Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pBNcIWGSI_YJbfUaTnqwpbxtjTs.roa
File: pBNcIWGSI_YJbfUaTnqwpbxtjTs.roa (raw, json)
Hash identifier: 5/rbDujs9icRGZXEhNUcjPnrXhs8v3PpahfWG0n40VQ=
Subject key identifier: A4:13:5C:21:61:92:23:F6:09:6D:F5:1A:4E:7A:B0:A5:BC:6D:8D:3B
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 18D8
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pBNcIWGSI_YJbfUaTnqwpbxtjTs.roa
Signing time: Sat 22 Oct 2022 06:05:48 +0000
ROA not before: Sat 22 Oct 2022 06:05:48 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.140.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6360 (0x18d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:05:48 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A4135C21619223F6096DF51A4E7AB0A5BC6D8D3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:85:68:cf:73:0b:a0:68:1a:6f:14:a7:2a:15:
c4:25:ed:f5:c5:ad:0f:67:5f:a0:f0:d9:29:d2:78:
d3:8d:26:24:d7:c0:20:61:b8:12:ac:41:3e:fd:86:
41:1d:69:69:9a:d5:12:1b:6d:fd:12:6a:69:9f:88:
f9:fa:ba:b0:d5:db:f8:59:6e:a6:fb:05:15:56:7d:
ec:15:ea:58:8e:8f:6f:3f:0a:ec:91:1c:79:1f:3d:
c6:71:b0:52:2d:2b:18:34:3a:59:e0:c0:5e:5c:43:
e4:85:87:c7:08:57:72:f4:21:f7:19:37:37:d5:16:
91:1c:f2:af:6d:fb:9f:3d:c7:0c:ae:90:40:12:56:
94:c0:2c:f5:07:2b:ba:c2:eb:09:19:c5:49:e3:98:
b4:f7:de:aa:e5:bb:e3:0a:ea:81:6b:aa:d0:ad:53:
08:f2:7f:89:37:08:f6:09:85:95:f1:c0:a0:89:fe:
60:4c:ad:65:bc:4e:4a:0d:3d:95:da:34:83:97:e2:
bb:08:06:12:41:3a:0a:2d:d1:8d:b2:8d:aa:72:67:
cc:08:cc:b5:6b:59:ab:ed:7a:60:22:e5:a5:e3:64:
84:88:87:38:94:55:07:09:d3:41:d8:6f:b3:53:11:
17:35:a9:db:e4:2b:44:6c:02:da:ce:61:2d:df:9b:
e5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:13:5C:21:61:92:23:F6:09:6D:F5:1A:4E:7A:B0:A5:BC:6D:8D:3B
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pBNcIWGSI_YJbfUaTnqwpbxtjTs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.140.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:a5:c4:b9:0d:39:61:f1:28:85:30:08:53:87:23:b6:38:a1:
2d:b1:64:4a:5c:a8:fa:10:d3:b1:c0:5e:4d:f2:b8:1d:08:77:
30:3a:66:d4:b4:85:b3:9a:59:3a:3b:60:de:1f:58:f8:eb:22:
0a:40:8b:1d:96:13:af:48:80:00:bc:ca:c8:fe:79:ab:88:78:
f7:f1:45:a0:65:d0:d9:0a:be:b7:0b:96:a3:93:3d:9a:f2:ae:
ae:1f:39:fa:35:59:dc:95:f9:4e:7c:74:bd:11:fb:4b:60:cf:
38:62:63:93:dc:98:c0:7c:dc:f0:88:7f:cf:4e:7b:f2:cf:53:
51:fb:c8:46:48:b3:e8:ed:4c:6c:11:4f:48:e2:2a:b4:a5:a6:
cd:39:bc:1a:b8:4a:f0:aa:55:cc:cd:21:a9:87:ad:41:f3:b0:
31:47:d6:08:f8:89:df:6e:3e:ae:f0:ef:df:5e:a0:76:6b:d3:
d5:2f:73:e7:e4:61:56:d4:4f:e8:8f:ab:ad:63:42:60:f7:e8:
d2:48:04:10:1f:66:bc:21:b3:bf:dd:29:34:b1:4c:cd:90:6d:
ab:6e:a4:7b:16:b0:6f:e1:97:86:84:3c:e7:18:24:6b:6a:93:
9c:b4:53:63:be:bb:59:e9:ec:ce:c7:ce:c7:b8:9c:00:2f:d9:
f5:ce:23:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:40 2023 by rpki-client on console-ams.rpki-client.org