Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_v2n0PnvjtrHD5BOxEP9t0XNVhk.roa
File: _v2n0PnvjtrHD5BOxEP9t0XNVhk.roa (raw, json)
Hash identifier: pfyOcSG6MzcXbjGNid7QgD6aGWTCwqDhIowAKdVyIIw=
Subject key identifier: FE:FD:A7:D0:F9:EF:8E:DA:C7:0F:90:4E:C4:43:FD:B7:45:CD:56:19
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_v2n0PnvjtrHD5BOxEP9t0XNVhk.roa
Signing time: Thu 15 Sep 2022 02:36:32 +0000
ROA not before: Thu 15 Sep 2022 02:36:32 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.188.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:32 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FEFDA7D0F9EF8EDAC70F904EC443FDB745CD5619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d0:b9:42:ab:6e:48:f7:a6:05:51:2b:dc:0e:
2e:fa:e7:ba:b6:bd:ce:5a:22:f3:4c:49:75:35:f1:
76:9f:13:b5:4e:b0:05:1a:43:f7:6d:89:9d:6c:2a:
d0:b5:22:a5:e4:d9:7b:ec:5a:78:a8:5b:cf:6f:51:
ff:29:73:5e:c8:14:56:69:72:db:25:c4:34:cb:dc:
be:24:a4:32:36:fa:f4:bd:27:eb:24:5a:46:29:86:
9f:bd:76:3d:c1:4e:8e:6c:7e:1b:48:9f:5f:e6:fa:
6f:c1:64:ce:45:2f:8f:85:c6:22:22:aa:75:f3:b9:
7e:a7:84:88:ca:eb:92:86:d1:06:7e:e5:69:49:e3:
38:52:a3:83:0b:89:79:87:43:a0:e7:be:d0:e6:f4:
de:bf:75:12:89:b7:36:93:38:63:1f:b1:ff:3a:6b:
30:f2:64:97:01:4a:28:35:2a:2a:7b:8d:03:04:a5:
a3:b6:44:fd:e7:2f:0d:ff:c6:a7:6b:99:10:18:d9:
c7:3f:b7:48:26:51:de:f2:01:a7:4d:19:3a:73:c5:
95:2f:42:bb:7a:18:f3:8d:dc:35:35:8e:e5:01:af:
c4:fc:28:be:b0:5a:e6:58:5c:37:aa:7f:4f:9f:3d:
00:7e:30:5f:c7:ee:b2:d0:c8:bb:59:47:18:63:1d:
a4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FD:A7:D0:F9:EF:8E:DA:C7:0F:90:4E:C4:43:FD:B7:45:CD:56:19
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_v2n0PnvjtrHD5BOxEP9t0XNVhk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.188.0/24
Signature Algorithm: sha256WithRSAEncryption
71:c4:fd:a3:4d:2f:20:f9:9a:4f:71:73:92:83:08:d5:8f:86:
7e:f4:1d:cc:89:7c:74:6f:2e:56:09:91:3b:e1:17:f2:05:5b:
38:11:eb:f1:31:6b:1c:5b:4c:69:9c:f5:50:32:22:db:63:c8:
9a:ef:49:7f:bb:42:9e:42:8b:71:a0:98:0e:54:d7:d1:c9:7c:
19:aa:4b:03:1e:7d:3b:b2:ea:0d:10:48:8b:56:44:1c:2b:bb:
ca:f8:6e:0b:3f:5f:91:1c:da:c9:ac:81:cd:41:ca:72:da:8f:
22:aa:eb:12:40:f6:ff:f5:e6:69:02:cb:d8:87:bc:a3:6e:95:
0f:92:bc:f0:a4:d8:b8:4c:ec:e4:df:c4:1f:1c:55:4e:c6:e5:
d4:7f:0d:3b:d9:85:cf:cc:8a:db:7c:f6:7c:dc:78:44:47:17:
fd:ef:f1:55:1c:65:c5:0c:31:de:db:ff:af:91:d2:8c:0a:f7:
73:4d:53:58:05:02:9e:ae:0c:4c:44:13:ab:3e:65:b9:01:fd:
94:bc:d1:ba:f5:bb:13:ed:05:c8:db:66:fb:81:fe:01:5f:a3:
6e:3e:d9:e7:77:02:93:61:07:43:e4:bf:80:93:3b:93:05:a3:
53:51:b0:2c:89:23:ad:ee:b4:fc:3e:71:00:dd:5a:46:2f:2c:
f6:1b:6b:fc
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA5MTUw
MjM2MzJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEZFRkRBN0QwRjlFRjhF
REFDNzBGOTA0RUM0NDNGREI3NDVDRDU2MTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDW0LlCq25I96YFUSvcDi7657q2vc5aIvNMSXU18XafE7VOsAUa
Q/dtiZ1sKtC1IqXk2XvsWnioW89vUf8pc17IFFZpctslxDTL3L4kpDI2+vS9J+sk
WkYphp+9dj3BTo5sfhtIn1/m+m/BZM5FL4+FxiIiqnXzuX6nhIjK65KG0QZ+5WlJ
4zhSo4MLiXmHQ6DnvtDm9N6/dRKJtzaTOGMfsf86azDyZJcBSig1Kip7jQMEpaO2
RP3nLw3/xqdrmRAY2cc/t0gmUd7yAadNGTpzxZUvQrt6GPON3DU1juUBr8T8KL6w
WuZYXDeqf0+fPQB+MF/H7rLQyLtZRxhjHaQZAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU/v2n0PnvjtrHD5BOxEP9t0XNVhkwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL192Mm4wUG52anRySEQ1Qk94
RVA5dDBYTlZoay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0
2rwwDQYJKoZIhvcNAQELBQADggEBAHHE/aNNLyD5mk9xc5KDCNWPhn70HcyJfHRv
LlYJkTvhF/IFWzgR6/ExaxxbTGmc9VAyIttjyJrvSX+7Qp5Ci3GgmA5U19HJfBmq
SwMefTuy6g0QSItWRBwru8r4bgs/X5Ec2smsgc1BynLajyKq6xJA9v/15mkCy9iH
vKNulQ+SvPCk2LhM7OTfxB8cVU7G5dR/DTvZhc/Mitt89nzceERHF/3v8VUcZcUM
Md7b/6+R0owK93NNU1gFAp6uDExEE6s+ZbkB/ZS80br1uxPtBcjbZvuB/gFfo24+
2ed3ApNhB0Pkv4CTO5MFo1NRsCyJI63utPw+cQDdWkYvLPYba/w=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:38 2023 by rpki-client on console-ams.rpki-client.org