Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Po3HHPHIGXnnR1guq_4nxZSRy-o.roa
File: Po3HHPHIGXnnR1guq_4nxZSRy-o.roa (raw, json)
Hash identifier: Jy1yGgic1RjFhZoDTKke3KaofEzdnKXpCqcfpNB3kJ4=
Subject key identifier: 3E:8D:C7:1C:F1:C8:19:79:E7:47:58:2E:AB:FE:27:C5:94:91:CB:EA
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Po3HHPHIGXnnR1guq_4nxZSRy-o.roa
Signing time: Thu 15 Sep 2022 02:36:27 +0000
ROA not before: Thu 15 Sep 2022 02:36:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.189.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:27 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3E8DC71CF1C81979E747582EABFE27C59491CBEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:ca:5f:1e:63:84:40:3e:46:0d:39:20:96:c5:
80:7d:d2:da:c3:ca:16:7c:3e:ff:22:9e:27:2a:cd:
06:24:9a:c3:d5:6f:43:b9:2c:68:ac:b8:97:77:e8:
d2:9a:18:74:24:c6:2f:41:71:5c:d5:7c:d0:9a:e3:
a1:90:c3:90:b0:c6:33:b0:76:e5:2a:8a:be:ea:11:
30:25:24:66:da:29:0a:cb:2c:32:2b:b7:8b:f6:5c:
13:ce:00:f0:35:56:be:6d:dd:85:52:24:8e:ef:56:
83:fc:53:94:98:b6:07:44:d4:44:d1:6e:61:53:e0:
ad:82:3d:88:b7:c0:4e:00:ed:d3:f0:1f:41:ee:18:
3e:9a:54:e9:fc:5d:71:0b:1f:6c:a5:b4:0f:b0:72:
85:15:c3:1c:5c:f4:6b:19:3e:70:fc:b6:db:93:94:
29:a1:ca:5b:01:df:75:45:54:2b:3f:ec:37:bb:49:
5d:97:a2:35:32:49:58:e7:c5:4a:27:a0:5c:35:e1:
41:4c:c6:a4:60:4a:f8:94:b2:d2:bd:96:79:6f:91:
1a:2e:3e:f0:df:55:33:5a:36:8e:4d:9d:a6:77:7a:
8d:d9:e1:ad:b3:f7:76:d4:6b:28:b4:30:0e:a5:60:
fc:cf:d5:8c:2f:3b:1d:c3:80:4b:7a:3e:56:9e:de:
5f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8D:C7:1C:F1:C8:19:79:E7:47:58:2E:AB:FE:27:C5:94:91:CB:EA
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Po3HHPHIGXnnR1guq_4nxZSRy-o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.189.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:88:2f:a5:fb:fc:c0:0f:ee:ba:22:e2:ad:a9:51:94:5a:9b:
0e:25:31:22:83:c3:66:38:d0:b1:8a:dc:4c:36:d2:f7:64:f0:
8d:2d:39:0d:8e:97:e7:29:51:f2:b6:e2:4b:77:21:a3:e2:dd:
f5:4d:86:51:df:61:43:56:bf:ad:41:46:b3:ee:1f:b3:5a:26:
46:2c:ae:bd:ca:4a:2c:2e:9f:27:0d:75:83:f6:d9:24:3a:79:
19:3a:ec:9b:fd:13:82:54:75:6f:87:59:c0:50:4c:cd:30:da:
9f:7f:f4:6d:77:dd:af:25:ec:85:5d:53:6b:a7:8e:ef:d6:d0:
81:1c:fe:96:13:e9:c8:fa:b5:5b:ee:fd:70:a3:0e:d0:ab:59:
ee:ff:d6:17:a8:ef:1f:95:77:fa:c9:73:ef:dd:20:1e:dc:e1:
e3:03:cb:a4:52:20:24:f2:eb:93:82:24:2d:13:b1:9d:d4:8d:
82:ae:fe:f4:d7:f0:8e:42:d3:cc:05:0c:cd:28:d7:7f:ee:d5:
8c:bd:76:48:ba:f4:a0:b9:c9:88:3e:87:1f:0a:16:63:98:39:
45:6f:07:7c:32:b5:cb:2b:06:a9:0b:da:2e:32:f4:68:4a:b7:
7f:52:5b:48:4b:43:e9:00:08:7b:72:27:37:95:8e:1e:73:39:
e2:36:c9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:48 2023 by rpki-client on console-fra.rpki-client.org