Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/kDwddHS4gVDmlrPd0jdHuyUkgjk.roa
File: kDwddHS4gVDmlrPd0jdHuyUkgjk.roa (raw, json)
Hash identifier: EamB+TiYgW0+v9MYuFZ4iPX8X8fbLhB4OmJECQDMBuA=
Subject key identifier: 90:3C:1D:74:74:B8:81:50:E6:96:B3:DD:D2:37:47:BB:25:24:82:39
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 195E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/kDwddHS4gVDmlrPd0jdHuyUkgjk.roa
Signing time: Sat 22 Oct 2022 06:06:27 +0000
ROA not before: Sat 22 Oct 2022 06:06:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 180.218.104.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6494 (0x195e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:27 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=903C1D7474B88150E696B3DDD23747BB25248239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:13:8b:9f:70:6c:03:9b:89:23:f9:a5:66:47:
e6:30:9c:53:18:83:86:da:ce:4f:0f:79:48:5a:36:
1c:c3:7b:69:ca:9d:67:de:ba:94:85:98:10:e2:4b:
7f:94:33:99:5d:97:2f:64:f0:55:f2:97:ec:80:ee:
9a:4a:7f:1d:c2:d8:d2:82:80:3d:d8:80:83:aa:5e:
f9:79:ff:7a:a2:a6:3d:e4:7f:d6:b0:b4:a8:c1:e2:
ce:fb:8b:90:ba:46:d4:d6:c7:b3:b6:14:74:cb:97:
5f:f8:3b:d9:f0:02:b7:c6:8e:65:ad:42:da:87:b4:
93:b6:ba:78:26:6b:29:04:63:7d:70:88:65:a4:5b:
21:0b:cf:76:d3:8b:b6:ef:3d:4d:2f:40:9f:c5:0c:
6e:33:2c:ae:b7:48:30:09:d2:2e:91:91:23:a3:69:
0e:7a:56:81:0b:47:a2:26:f6:0c:ba:6d:1c:51:9b:
47:36:6b:63:e7:49:e1:0d:8c:69:41:ea:54:dd:9d:
46:ca:21:29:09:80:e8:94:ce:7e:92:28:13:26:7d:
3c:18:e9:df:95:66:72:91:10:e2:44:65:15:a8:a9:
ad:05:ba:9c:bd:01:bc:6c:c2:73:5a:4b:2b:76:62:
07:2e:47:a7:67:04:c3:e3:e0:9d:f4:6c:20:03:24:
fd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:3C:1D:74:74:B8:81:50:E6:96:B3:DD:D2:37:47:BB:25:24:82:39
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/kDwddHS4gVDmlrPd0jdHuyUkgjk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.104.0/22
Signature Algorithm: sha256WithRSAEncryption
31:71:d3:f8:17:8e:1b:31:b8:c2:10:57:ac:2d:85:0d:13:ca:
8b:19:ab:a8:15:ec:ba:90:14:44:a1:93:90:12:7a:cf:7e:9e:
c5:6a:91:e5:94:d0:50:4b:21:e7:de:11:13:96:29:2c:14:85:
62:16:4c:74:79:09:1b:80:2c:49:15:2f:76:be:5a:a0:26:b8:
17:39:61:53:a8:44:74:87:bc:05:c3:0a:87:5d:52:75:93:72:
40:7b:67:47:fb:0e:51:55:00:75:1a:d8:ab:22:b4:a3:69:76:
bc:04:d2:a9:8e:b4:b5:2d:c9:f0:d0:b2:e2:8d:17:f7:ed:68:
3d:6a:e3:c6:16:d4:c5:47:02:6d:ee:53:7d:97:1f:aa:d0:4d:
99:ce:4c:b1:c3:59:22:17:e4:58:5a:5b:36:d2:f3:aa:7d:8a:
44:c4:fe:00:f4:7c:67:16:48:46:46:d2:3c:c3:df:32:f5:2a:
76:11:a1:28:4d:ed:4b:a6:09:9e:15:19:38:2a:e3:59:c8:0e:
c9:c3:82:ce:a9:2b:e3:98:c8:f5:2f:fa:7b:83:31:4a:cc:77:
73:ed:46:22:af:0d:96:7c:7b:e6:47:ae:af:f7:a2:c4:68:78:
e3:af:93:b4:94:72:9b:89:fd:9c:4b:3c:60:f0:76:7c:1d:86:
fa:59:6c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:15 2023 by rpki-client on console-fra.rpki-client.org