Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nNzkXrsTohtLe-ahQIS9V2gigLI.roa
File: nNzkXrsTohtLe-ahQIS9V2gigLI.roa (raw, json)
Hash identifier: 97XhUwBRb1/vcu/WnsNZmXIOet38PT2FNMCQ3v+81jA=
Subject key identifier: 9C:DC:E4:5E:BB:13:A2:1B:4B:7B:E6:A1:40:84:BD:57:68:22:80:B2
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 18E3
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nNzkXrsTohtLe-ahQIS9V2gigLI.roa
Signing time: Sat 22 Oct 2022 06:05:50 +0000
ROA not before: Sat 22 Oct 2022 06:05:50 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.136.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6371 (0x18e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:05:50 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9CDCE45EBB13A21B4B7BE6A14084BD57682280B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:eb:a2:db:9e:b9:66:d6:42:ac:b1:fd:75:07:
42:e6:b0:74:43:95:f7:b3:0c:03:60:f1:20:35:12:
2d:0a:a0:2b:25:95:a8:df:44:58:f2:f8:cc:f0:4a:
87:6f:ec:e0:37:23:16:61:5c:b2:d8:df:af:70:54:
f2:02:63:a5:79:ad:8c:32:77:fc:54:a3:3f:b6:74:
09:45:27:42:a9:20:d0:17:62:15:8e:49:e9:95:05:
6a:28:5f:2e:1d:19:47:06:df:d6:5f:2b:c6:85:a3:
ab:a4:37:24:f6:ac:43:7e:13:e1:66:d7:9a:6b:8f:
1a:f5:92:33:a4:0e:56:f2:1f:33:74:da:39:49:14:
40:5e:fc:aa:9f:04:16:26:e1:b6:8c:c4:04:7f:e8:
ee:e7:f4:0f:0c:54:10:63:1f:b9:25:38:00:cb:f7:
66:13:4b:c8:0e:b0:b1:5f:f5:a7:ce:bf:16:68:19:
e4:2d:b6:19:95:de:ac:5f:76:98:34:4f:8b:ea:b8:
6d:09:d5:1b:be:1c:cc:c7:a5:08:a8:ef:af:e0:d5:
9e:ac:1e:c4:cf:27:ee:61:2f:18:ab:c5:9e:f9:4a:
5e:f5:59:38:42:16:38:93:83:e7:e2:14:9a:00:95:
4e:df:6b:cb:9b:41:7c:e9:65:47:8f:08:10:59:a8:
78:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DC:E4:5E:BB:13:A2:1B:4B:7B:E6:A1:40:84:BD:57:68:22:80:B2
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nNzkXrsTohtLe-ahQIS9V2gigLI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.136.0/24
Signature Algorithm: sha256WithRSAEncryption
67:0d:18:97:8b:31:a7:79:eb:1b:6f:36:5f:f4:7c:e9:6b:40:
08:d7:29:13:10:01:fb:96:61:bf:6a:76:d8:45:81:db:97:f4:
6f:98:1a:89:29:31:0c:39:ed:df:10:32:a4:1c:b9:fd:28:0e:
f0:1a:f0:fd:10:eb:9e:49:7c:87:d0:b4:49:27:1d:92:ff:97:
c5:f9:a0:b1:b4:21:f8:ea:f7:62:ce:19:5f:ab:51:41:35:9c:
77:d7:50:a2:b3:8d:c6:80:85:b6:73:49:8e:e0:dd:52:3d:d9:
3f:b2:e4:8b:77:f8:77:30:92:63:53:dd:14:ab:28:3a:70:c4:
de:4e:9f:5c:bc:9f:9f:c9:51:30:16:db:f2:55:e8:bf:31:de:
6e:e0:11:62:b4:a6:b9:d4:3c:3e:f3:53:54:c6:8d:9f:66:7c:
a2:59:65:9e:5b:22:c7:b6:e1:80:2a:f9:31:b6:4f:0e:ad:13:
69:5d:af:35:bd:c4:a0:80:f1:f0:37:f1:6c:b1:e0:7b:4d:3a:
a7:42:aa:42:7e:8b:5d:86:92:0c:cb:88:22:c7:8f:bb:36:c2:
90:a9:6e:42:d2:2a:af:f7:c6:72:ef:6c:d3:48:21:c3:dd:a8:
80:07:96:4a:c9:81:7d:45:aa:d0:6f:54:55:a8:00:f9:6e:d6:
1b:db:2b:f9
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGOMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjA1NTBaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDlDRENFNDVFQkIxM0Ey
MUI0QjdCRTZBMTQwODRCRDU3NjgyMjgwQjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDP66Lbnrlm1kKssf11B0LmsHRDlfezDANg8SA1Ei0KoCsllajf
RFjy+MzwSodv7OA3IxZhXLLY369wVPICY6V5rYwyd/xUoz+2dAlFJ0KpINAXYhWO
SemVBWooXy4dGUcG39ZfK8aFo6ukNyT2rEN+E+Fm15prjxr1kjOkDlbyHzN02jlJ
FEBe/KqfBBYm4baMxAR/6O7n9A8MVBBjH7klOADL92YTS8gOsLFf9afOvxZoGeQt
thmV3qxfdpg0T4vquG0J1Ru+HMzHpQio76/g1Z6sHsTPJ+5hLxirxZ75Sl71WThC
FjiTg+fiFJoAlU7fa8ubQXzpZUePCBBZqHgZAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUnNzkXrsTohtLe+ahQIS9V2gigLIwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL25OemtYcnNUb2h0TGUtYWhR
SVM5VjJnaWdMSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0
2ogwDQYJKoZIhvcNAQELBQADggEBAGcNGJeLMad56xtvNl/0fOlrQAjXKRMQAfuW
Yb9qdthFgduX9G+YGokpMQw57d8QMqQcuf0oDvAa8P0Q655JfIfQtEknHZL/l8X5
oLG0Ifjq92LOGV+rUUE1nHfXUKKzjcaAhbZzSY7g3VI92T+y5It3+HcwkmNT3RSr
KDpwxN5On1y8n5/JUTAW2/JV6L8x3m7gEWK0prnUPD7zU1TGjZ9mfKJZZZ5bIse2
4YAq+TG2Tw6tE2ldrzW9xKCA8fA38Wyx4HtNOqdCqkJ+i12GkgzLiCLHj7s2wpCp
bkLSKq/3xnLvbNNIIcPdqIAHlkrJgX1FqtBvVFWoAPlu1hvbK/k=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:40 2023 by rpki-client on console-ams.rpki-client.org