Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/avdYHLeOfuybvXBIWYojBzwjkyg.roa
File: avdYHLeOfuybvXBIWYojBzwjkyg.roa (raw, json)
Hash identifier: qFR845v0kXDKpLW3NmDOfCwqvhd9gau9vo0u1mSkuPY=
Subject key identifier: 6A:F7:58:1C:B7:8E:7E:EC:9B:BD:70:48:59:8A:23:07:3C:23:93:28
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 19A0
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/avdYHLeOfuybvXBIWYojBzwjkyg.roa
Signing time: Sat 22 Oct 2022 06:06:45 +0000
ROA not before: Sat 22 Oct 2022 06:06:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.164.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6560 (0x19a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:45 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6AF7581CB78E7EEC9BBD7048598A23073C239328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c4:60:3d:6d:c4:2b:74:bb:96:c4:3b:08:4e:
27:5b:14:31:e4:ea:06:b2:bc:e8:f5:2f:cb:76:16:
64:49:22:be:0d:5a:62:af:37:7f:3f:d8:e1:51:bd:
ee:40:31:6c:d4:15:1e:18:93:06:f3:27:ae:7c:ba:
fb:33:d8:56:79:26:cf:1e:23:e2:13:ec:04:db:be:
2f:a3:be:bc:8d:50:72:21:c6:67:d6:90:55:6b:36:
62:03:50:12:cd:b9:75:cd:4c:c9:5e:ab:3e:c9:8a:
9a:1a:b8:1d:e2:c7:89:a9:03:48:cd:d2:30:1d:6d:
49:7f:4e:5f:cb:48:d8:e5:ac:50:50:9c:81:1d:ef:
5d:62:b8:0b:80:b0:8e:3e:44:d3:72:10:20:18:d2:
e5:da:92:51:cb:b3:5e:07:93:af:d5:6a:3f:53:a0:
9a:6c:ef:88:22:db:05:5c:d6:02:d5:bb:8b:0c:18:
06:08:85:f3:75:cb:3f:ec:9b:69:53:b8:ef:74:6b:
1c:fc:8f:37:fd:09:c1:b9:3f:d3:a5:7b:6e:d4:6d:
42:7a:e1:4e:6f:e0:b4:9e:ce:e6:09:2e:4d:94:6d:
d5:a1:ad:b3:75:37:6a:40:ba:4c:1c:b0:0e:0a:69:
17:36:e8:70:82:9d:59:4c:a6:fb:b1:f1:e1:da:b8:
7a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F7:58:1C:B7:8E:7E:EC:9B:BD:70:48:59:8A:23:07:3C:23:93:28
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/avdYHLeOfuybvXBIWYojBzwjkyg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.164.0/22
Signature Algorithm: sha256WithRSAEncryption
71:d8:4a:6e:1a:33:56:11:e9:ef:09:02:5a:81:ed:f2:4d:b1:
d8:d9:a5:c4:36:a1:b0:82:66:b2:6d:44:51:b7:2e:90:d8:46:
ae:d0:f2:a4:6a:28:55:98:d1:ba:1b:95:d9:17:60:19:d4:92:
06:a7:ad:4f:02:8f:ff:a5:ca:e8:31:3e:ae:a8:8d:28:cb:aa:
da:ae:4f:2c:cf:5c:00:ab:70:d1:e6:fc:cd:8f:3f:e8:60:0f:
b1:95:50:69:18:60:3b:2b:d3:ad:40:35:16:ad:31:9c:b5:d5:
a1:53:97:8b:46:dd:bf:16:ac:47:c5:98:95:93:44:f7:df:5b:
66:c4:a3:ae:ef:be:73:77:a1:fe:8b:a2:a3:3c:87:e0:fa:b1:
8c:0d:fd:3c:4c:ac:7a:38:0b:34:7a:a2:d3:37:f6:a8:cd:a6:
48:46:d6:8f:42:b6:b2:20:c1:3e:60:c7:39:29:de:27:44:e8:
65:69:0b:60:f4:5d:c7:fe:2a:19:d1:9c:d8:b5:55:4e:8d:03:
b5:22:b0:83:f7:d1:23:3e:c1:16:93:f6:c3:94:f5:ed:35:f0:
37:90:37:cf:66:a5:83:46:a1:02:f4:15:d2:cd:3e:64:b1:18:
5e:bb:f2:eb:bb:6c:75:be:72:eb:65:8b:ee:0c:6f:5a:46:19:
e3:4c:86:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:40 2023 by rpki-client on console-ams.rpki-client.org