Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TN3MMV9CQOjQSRM1ZFiG-qWdFnw.roa
File: TN3MMV9CQOjQSRM1ZFiG-qWdFnw.roa (raw, json)
Hash identifier: EWYhHFt+TKfbzUUIbgohpWAg66UXZad/kwwn9EAzMJc=
Subject key identifier: 4C:DD:CC:31:5F:42:40:E8:D0:49:13:35:64:58:86:FA:A5:9D:16:7C
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TN3MMV9CQOjQSRM1ZFiG-qWdFnw.roa
Signing time: Thu 15 Sep 2022 02:35:39 +0000
ROA not before: Thu 15 Sep 2022 02:35:39 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.222.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:39 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4CDDCC315F4240E8D0491335645886FAA59D167C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9b:8e:81:de:a8:57:cb:9a:df:d9:ec:b0:ad:
69:fc:f7:74:5d:b1:6c:2d:45:76:4a:91:d1:5c:69:
c5:88:1d:2f:d5:e4:df:96:40:a6:e9:75:50:59:5c:
d5:a4:75:b9:18:b1:a1:32:ee:84:f0:35:21:42:0f:
de:47:60:a3:53:e7:55:38:1d:48:8d:02:df:45:7b:
a2:0e:05:da:6d:1f:19:22:3f:0d:7a:eb:94:4f:a5:
62:bb:c2:b2:81:88:d9:36:17:ba:59:db:02:bf:6d:
11:a6:a4:a0:86:91:f4:a2:a5:0e:44:1c:0f:a2:e2:
c3:fd:a0:43:b6:7c:99:0d:a2:1c:22:15:c5:b0:44:
16:ef:ba:0c:75:47:0d:3c:97:58:27:e4:35:36:c5:
2a:41:eb:76:c7:59:81:37:f7:df:92:67:6f:67:a9:
ca:85:74:da:13:2a:0e:b7:09:db:7f:63:f0:fc:86:
13:d9:62:49:f5:7e:0f:38:6f:a9:65:23:df:a8:86:
a4:f8:1f:84:85:fd:ef:20:a3:a5:d8:d5:55:cb:20:
60:80:de:5f:a4:bc:2a:1f:ae:7f:7c:ed:dc:f6:ae:
5c:5d:80:65:48:9b:32:2b:3c:4c:2a:1c:af:e2:be:
97:fe:0f:c4:be:50:b8:dc:9f:a8:28:43:8c:12:01:
6e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DD:CC:31:5F:42:40:E8:D0:49:13:35:64:58:86:FA:A5:9D:16:7C
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TN3MMV9CQOjQSRM1ZFiG-qWdFnw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.222.0/23
Signature Algorithm: sha256WithRSAEncryption
70:66:88:0d:9e:73:1b:cc:0d:2c:65:d1:4f:63:d1:c1:ed:58:
f5:82:3e:6f:da:8b:7e:74:47:67:5f:12:c1:c2:fa:3b:b0:6b:
de:f0:f9:33:09:9b:57:66:0a:cd:45:43:cf:f2:61:1a:fc:4b:
ea:2b:24:d8:d0:2f:d5:40:c7:1f:0d:98:5a:4f:58:cc:b3:f0:
7e:2b:03:c7:4d:01:f5:88:a8:8c:05:cd:a0:12:bc:ec:ea:16:
4c:d0:9e:43:fc:4c:cb:b7:5a:4b:b9:09:d3:2b:c1:c4:1f:85:
81:c5:90:bd:49:26:8c:d6:30:a4:de:04:d6:7f:bd:9e:be:86:
f0:02:9f:54:a3:e4:a3:31:da:aa:b2:e3:59:3e:cf:94:94:52:
c7:45:bf:42:f7:57:dc:9f:2c:56:45:bc:e6:06:ff:a3:8e:19:
2d:52:fb:4e:c4:19:e3:1e:26:20:52:22:53:c9:30:0b:c5:3e:
e8:f5:5d:86:51:cc:7c:55:7c:74:4a:d7:a2:5c:bc:3d:1d:cb:
51:30:78:b6:c4:73:2c:20:19:2b:4a:4e:05:89:3c:af:38:92:
4d:ad:e2:3a:a5:cb:44:69:ab:7d:43:26:76:c4:92:ad:42:3a:
d7:1c:e2:73:dd:49:d7:fe:cb:61:e9:76:88:5a:fa:00:0a:4a:
77:46:ec:16
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA5MTUw
MjM1MzlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDRDRERDQzMxNUY0MjQw
RThEMDQ5MTMzNTY0NTg4NkZBQTU5RDE2N0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTm46B3qhXy5rf2eywrWn893RdsWwtRXZKkdFcacWIHS/V5N+W
QKbpdVBZXNWkdbkYsaEy7oTwNSFCD95HYKNT51U4HUiNAt9Fe6IOBdptHxkiPw16
65RPpWK7wrKBiNk2F7pZ2wK/bRGmpKCGkfSipQ5EHA+i4sP9oEO2fJkNohwiFcWw
RBbvugx1Rw08l1gn5DU2xSpB63bHWYE399+SZ29nqcqFdNoTKg63Cdt/Y/D8hhPZ
Ykn1fg84b6llI9+ohqT4H4SF/e8go6XY1VXLIGCA3l+kvCofrn987dz2rlxdgGVI
mzIrPEwqHK/ivpf+D8S+ULjcn6goQ4wSAW6RAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUTN3MMV9CQOjQSRM1ZFiG+qWdFnwwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1ROM01NVjlDUU9qUVNSTTFa
RmlHLXFXZEZudy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG0
2t4wDQYJKoZIhvcNAQELBQADggEBAHBmiA2ecxvMDSxl0U9j0cHtWPWCPm/ai350
R2dfEsHC+juwa97w+TMJm1dmCs1FQ8/yYRr8S+orJNjQL9VAxx8NmFpPWMyz8H4r
A8dNAfWIqIwFzaASvOzqFkzQnkP8TMu3Wku5CdMrwcQfhYHFkL1JJozWMKTeBNZ/
vZ6+hvACn1Sj5KMx2qqy41k+z5SUUsdFv0L3V9yfLFZFvOYG/6OOGS1S+07EGeMe
JiBSIlPJMAvFPuj1XYZRzHxVfHRK16JcvD0dy1EweLbEcywgGStKTgWJPK84kk2t
4jqly0Rpq31DJnbEkq1COtcc4nPdSdf+y2Hpdoha+gAKSndG7BY=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:37 2023 by rpki-client on console-ams.rpki-client.org