Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NA4X7EpTvLxBDDTYroeY6k9Ecfk.roa
File: NA4X7EpTvLxBDDTYroeY6k9Ecfk.roa (raw, json)
Hash identifier: aQMpvaS7GB37eMzmk5oqYNz8i68U++QHiSc+OyUprEY=
Subject key identifier: 34:0E:17:EC:4A:53:BC:BC:41:0C:34:D8:AE:87:98:EA:4F:44:71:F9
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NA4X7EpTvLxBDDTYroeY6k9Ecfk.roa
Signing time: Thu 15 Sep 2022 02:35:59 +0000
ROA not before: Thu 15 Sep 2022 02:35:59 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.134.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:59 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=340E17EC4A53BCBC410C34D8AE8798EA4F4471F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:60:e8:66:53:c7:2a:f8:12:cd:22:6e:f0:8b:
c4:d6:31:bb:6d:73:e8:d4:dd:dd:2a:6c:9c:d6:db:
9f:01:64:a0:e4:8c:4e:93:2a:b1:6b:81:20:39:c1:
e5:e1:6e:d5:c3:d4:ee:37:b3:91:9f:f4:3b:97:f9:
5a:06:48:05:7a:99:79:fd:6b:b7:76:45:54:e9:1e:
63:ca:cb:8c:4e:a2:07:8a:a8:56:1c:5e:08:38:3d:
3f:1b:0f:54:06:4d:2d:6f:34:67:6c:75:8b:b7:e0:
87:c6:1a:8e:e1:72:34:a7:44:ae:77:9c:7f:e1:c2:
fc:8c:55:8a:53:67:f3:eb:5d:df:4d:53:e1:61:f9:
85:6f:a3:0b:10:10:cd:10:d0:dc:3d:e9:9c:b8:e7:
b1:c5:71:d0:91:4d:41:77:ef:6e:66:79:1b:0f:34:
1f:35:97:4b:b7:62:4f:f5:57:a9:5d:4d:1d:57:87:
e5:b8:c4:2e:ec:be:45:7f:ac:7e:7d:16:0d:0a:6c:
45:87:a5:32:21:14:73:e9:aa:66:0c:20:c2:5a:0c:
64:48:78:37:52:26:98:d1:15:c2:bb:f8:73:a0:8d:
57:be:90:1a:86:52:1b:29:ac:f2:72:ea:48:2e:b7:
ed:e7:c3:02:1e:ef:0e:d4:9b:af:31:75:69:e9:71:
46:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0E:17:EC:4A:53:BC:BC:41:0C:34:D8:AE:87:98:EA:4F:44:71:F9
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NA4X7EpTvLxBDDTYroeY6k9Ecfk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.134.0/24
Signature Algorithm: sha256WithRSAEncryption
08:d6:1c:2a:2b:b1:b1:83:89:dd:f8:25:e3:56:cd:eb:18:62:
4e:f1:1e:e1:9b:a9:35:4d:f4:d2:af:16:3b:81:1e:cd:12:ec:
a5:ae:9b:05:69:ed:53:17:b6:1e:a4:48:5c:79:bb:2d:d3:42:
37:2e:f9:71:df:77:44:6c:82:78:f0:18:97:33:02:7b:76:81:
d5:e7:ec:4d:58:66:02:03:c2:1b:72:c4:45:0a:85:6d:9a:a2:
33:1e:a3:44:2d:cb:6b:79:57:f6:41:72:36:c8:b9:53:f2:fe:
2c:e3:a6:17:cf:d6:9e:3b:56:da:04:89:a9:16:82:cd:a5:b8:
d5:42:31:8f:fb:69:34:84:46:0c:2d:0a:4b:dd:7a:07:7d:cb:
85:6e:a9:c7:39:c1:67:c5:c3:a2:2b:79:a5:7d:09:f7:5c:19:
62:e8:7e:be:f0:b4:d9:27:b3:61:3e:b0:02:80:c4:68:fd:b5:
5c:cf:0f:84:ae:77:4d:76:12:7a:a4:bd:3a:bd:09:2b:bf:14:
78:0b:59:38:99:c6:03:a4:de:e0:95:4a:f8:de:c0:d1:20:f4:
88:b9:73:ef:97:ba:cc:4e:a2:67:dc:c2:8a:7f:0e:52:35:61:
1c:16:0e:f8:38:f5:15:8a:f3:ba:43:23:3a:4d:2e:1b:5d:4e:
eb:74:6b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:48 2023 by rpki-client on console-fra.rpki-client.org