Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/q9RDNNN7lw_rCPFGX2rql3CS04w.roa
File: q9RDNNN7lw_rCPFGX2rql3CS04w.roa (raw, json)
Hash identifier: ebcW0rBW6c0aBUPpbtZWh4NrsGnE+0ZWspjbmZmPBKU=
Subject key identifier: AB:D4:43:34:D3:7B:97:0F:EB:08:F1:46:5F:6A:EA:97:70:92:D3:8C
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/q9RDNNN7lw_rCPFGX2rql3CS04w.roa
Signing time: Thu 15 Sep 2022 02:35:22 +0000
ROA not before: Thu 15 Sep 2022 02:35:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 180.218.108.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:22 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=ABD44334D37B970FEB08F1465F6AEA977092D38C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:49:db:6f:6a:16:aa:df:45:96:89:a6:ac:60:
00:5a:4d:0e:77:7a:02:06:17:7c:28:1f:6d:14:1a:
d7:d3:14:4f:19:88:f2:2b:e1:ea:97:a2:b0:bf:ab:
d4:e9:30:d4:d3:69:77:93:41:7d:2f:0f:df:10:4e:
1f:f4:52:3e:28:2e:38:67:61:a6:36:4a:f2:39:87:
8f:e9:97:49:7b:6f:23:93:cd:ce:51:62:a4:e2:2d:
73:1a:e2:56:a4:1f:41:9c:f4:73:44:79:93:c9:c6:
bd:7f:34:84:0b:a4:23:07:28:c9:4d:3d:8a:4a:4b:
b4:8b:54:cf:b9:58:21:b5:3c:c5:40:e6:07:a5:78:
95:17:1c:ee:37:27:29:19:60:cd:eb:5e:f9:f2:1f:
0b:ed:78:6b:0c:cc:44:b1:1c:2d:58:c8:ae:00:d6:
3f:98:40:4a:3b:9b:f4:d9:d9:d8:2e:c4:4a:fb:e7:
31:97:66:73:d7:c7:fb:43:79:53:ab:c6:34:ed:65:
c3:7a:02:52:7e:a5:16:5f:45:6d:a2:bc:16:9b:4f:
11:f3:6e:fa:4b:89:10:0d:87:6d:97:92:6c:ea:ae:
4f:66:12:a6:7d:71:90:cb:16:cb:6f:4e:55:31:2c:
3b:3e:4d:96:99:11:4f:75:96:5c:87:5f:30:f3:9f:
52:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D4:43:34:D3:7B:97:0F:EB:08:F1:46:5F:6A:EA:97:70:92:D3:8C
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/q9RDNNN7lw_rCPFGX2rql3CS04w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.108.0/22
Signature Algorithm: sha256WithRSAEncryption
83:bc:ac:16:0d:8f:9c:33:0f:6c:9d:7d:16:38:a8:28:0c:ac:
48:3d:c8:f5:59:43:9f:8c:6b:3d:b2:b1:98:e9:04:be:af:81:
e3:ac:d1:5d:ab:37:c8:80:87:72:10:21:06:aa:e0:f3:09:c0:
81:e3:ee:34:e8:0c:45:45:87:c5:9e:9c:d3:2f:9d:fd:38:73:
23:df:25:50:56:be:2b:d0:5a:31:04:35:29:4e:9e:b5:fb:7d:
56:19:cb:db:57:65:3b:15:ad:dd:04:86:fd:59:b8:c4:f7:df:
45:cf:e2:60:28:73:e7:47:f8:82:af:7a:a4:d0:e7:dc:a0:96:
bf:b9:fd:79:ef:b3:37:ca:e9:ed:f6:7d:a6:9c:1a:02:90:c9:
64:f2:0d:3d:d5:4b:36:83:88:23:e0:dc:87:09:8f:dd:42:e7:
60:8f:6c:6d:c5:55:9f:40:66:39:c4:0a:b8:90:07:d1:eb:c6:
b0:f5:ef:20:9e:69:26:93:56:a2:b2:4b:ea:54:b1:ac:80:67:
3a:62:a2:fa:f6:92:74:fd:2e:10:fe:c8:cb:9a:5e:b9:82:d6:
40:f8:43:d2:69:8b:30:6a:00:bf:35:70:d7:9f:32:2c:8c:f9:
3d:57:14:d6:ea:5d:a2:bc:44:3c:e4:17:e7:2a:ac:97:1e:3c:
f4:ae:09:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:40 2023 by rpki-client on console-ams.rpki-client.org