Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NeJEZuCWdX2ngUCR9cDZeV1uQts.roa
File: NeJEZuCWdX2ngUCR9cDZeV1uQts.roa (raw, json)
Hash identifier: dDDKWGqxC5jfrox2W65+3sgt/fA7zWZREVqR6a+2F3I=
Subject key identifier: 35:E2:44:66:E0:96:75:7D:A7:81:40:91:F5:C0:D9:79:5D:6E:42:DB
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NeJEZuCWdX2ngUCR9cDZeV1uQts.roa
Signing time: Thu 15 Sep 2022 02:35:34 +0000
ROA not before: Thu 15 Sep 2022 02:35:34 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.116.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:34 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=35E24466E096757DA7814091F5C0D9795D6E42DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e8:70:29:35:2f:ad:2d:32:b8:48:0a:7c:bf:
4d:7e:a2:21:cb:20:f7:6c:83:f6:4e:38:63:ed:bb:
22:97:85:b3:e4:af:cf:b7:21:62:2f:8d:d9:29:12:
f4:50:97:a8:5a:5d:f2:c7:5d:50:32:93:2a:fd:0f:
1f:61:b4:5d:24:e5:7a:3f:99:7f:cc:ad:39:a5:45:
00:63:18:9e:c7:39:5f:cd:85:34:57:62:7e:ff:8c:
cb:44:6e:1a:a7:cf:05:47:a6:d9:4a:7f:40:23:22:
28:51:69:2e:fb:6a:5d:5b:97:20:bc:ab:4a:87:a9:
51:e3:e0:40:92:33:66:ef:14:6d:fd:cc:6f:99:97:
79:dc:e6:a1:2f:5b:c4:88:fd:10:0e:1d:8c:e4:f5:
71:59:ad:15:ac:a4:f9:91:62:7b:d5:f4:b2:56:ee:
73:c3:dd:10:8f:ab:a4:28:db:89:07:3f:25:53:ce:
2c:90:64:fa:17:70:49:12:31:6e:19:11:44:aa:99:
43:57:89:24:1c:6b:bd:4d:6f:03:5f:c3:43:09:e7:
30:35:3d:4e:69:f7:57:3c:01:1c:33:02:97:72:f2:
d5:1b:98:e6:dc:38:da:e0:a4:e7:4d:26:4e:75:ab:
cd:43:86:6b:09:f4:8d:53:58:8a:9e:21:8b:48:15:
72:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E2:44:66:E0:96:75:7D:A7:81:40:91:F5:C0:D9:79:5D:6E:42:DB
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NeJEZuCWdX2ngUCR9cDZeV1uQts.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.116.0/22
Signature Algorithm: sha256WithRSAEncryption
20:01:ec:3c:94:6a:24:fd:47:65:37:91:90:85:66:76:f1:3a:
c6:2e:80:2d:b9:0a:8d:23:b1:8c:fd:93:ae:a9:d2:c0:d5:36:
1d:51:58:22:75:12:f8:ec:a6:47:5f:97:f2:6c:ca:a4:0e:f4:
6e:ab:cd:80:73:78:f0:bc:cd:c7:d0:e4:d2:d9:c6:e5:93:34:
8e:b1:79:44:e6:ec:18:4a:ca:25:05:80:01:a6:bd:8d:44:1f:
75:7a:53:7f:a4:4f:32:ce:f1:aa:2d:f5:07:8c:b1:dc:7a:4b:
31:b8:a2:f1:4b:95:7a:f0:30:ba:05:40:06:38:63:2b:e2:b7:
44:df:91:78:14:de:3f:44:49:d4:97:4b:49:07:81:14:2b:98:
28:46:96:61:9b:ef:bc:9f:63:f4:e1:be:08:a2:d9:8c:fb:3e:
7c:17:ec:29:9c:55:46:7e:e7:ad:91:a7:bb:5c:b3:c8:03:80:
21:e8:58:9a:62:2d:e7:1c:84:20:53:da:f0:22:db:95:d9:e5:
b7:74:38:2e:1f:13:8a:49:26:be:e7:98:35:34:23:0a:0c:61:
2c:b6:0e:c3:a7:fe:e4:a3:30:79:8d:f2:97:22:a7:55:4e:d5:
07:56:00:79:c2:e1:a3:a9:eb:d6:e2:b7:80:b8:c6:b1:bf:f9:
75:da:d6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:36 2023 by rpki-client on console-ams.rpki-client.org