Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gmK4tfMM8BEyN4b3stwwze-nu2Y.roa
File: gmK4tfMM8BEyN4b3stwwze-nu2Y.roa (raw, json)
Hash identifier: T9hcmJuOXlN3y5rsyLS3BkrU62kgNNjLDQ3ty6P8VS8=
Subject key identifier: 82:62:B8:B5:F3:0C:F0:11:32:37:86:F7:B2:DC:30:CD:EF:A7:BB:66
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gmK4tfMM8BEyN4b3stwwze-nu2Y.roa
Signing time: Thu 15 Sep 2022 02:36:23 +0000
ROA not before: Thu 15 Sep 2022 02:36:23 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 180.218.100.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:23 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8262B8B5F30CF011323786F7B2DC30CDEFA7BB66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:01:a4:55:a3:39:5e:01:07:5c:45:b9:4d:cd:
96:07:fc:d6:5f:26:cd:7a:c3:77:48:ff:fd:9a:c2:
e3:69:4b:d8:b2:dd:ef:64:72:2f:17:3e:45:da:70:
e7:51:17:96:45:35:00:2a:1e:9e:43:54:80:bf:34:
f2:c7:97:c3:eb:9c:6c:99:59:28:19:5e:fa:f2:89:
40:7a:96:4c:8e:ae:71:65:d8:84:5c:4a:cf:f9:ad:
7a:33:c0:7a:09:4d:91:49:a5:82:ef:16:7a:06:72:
40:c0:89:44:64:da:af:05:e5:ed:92:00:a2:5b:25:
d7:f6:35:5b:99:70:7b:64:1c:63:61:f5:aa:64:c6:
f0:a4:ec:14:a1:34:56:84:db:ea:22:c4:3a:18:a4:
00:7d:32:eb:1b:ba:e1:a7:ec:cb:09:d3:4f:f4:4d:
30:60:d9:e5:f0:5c:8b:70:e8:d1:4e:38:3a:d0:a2:
9a:24:12:87:5d:21:15:b0:de:b0:fe:1d:14:fe:d8:
33:68:e9:68:db:ce:b1:be:57:94:c5:d1:f2:25:4d:
a2:0a:22:6f:fc:06:c7:e2:32:5d:42:da:be:53:77:
47:0b:51:e2:5b:83:5d:84:7f:c1:60:cd:b1:c6:31:
69:ea:0c:f0:34:2f:d7:3b:f2:f0:5c:a3:06:aa:da:
b2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:62:B8:B5:F3:0C:F0:11:32:37:86:F7:B2:DC:30:CD:EF:A7:BB:66
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gmK4tfMM8BEyN4b3stwwze-nu2Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.100.0/22
Signature Algorithm: sha256WithRSAEncryption
47:3d:3d:95:87:01:26:dc:be:24:7d:e7:04:e2:40:09:59:b4:
2a:76:31:e8:02:7e:3f:2f:a0:a3:11:92:02:d6:33:da:4b:a1:
27:31:02:fb:73:a9:66:60:e6:54:51:a1:02:5b:06:74:fe:72:
f2:db:50:32:cd:8f:d3:cc:1b:31:eb:70:76:79:9d:df:57:6e:
60:83:a7:68:56:3d:e8:1d:33:7d:c4:a1:25:fd:57:ab:17:86:
49:73:2b:92:c4:21:4d:7d:9c:8c:c3:3f:8c:18:d1:b5:e3:c3:
ea:ce:12:4b:3f:c8:32:e9:9b:3c:71:44:d8:24:ce:ba:22:e5:
21:d4:9a:c3:f8:a5:7b:28:de:8a:57:2b:51:aa:73:d7:be:6b:
eb:72:19:d7:a8:34:45:da:27:fb:17:a2:ee:a3:a0:6e:6b:17:
fc:b1:53:63:bc:48:a2:5b:a9:cc:7e:be:f1:2d:34:38:18:87:
d1:b8:b4:92:05:54:69:d1:97:d2:28:f7:0a:62:5f:99:38:a5:
00:b5:66:9b:e4:72:97:bf:00:db:3d:ac:de:f5:e6:c9:eb:94:
51:6f:a6:a3:db:c2:85:4a:99:6c:ee:ea:5e:9d:8b:e9:3f:fa:
d5:13:02:78:31:24:f7:2f:e8:5a:68:5f:81:ab:6d:f2:31:93:
95:be:f2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:51 2023 by rpki-client on console-fra.rpki-client.org