Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/S0Dp8UstlY05TT-LOtCv-AaPnSo.roa
File: S0Dp8UstlY05TT-LOtCv-AaPnSo.roa (raw, json)
Hash identifier: b5FeDsAX0UWdsBFs2bafydUooNnsckdUp2wubWe4z7Y=
Subject key identifier: 4B:40:E9:F1:4B:2D:95:8D:39:4D:3F:8B:3A:D0:AF:F8:06:8F:9D:2A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 17C0
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/S0Dp8UstlY05TT-LOtCv-AaPnSo.roa
Signing time: Sat 22 Oct 2022 05:43:06 +0000
ROA not before: Sat 22 Oct 2022 05:43:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.176.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6080 (0x17c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 05:43:06 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4B40E9F14B2D958D394D3F8B3AD0AFF8068F9D2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:29:e3:af:0c:b5:48:74:d1:c8:be:06:4c:fe:
c4:fd:97:9e:ee:52:68:7b:48:95:79:ad:2c:2b:59:
64:39:c0:8b:99:5b:57:d4:6a:d0:05:47:44:57:32:
be:b9:54:4d:d5:8c:b6:5e:61:94:6d:98:11:01:7f:
95:c3:ec:fc:f4:b0:66:22:84:dc:24:c1:6f:5d:e6:
f7:2a:5b:df:85:7d:6d:0a:55:9d:7f:ce:f4:92:5c:
64:a4:eb:42:22:36:b5:5d:29:7f:5f:d6:bb:e5:44:
c1:7a:e0:a2:5e:27:be:31:05:22:56:25:d9:14:c3:
9b:46:b8:97:37:20:70:ac:2a:e3:63:ab:7e:6f:d5:
70:6d:44:e1:83:a7:c4:10:75:ae:57:7d:e7:31:fc:
17:9e:3c:e5:d7:39:7e:13:e4:95:c8:d9:0e:2e:3d:
4b:47:62:f4:70:f2:9a:99:f9:86:79:44:f5:cb:3e:
4e:71:e4:9e:ad:b0:3b:04:ad:2d:45:7a:d5:1c:bd:
76:c7:d2:b0:41:fb:fb:22:e8:1e:dd:f6:58:43:86:
90:35:6c:27:26:a4:fa:90:1a:40:e8:4b:4f:e5:51:
8c:3d:00:47:b9:29:c9:bf:10:e7:85:5f:0e:cf:9e:
66:a5:c0:af:16:2c:5b:ab:90:2e:f4:8f:cd:ea:3f:
69:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:40:E9:F1:4B:2D:95:8D:39:4D:3F:8B:3A:D0:AF:F8:06:8F:9D:2A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/S0Dp8UstlY05TT-LOtCv-AaPnSo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.176.0/22
Signature Algorithm: sha256WithRSAEncryption
06:1a:96:7a:30:bb:9f:48:28:93:11:aa:22:7d:87:41:0e:65:
4d:86:88:7f:d8:ee:5d:0c:bc:4e:df:c3:a1:ff:c3:53:4b:cb:
ce:7e:41:f7:7d:2a:e8:3b:ec:06:c7:7f:a5:3f:c9:bf:45:93:
42:ff:0b:de:61:c6:5a:8e:59:77:83:9c:d9:dc:f2:a7:49:d9:
dc:0b:8a:ca:d0:2f:02:fd:1d:8a:cd:6d:20:b3:42:4f:bd:f8:
9d:2b:fd:bf:72:42:c6:18:d1:b9:9a:e2:6e:78:7d:b5:a8:33:
61:77:ce:66:14:65:2a:4d:fc:0e:28:93:70:90:4d:24:a2:1c:
e3:9e:49:29:f2:f9:76:ca:e1:25:34:14:35:37:ac:dc:7c:50:
27:72:7f:19:e5:0a:42:cd:9b:bd:36:82:61:78:35:83:95:b7:
24:65:71:d6:02:f3:16:b4:af:b1:fb:54:72:e8:b5:f1:8c:0e:
ce:63:2c:2a:6b:a1:22:7d:ec:23:52:98:37:eb:47:8a:d6:ac:
4b:bf:e0:92:cf:78:54:2e:46:7f:47:9c:7b:2d:a9:28:c6:70:
46:3a:4c:43:b8:ca:a3:e5:af:5a:fb:a3:32:4f:c9:b9:c5:25:
f9:5b:07:d1:ce:0d:83:74:7d:8d:6b:b6:15:6b:85:90:62:4a:
14:49:27:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:39 2023 by rpki-client on console-ams.rpki-client.org