Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/r3DwstLjx0EjQzk-upqmehIYar8.roa
File: r3DwstLjx0EjQzk-upqmehIYar8.roa (raw, json)
Hash identifier: C9TcSAfn71iVp8usuQC8W4MUTr3KG0BO46HcdF7ImK4=
Subject key identifier: AF:70:F0:B2:D2:E3:C7:41:23:43:39:3E:BA:9A:A6:7A:12:18:6A:BF
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/r3DwstLjx0EjQzk-upqmehIYar8.roa
Signing time: Thu 15 Sep 2022 02:35:27 +0000
ROA not before: Thu 15 Sep 2022 02:35:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 180.218.245.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:27 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AF70F0B2D2E3C7412343393EBA9AA67A12186ABF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ff:3b:8e:5f:08:42:dc:ae:17:96:0d:4b:27:
14:74:4f:86:33:dd:7b:fa:64:3a:eb:34:ae:1c:58:
0d:75:8b:d6:45:c7:6a:6b:72:d3:ac:a5:28:6d:d1:
ee:78:6e:82:f6:db:16:26:56:07:f8:85:7b:97:68:
bc:10:c8:a7:57:a4:37:7d:71:e4:b1:02:28:91:a1:
dd:66:57:c3:1c:d0:8f:84:81:90:da:95:c8:e2:88:
b6:95:00:2c:ea:99:02:18:73:5a:4e:85:38:81:fe:
c8:35:5b:27:21:fc:8a:cf:8c:94:06:e0:b3:9d:a2:
d9:9a:1c:29:df:f5:a9:fd:c9:16:de:48:c5:f6:0f:
29:86:58:7b:3d:b3:4f:6a:c4:a9:92:ea:51:c8:59:
b7:b7:ce:29:55:2d:90:a0:96:d9:80:5e:ed:6e:39:
81:96:17:45:8a:b6:46:e1:8a:fd:ff:7a:c5:12:a0:
bd:88:de:ad:b6:33:ac:fa:08:86:cd:81:06:2b:48:
39:f4:ff:7b:fe:65:b2:27:78:1c:d8:be:17:5b:1c:
f9:1f:c5:00:d6:50:d3:6c:ca:80:cf:f1:9d:d3:cb:
d9:fc:35:a0:c7:03:d0:94:91:b3:44:16:21:86:d0:
1c:e1:4b:47:a2:ac:35:00:4f:61:d1:24:88:ac:8d:
a9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:70:F0:B2:D2:E3:C7:41:23:43:39:3E:BA:9A:A6:7A:12:18:6A:BF
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/r3DwstLjx0EjQzk-upqmehIYar8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.245.0/24
Signature Algorithm: sha256WithRSAEncryption
11:a4:f5:9c:74:98:8e:50:3a:1f:b5:ce:a0:50:2a:59:c8:ed:
6e:b1:b3:96:c2:4c:77:c6:75:39:eb:ea:0f:72:18:3c:57:6b:
be:c4:5c:ab:c3:24:46:56:b9:27:52:1b:6e:2b:49:a1:88:72:
3f:51:7d:f5:58:32:36:54:fc:9d:2f:ad:db:00:27:3b:26:59:
55:51:25:9d:8a:70:e1:9c:b3:b9:22:9d:6e:57:7f:8d:6a:f4:
4c:21:2a:e2:a1:9e:bb:ee:a2:81:03:9d:75:f1:14:4f:28:e6:
3c:e2:96:91:be:8b:b6:e2:a5:ca:99:5e:5d:21:d2:db:cf:6a:
23:b1:90:d4:e2:6a:ee:61:51:fb:00:11:03:7d:6e:f6:ac:cd:
4e:e3:03:ce:83:b0:c0:68:97:92:35:af:6e:0f:c0:b3:b3:39:
74:e9:06:23:ba:ca:74:d5:42:98:4e:c4:39:1e:c1:c2:9c:61:
fb:98:81:ac:99:87:ca:c0:87:51:15:d3:cb:6f:d2:16:6a:28:
b2:aa:95:9f:be:ae:48:2f:fb:1a:98:67:9a:3b:d3:ce:76:b6:
8e:f3:27:0f:fe:ba:c7:b9:99:d5:eb:7d:00:d2:7c:49:6f:94:
a6:51:46:af:00:ff:5e:64:5c:c2:fd:4e:e0:df:a0:bc:be:bd:
fa:db:78:3f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA5MTUw
MjM1MjdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEFGNzBGMEIyRDJFM0M3
NDEyMzQzMzkzRUJBOUFBNjdBMTIxODZBQkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDF/zuOXwhC3K4Xlg1LJxR0T4Yz3Xv6ZDrrNK4cWA11i9ZFx2pr
ctOspSht0e54boL22xYmVgf4hXuXaLwQyKdXpDd9ceSxAiiRod1mV8Mc0I+EgZDa
lcjiiLaVACzqmQIYc1pOhTiB/sg1Wych/IrPjJQG4LOdotmaHCnf9an9yRbeSMX2
DymGWHs9s09qxKmS6lHIWbe3zilVLZCgltmAXu1uOYGWF0WKtkbhiv3/esUSoL2I
3q22M6z6CIbNgQYrSDn0/3v+ZbIneBzYvhdbHPkfxQDWUNNsyoDP8Z3Ty9n8NaDH
A9CUkbNEFiGG0BzhS0eirDUAT2HRJIisjak1AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUr3DwstLjx0EjQzk+upqmehIYar8wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3IzRHdzdExqeDBFalF6ay11
cHFtZWhJWWFyOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0
2vUwDQYJKoZIhvcNAQELBQADggEBABGk9Zx0mI5QOh+1zqBQKlnI7W6xs5bCTHfG
dTnr6g9yGDxXa77EXKvDJEZWuSdSG24rSaGIcj9RffVYMjZU/J0vrdsAJzsmWVVR
JZ2KcOGcs7kinW5Xf41q9EwhKuKhnrvuooEDnXXxFE8o5jzilpG+i7bipcqZXl0h
0tvPaiOxkNTiau5hUfsAEQN9bvaszU7jA86DsMBol5I1r24PwLOzOXTpBiO6ynTV
QphOxDkewcKcYfuYgayZh8rAh1EV08tv0hZqKLKqlZ++rkgv+xqYZ5o70852to7z
Jw/+use5mdXrfQDSfElvlKZRRq8A/15kXML9TuDfoLy+vfrbeD8=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:40 2023 by rpki-client on console-ams.rpki-client.org