Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TVJwDw9BQD3Nh33qLe1dN15scro.roa
File: TVJwDw9BQD3Nh33qLe1dN15scro.roa (raw, json)
Hash identifier: YbKBgKkuWXLXArXV8ZSArfC9wn8mMCacazaYIa7NFgE=
Subject key identifier: 4D:52:70:0F:0F:41:40:3D:CD:87:7D:EA:2D:ED:5D:37:5E:6C:72:BA
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1945
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TVJwDw9BQD3Nh33qLe1dN15scro.roa
Signing time: Sat 22 Oct 2022 06:06:18 +0000
ROA not before: Sat 22 Oct 2022 06:06:18 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.192.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6469 (0x1945)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:18 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4D52700F0F41403DCD877DEA2DED5D375E6C72BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3a:a2:96:4b:eb:4a:c9:01:16:eb:1c:fd:44:
60:be:f8:4e:ce:13:35:61:bb:60:46:2a:41:c2:5a:
76:6d:6d:05:4e:5d:89:1d:0c:3e:fb:34:fe:d3:17:
84:81:a6:26:97:2a:76:99:fa:fa:46:6d:b2:17:0e:
93:0e:4a:f9:29:20:94:80:6f:ef:2d:ba:8b:9f:6e:
9f:ad:75:fb:d2:2a:39:b5:af:4b:3f:d3:8a:fd:d9:
a2:c1:eb:ed:e4:32:87:bc:da:d8:13:86:85:29:89:
eb:f3:22:39:84:fd:bc:ac:a9:16:5f:bd:0c:4a:7c:
c2:40:80:08:17:24:a8:c6:ed:59:27:78:b0:fc:00:
0c:8a:b2:d3:d3:cf:00:cf:3a:ee:ff:0e:6b:52:12:
59:cc:56:d1:da:06:ae:3f:f6:e6:dc:82:6c:88:4c:
32:43:6a:1d:a0:8f:40:01:6c:14:2e:1e:9b:64:77:
bf:bd:48:a7:3a:54:a4:6e:eb:1b:57:26:f5:61:3d:
12:e2:bb:b9:be:ef:4c:ca:a7:24:c7:d3:bd:ee:d4:
3d:bd:ed:51:4e:fb:4b:bc:af:d3:2c:43:06:30:ab:
16:e8:b8:16:28:3b:ba:b3:ee:fc:c2:2f:d2:34:bc:
3f:50:cc:f6:4c:c1:96:fa:47:72:a4:31:7b:fb:ad:
1f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:52:70:0F:0F:41:40:3D:CD:87:7D:EA:2D:ED:5D:37:5E:6C:72:BA
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TVJwDw9BQD3Nh33qLe1dN15scro.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.192.0/19
Signature Algorithm: sha256WithRSAEncryption
4e:47:fc:6a:7d:16:d1:37:8b:52:b7:ad:00:aa:5a:d7:b9:a7:
4c:45:36:c9:94:cb:06:cc:ab:85:f3:ce:0f:b3:ee:a4:a4:d7:
0c:55:f7:7a:bb:79:5e:97:83:5a:77:b3:7f:93:10:6b:8a:d0:
21:5d:fc:c1:a5:d8:47:69:9e:60:60:f6:86:ce:3d:af:25:61:
9b:2a:47:b3:a5:8a:b3:7a:4e:b5:b8:a1:34:b5:3e:6d:59:bb:
cf:d4:6a:f8:45:f3:a1:10:31:e8:09:ef:c0:8b:25:cb:24:4e:
c9:21:79:72:76:b7:5d:4e:d9:37:7d:62:a2:67:da:56:59:9f:
20:11:e9:d0:58:7b:15:08:d1:44:65:97:9c:84:ab:51:96:c3:
53:0f:f8:65:88:3d:cc:b3:08:23:aa:78:11:7f:7e:3c:57:19:
5a:9e:4f:a8:08:69:9e:20:5a:99:df:18:06:29:61:24:d3:15:
09:90:c9:fc:ff:4b:27:57:8b:55:cf:0d:c5:50:e6:cf:ba:7e:
40:8b:03:32:77:11:2e:d1:ba:88:ed:73:3b:10:af:e1:5d:5b:
93:27:b5:b1:70:c6:0e:ac:2b:da:6a:ce:89:87:7d:b5:bc:47:
62:6a:b7:fb:0f:fb:85:fc:0d:40:fc:cd:e1:b8:49:18:87:9e:
c9:eb:a2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:39 2023 by rpki-client on console-ams.rpki-client.org