Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/etLcE976viSkJVxokU7X-FHkb_0.roa
File: etLcE976viSkJVxokU7X-FHkb_0.roa (raw, json)
Hash identifier: muNA3qGPpzK7CyBYQd0ePAA6tuLhF5wiaVgUhVHl47k=
Subject key identifier: 7A:D2:DC:13:DE:FA:BE:24:A4:25:5C:68:91:4E:D7:F8:51:E4:6F:FD
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 194E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/etLcE976viSkJVxokU7X-FHkb_0.roa
Signing time: Sat 22 Oct 2022 06:06:22 +0000
ROA not before: Sat 22 Oct 2022 06:06:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 180.218.100.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6478 (0x194e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:22 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7AD2DC13DEFABE24A4255C68914ED7F851E46FFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:78:5e:cd:9c:c2:8e:e8:66:e0:97:bc:d0:a1:
4a:12:e8:8a:03:81:3b:88:7f:84:25:3a:98:74:5f:
10:ff:d5:b4:21:27:93:bf:5c:c8:85:1f:0d:cc:22:
29:6a:75:de:be:9c:0c:6b:24:fc:d7:7d:6d:e2:23:
a5:b4:a1:44:cb:ec:bc:49:3b:c5:b8:46:10:01:1c:
d3:1f:bd:e9:92:ba:2e:cb:53:fa:fe:33:e3:89:76:
a5:39:e9:bb:40:28:aa:3f:9a:55:ec:0b:f4:51:7b:
cc:85:15:14:9d:b9:36:d1:91:a9:c0:88:0f:6b:86:
28:26:f4:2e:52:31:9a:7b:52:f9:07:48:b9:24:38:
2d:2f:02:22:29:0a:9e:32:35:d6:a6:83:4c:b4:7a:
cd:7a:21:c0:f2:5e:dc:5f:e6:25:73:3b:66:88:d6:
ae:36:9d:10:8c:84:87:b8:28:09:40:92:e1:27:6d:
f7:55:88:c6:03:90:b0:6f:a9:b1:5b:e8:05:a4:26:
13:f3:22:67:86:35:fa:c8:20:00:06:0a:e2:8e:62:
47:e6:51:eb:5e:05:e4:7f:1f:b6:7d:4f:e8:a9:58:
3c:01:c2:70:1f:bb:36:72:9c:73:e8:71:7b:2d:46:
1e:66:55:46:7b:d8:73:fc:cd:41:04:8c:1c:28:bb:
7a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D2:DC:13:DE:FA:BE:24:A4:25:5C:68:91:4E:D7:F8:51:E4:6F:FD
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/etLcE976viSkJVxokU7X-FHkb_0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.100.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:fa:ab:f9:88:7a:9d:0d:34:8f:6f:25:2b:c1:6a:5e:86:41:
ff:86:f8:e5:41:65:68:1c:36:b9:f3:48:ff:0d:bb:b2:1a:0e:
ab:e3:46:b7:e0:bf:78:4e:6f:97:c4:d9:65:9f:a0:ef:39:28:
5b:ea:96:d9:ae:93:f1:75:ad:f5:8b:c3:10:a9:45:05:56:1a:
4f:5d:91:bd:dc:d3:00:78:a3:da:01:76:2a:bf:9e:f7:f3:ec:
fa:ac:d5:d5:41:a9:8e:67:59:8e:b8:2c:97:42:c3:73:cd:25:
c4:7a:07:f5:5e:1b:b6:ad:86:2f:68:98:03:9c:6a:26:8a:80:
34:c3:b2:55:fe:41:f0:a7:bb:c2:a5:b4:88:26:ba:ed:d4:a8:
02:65:05:69:5d:2e:fc:8f:eb:67:40:44:f5:d0:55:33:70:a2:
41:88:7f:1e:3c:9d:3e:15:bb:c8:bc:6c:e7:fd:43:1f:6d:2b:
55:46:17:95:3f:8c:b0:b0:bd:c0:ec:41:f5:9e:8e:b4:88:ed:
70:d5:80:4d:5e:5f:90:52:d2:9b:79:25:fb:e6:d7:8f:71:96:
58:64:dd:df:ee:9f:f2:bf:a2:80:83:0b:59:92:4e:c2:22:ea:
09:fe:07:cd:e2:20:c7:4e:3d:79:e1:5e:09:8e:4d:24:f5:ed:
03:c3:19:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:40 2023 by rpki-client on console-ams.rpki-client.org