Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Mvvaik181kvKm_n687UpZ5Hb5XI.roa
File: Mvvaik181kvKm_n687UpZ5Hb5XI.roa (raw, json)
Hash identifier: yqBjeyJSz7vZWNR203qWT7CIV2NOGGkCNi8AgZaqNHc=
Subject key identifier: 32:FB:DA:8A:4D:7C:D6:4B:CA:9B:F9:FA:F3:B5:29:67:91:DB:E5:72
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 18E4
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Mvvaik181kvKm_n687UpZ5Hb5XI.roa
Signing time: Sat 22 Oct 2022 06:05:50 +0000
ROA not before: Sat 22 Oct 2022 06:05:50 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.0.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6372 (0x18e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:05:50 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=32FBDA8A4D7CD64BCA9BF9FAF3B5296791DBE572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2b:ae:8b:ab:cb:30:a2:ae:2d:ef:59:57:37:
91:3d:10:18:cb:83:a9:f0:b2:32:dd:c7:87:01:54:
d3:5c:48:1c:8c:4c:22:51:47:6f:e4:92:f7:87:95:
f2:74:ad:8c:83:9e:60:3a:7e:ea:77:3e:87:c2:37:
f0:f0:2a:ad:55:9d:05:83:12:9a:9d:c8:e1:13:4f:
38:f1:00:2e:16:13:bb:59:04:09:c5:4d:27:85:c5:
75:22:86:b4:0e:76:c2:3b:c1:86:d1:22:03:6c:4b:
93:e6:64:40:07:be:4e:84:d4:4b:92:a8:15:d2:25:
5f:4d:2e:87:88:cb:e3:ee:74:16:3b:d3:8c:29:c7:
79:ef:d2:45:83:f4:22:0f:fe:c6:bd:ba:54:92:e3:
c6:9f:fe:78:d2:b5:0e:f8:b9:86:92:e2:ac:fa:c6:
36:b5:74:41:d3:67:91:63:20:c0:29:9d:79:e5:fe:
ff:b3:bd:ab:51:d1:9d:69:0e:24:5b:41:e4:d8:69:
9e:78:ed:90:b8:96:a3:25:9d:06:13:a2:c1:05:27:
7b:54:ce:23:a3:e5:9a:a7:c4:49:a4:87:69:da:2d:
34:89:43:b4:a3:4b:cd:00:36:55:e6:d2:96:51:b4:
26:1c:8a:c0:33:74:3a:35:d9:68:6b:26:bc:ac:7e:
1c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FB:DA:8A:4D:7C:D6:4B:CA:9B:F9:FA:F3:B5:29:67:91:DB:E5:72
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Mvvaik181kvKm_n687UpZ5Hb5XI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.0.0/19
Signature Algorithm: sha256WithRSAEncryption
65:78:02:35:18:3d:8a:dd:36:af:79:aa:c6:99:88:1b:f8:f1:
6d:59:5e:bd:4f:77:df:20:93:1a:dc:55:91:6f:88:6e:1d:71:
7c:81:32:b9:2b:ab:0c:12:d0:d4:dc:ee:1b:b2:bb:e2:4a:eb:
c9:cd:94:bf:8e:c9:25:99:44:8d:77:31:e3:cd:9a:28:62:dc:
76:ac:ef:a3:ea:bd:6c:b5:1a:fd:8d:87:fe:96:a2:e8:58:4e:
91:83:68:4d:e0:9c:14:76:01:24:0d:e1:e8:64:52:d8:da:ac:
77:2e:92:64:d5:c7:dd:5e:ba:ab:8e:aa:58:d7:58:76:93:dd:
d5:eb:ad:c2:7e:65:c0:66:ef:4e:33:bd:de:eb:74:0b:ff:7a:
74:db:8b:16:a8:bc:64:0c:13:bb:1c:01:ab:34:27:16:81:c1:
dc:e0:94:b5:db:9b:78:3a:3b:c9:0d:d7:bb:37:fe:35:34:86:
a2:17:3e:aa:5a:1a:53:bd:d0:78:71:be:ed:be:2f:ea:41:d8:
25:9a:8a:64:a1:12:15:f2:bd:24:f0:98:19:04:91:5c:1d:ae:
03:d5:7f:45:0e:60:ff:b8:5a:cd:35:ed:a6:97:cf:4e:8d:64:
dd:21:9a:13:31:49:fb:61:1f:ae:68:c5:7d:d7:07:30:98:01:
bd:ef:36:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:39 2023 by rpki-client on console-ams.rpki-client.org