f:64:a3:1a:6f:02:
b0:45:08:6a:cc:c8:f4:93:a1:27:f3:41:83:bd:c3:ef:cb:0f:
7f:c5:68:a6:e7:03:89:3f:f9:96:56:99:24:a6:cd:95:bc:da:
c5:f2:01:d2:dd:85:e3:bc:9c:c8:34:58:68:28:1f:4d:11:f0:
bc:0f:51:af:c7:88:06:5d:50:f1:68:2d:a8:32:22:b3:21:cf:
c4:72:fa:34:4c:d3:66:7e:a6:0a:78:6b:b9:d4:28:e2:62:12:
3a:ba:e2:de:b1:59:39:5b:79:7e:90:fd:d7:4e:cc:6a:eb:82:
a1:f0:5c:05:7d:bb:bf:e1:f3:c8:46:13:fd:4c:79:f3:1d:e8:
ea:5d:69:ba:33:03:7b:80:3b:3a:a2:68:04:73:61:cd:f1:a2:
2b:c7:a1:2b:75:8d:21:42:5b:b6:fa:0b:df:be:c2:81:be:c1:
08:a9:3b:84:8b:79:5d:7b:14:3f:9f:cb:df:cb:38:4c:28:73:
41:98:f4:50:35:b3:ae:a2:2f:14:5d:d3:a0:10:9a:54:59:21:
fc:94:a6:7b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGWIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjA2MjhaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDMyNkMzODNDQTVDNDM5
NjRFMkRCMTYwOEQ5MkY0OTNDNzNENkMxQjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzwA4gURzg0oTRFUiS464FFvzx8clU/3WKFyxDqr64a5DLjTma
ecfXWq2Z4ovDAzXWwa6z4si4x7BLbckOUpbRJYyVtBw6cjrjrO3D7AMt4Kdy/3If
aL+8bEqBStFPRw0DkUx4tSqysAG0e2vQ3owwyoEs+81UOmTizHDR3e4bxlFQhtbb
zOQB3WacrgVAvwvYk6VeSephFulWa7QebZm18QMf5n/N3i2xhOMMl9SZAJYNYRBh
ubTOC8c/9dHly5x+SpgCCKx81NQIa2Yh3qoshuegHTs2QZcxcuCfpgP1z8wzxefp
rak3HfmrxRTS8ZBQpjiyzdUXVowL1Qt3DawlAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUMmw4PKXEOWTi2xYI2S9JPHPWwbkwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL01tdzRQS1hFT1dUaTJ4WUky
UzlKUEhQV3diay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
2nAwDQYJKoZIhvcNAQELBQADggEBAHXqJMKE51PY6G3Cil/dy5/dab76KZCFksYq
ruPmVpE+TDSOryOrLv3nUGx/4JLCwo9koxpvArBFCGrMyPSToSfzQYO9w+/LD3/F
aKbnA4k/+ZZWmSSmzZW82sXyAdLdheO8nMg0WGgoH00R8LwPUa/HiAZdUPFoLagy
IrMhz8Ry+jRM02Z+pgp4a7nUKOJiEjq64t6xWTlbeX6Q/ddOzGrrgqHwXAV9u7/h
88hGE/1MefMd6OpdabozA3uAOzqiaARzYc3xoivHoSt1jSFCW7b6C9++woG+wQip
O4SLeV17FD+fy9/LOEwoc0GY9FA1s66iLxRd06AQmlRZIfyUpns=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:39 2023 by rpki-client on console-ams.rpki-client.org