Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nAgZIfNC6HzctGGP2m-FfU6WrGg.roa
File: nAgZIfNC6HzctGGP2m-FfU6WrGg.roa (raw, json)
Hash identifier: RGE+djoTDBb0fpd3JSc4B8H51cXG21BWxZTasDNkBEQ=
Subject key identifier: 9C:08:19:21:F3:42:E8:7C:DC:B4:61:8F:DA:6F:85:7D:4E:96:AC:68
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1A5E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nAgZIfNC6HzctGGP2m-FfU6WrGg.roa
Signing time: Thu 27 Oct 2022 03:03:52 +0000
ROA not before: Thu 27 Oct 2022 03:03:52 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.128.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6750 (0x1a5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 27 03:03:52 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9C081921F342E87CDCB4618FDA6F857D4E96AC68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7b:63:03:5d:b8:0e:13:4d:94:e7:2a:95:b2:
fa:74:ea:82:89:e9:dd:b6:15:9a:9d:33:a9:b7:96:
aa:86:99:07:14:21:f1:63:9f:2b:b0:60:27:6e:a9:
95:12:8d:53:38:02:ff:28:68:4f:c7:4b:d1:eb:4b:
a3:b2:1b:4c:23:b9:04:c9:4d:c7:07:fb:3a:22:48:
fe:45:e5:b3:03:1a:ea:be:e0:5d:f2:d4:42:20:e9:
f6:ba:b8:03:65:fd:85:73:bf:47:30:fd:45:2d:97:
c8:21:c5:ed:cc:29:f5:49:9e:f4:01:04:28:6a:2e:
b7:67:c7:dd:11:f1:a7:dc:3a:97:3c:c6:e1:96:22:
25:42:0b:ce:ce:7a:a7:1d:56:bb:5c:7f:26:c3:90:
f2:28:db:da:75:57:9a:77:7d:1f:31:da:ef:3a:15:
bc:8c:1d:08:2f:8f:e1:f2:39:17:eb:a2:5c:82:d6:
65:b9:7b:26:d4:f0:2e:7e:b8:cd:08:ff:88:8b:ff:
e6:70:f2:1f:de:ef:06:c4:0e:72:2d:bd:1b:ad:0d:
91:d8:8d:31:b8:a1:a5:6e:8d:74:cb:4c:1e:67:23:
6e:71:a7:e4:27:35:22:da:fd:34:9b:6d:14:c5:2d:
32:d9:3a:c2:33:5b:d4:cd:54:d2:40:a2:1e:28:99:
25:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:08:19:21:F3:42:E8:7C:DC:B4:61:8F:DA:6F:85:7D:4E:96:AC:68
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nAgZIfNC6HzctGGP2m-FfU6WrGg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.128.0/21
Signature Algorithm: sha256WithRSAEncryption
41:2f:6b:6a:f1:b6:95:2c:c2:17:e3:49:f3:fe:65:15:f6:91:
60:73:41:f0:b1:60:6a:47:76:56:21:d5:53:9b:4a:77:a8:88:
db:7f:99:b7:40:c6:07:30:3e:12:37:52:18:24:d1:83:36:08:
4a:2c:d2:22:a0:63:55:74:bd:62:03:58:aa:75:74:0f:6e:8a:
78:d2:39:1e:8e:2e:a8:b4:64:02:ad:4f:54:32:7f:df:dd:7b:
54:aa:bc:f1:18:26:4a:97:75:9c:2a:a3:32:16:d9:dc:02:7f:
d3:f7:cf:e1:b9:3c:4f:70:fd:5d:f3:01:ca:b9:62:82:44:5f:
bd:28:8b:21:3c:8b:7a:87:23:56:e1:e7:62:9f:ac:d1:fa:8f:
4b:aa:28:ef:eb:eb:31:e6:08:ed:90:81:a3:a3:8e:05:e4:c4:
41:7c:96:94:3b:76:8a:cf:96:3b:d9:ff:93:9c:7b:06:c7:4a:
fe:b9:b0:9d:3c:02:d2:89:c1:95:d7:45:0e:3f:0a:3a:ce:f3:
c2:69:21:1d:45:14:7f:dd:6c:f3:cf:fd:49:11:8b:d3:04:99:
29:48:00:05:6b:2f:d3:ae:52:4e:8b:12:98:84:64:4a:cf:4d:
eb:a3:02:6e:ee:1b:e9:9e:60:c7:15:90:e0:66:95:8a:5d:74:
e7:ef:b5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:40 2023 by rpki-client on console-ams.rpki-client.org