Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fe73Oy90Xc_QcPqIytRPXRu1Q48.roa
File: fe73Oy90Xc_QcPqIytRPXRu1Q48.roa (raw, json)
Hash identifier: qkS/n6KT59igNENp8u+HkS8ZRZyftMFSjUOE5Mgunck=
Subject key identifier: 7D:EE:F7:3B:2F:74:5D:CF:D0:70:FA:88:CA:D4:4F:5D:1B:B5:43:8F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1947
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fe73Oy90Xc_QcPqIytRPXRu1Q48.roa
Signing time: Sat 22 Oct 2022 06:06:19 +0000
ROA not before: Sat 22 Oct 2022 06:06:19 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.116.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6471 (0x1947)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:19 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7DEEF73B2F745DCFD070FA88CAD44F5D1BB5438F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:87:13:e8:64:d2:c1:f8:b1:bf:3d:18:ff:2f:
bf:4b:63:79:0c:e5:c7:da:34:0d:42:76:ba:de:c0:
01:41:7a:af:aa:ee:41:c1:78:bc:e7:cc:d5:59:af:
d5:4e:d0:36:c3:39:92:a9:d9:92:23:89:5d:a5:8e:
39:a0:dd:48:92:a2:be:a3:41:02:81:d6:b3:2e:0a:
ca:f7:ec:73:33:66:87:32:fb:6e:01:2f:26:54:b6:
8b:bc:10:76:d2:bc:f4:ff:9c:0f:88:2a:24:42:49:
e3:ea:52:76:8e:08:46:41:15:ce:fc:ff:b3:75:e3:
bb:b1:51:8d:72:61:be:bf:17:a9:98:cf:16:36:c8:
b1:41:a1:46:59:fc:b1:57:bd:a5:47:66:f7:56:33:
c4:64:a2:be:f1:1b:f0:67:34:e6:f0:2c:1b:11:31:
58:5f:18:10:34:dd:41:5e:68:51:9f:5b:f2:15:77:
6d:38:a2:97:b3:27:7c:0f:cc:4c:6a:bb:f6:1b:64:
8d:17:09:28:06:4e:28:17:e5:62:25:d7:be:dd:7c:
16:46:39:d5:e9:74:aa:32:4f:9e:dc:a3:c7:ad:55:
c4:cb:53:ee:3f:a6:d8:ad:5f:21:9a:d2:14:f5:23:
09:4b:4c:88:9e:44:8e:b1:20:a1:c6:15:e6:d7:56:
5b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:EE:F7:3B:2F:74:5D:CF:D0:70:FA:88:CA:D4:4F:5D:1B:B5:43:8F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fe73Oy90Xc_QcPqIytRPXRu1Q48.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.116.0/22
Signature Algorithm: sha256WithRSAEncryption
49:8f:46:89:64:0f:40:a8:f2:36:58:c9:48:86:45:37:cc:1b:
09:48:f8:0d:14:c9:de:d6:95:a6:04:09:7e:28:5c:6c:d8:e7:
1e:ca:b3:13:f1:e8:da:90:a5:c4:52:b2:08:33:81:22:1a:04:
9f:98:97:25:9b:b3:7a:30:98:17:bc:81:fe:1d:02:1b:9c:70:
81:9b:46:50:e8:e6:02:0a:29:47:35:56:c9:2d:0c:5b:10:68:
28:5d:83:d1:80:72:cf:ee:3a:ee:be:db:14:9f:ef:d1:e8:56:
64:7b:bb:e2:eb:c7:1a:e9:5e:e0:6e:33:9f:5b:a5:b0:c3:e9:
ff:8d:7e:17:a5:e9:91:41:18:ab:bb:78:ee:56:d7:f0:43:d9:
45:71:51:3d:27:44:0e:44:80:c5:94:93:77:f6:75:a9:e1:21:
3b:da:5f:03:59:08:af:2d:69:e6:ef:77:0d:90:b2:eb:9e:9a:
33:c3:a1:a9:ff:2b:8d:cd:58:a5:11:60:af:06:bd:1e:33:1a:
76:43:4d:10:ac:8d:6f:62:bd:20:1c:53:87:2f:35:f8:fa:47:
43:94:46:b8:e5:32:ee:29:d4:5a:33:03:47:6d:5d:4d:b9:d3:
80:80:b1:b6:34:67:f1:b6:49:79:1e:91:fa:ac:55:ab:19:51:
e0:24:d4:c2
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGUcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjA2MTlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDdERUVGNzNCMkY3NDVE
Q0ZEMDcwRkE4OENBRDQ0RjVEMUJCNTQzOEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXhxPoZNLB+LG/PRj/L79LY3kM5cfaNA1CdrrewAFBeq+q7kHB
eLznzNVZr9VO0DbDOZKp2ZIjiV2ljjmg3UiSor6jQQKB1rMuCsr37HMzZocy+24B
LyZUtou8EHbSvPT/nA+IKiRCSePqUnaOCEZBFc78/7N147uxUY1yYb6/F6mYzxY2
yLFBoUZZ/LFXvaVHZvdWM8Rkor7xG/BnNObwLBsRMVhfGBA03UFeaFGfW/IVd204
opezJ3wPzExqu/YbZI0XCSgGTigX5WIl177dfBZGOdXpdKoyT57co8etVcTLU+4/
ptitXyGa0hT1IwlLTIieRI6xIKHGFebXVlsBAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUfe73Oy90Xc/QcPqIytRPXRu1Q48wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2ZlNzNPeTkwWGNfUWNQcUl5
dFJQWFJ1MVE0OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
2nQwDQYJKoZIhvcNAQELBQADggEBAEmPRolkD0Co8jZYyUiGRTfMGwlI+A0Uyd7W
laYECX4oXGzY5x7KsxPx6NqQpcRSsggzgSIaBJ+YlyWbs3owmBe8gf4dAhuccIGb
RlDo5gIKKUc1VsktDFsQaChdg9GAcs/uOu6+2xSf79HoVmR7u+LrxxrpXuBuM59b
pbDD6f+Nfhel6ZFBGKu7eO5W1/BD2UVxUT0nRA5EgMWUk3f2danhITvaXwNZCK8t
aebvdw2QsuuemjPDoan/K43NWKURYK8GvR4zGnZDTRCsjW9ivSAcU4cvNfj6R0OU
RrjlMu4p1FozA0dtXU2504CAsbY0Z/G2SXkekfqsVasZUeAk1MI=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:15 2023 by rpki-client on console-fra.rpki-client.org