Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/remX7yLp1ZkjL4E009B23Sqn1A0.roa
File: remX7yLp1ZkjL4E009B23Sqn1A0.roa (raw, json)
Hash identifier: RExig/e2KBc4jJTX/blgDeSi0Kj2aif9MYP+axgI51c=
Subject key identifier: AD:E9:97:EF:22:E9:D5:99:23:2F:81:34:D3:D0:76:DD:2A:A7:D4:0D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/remX7yLp1ZkjL4E009B23Sqn1A0.roa
Signing time: Thu 15 Sep 2022 02:36:05 +0000
ROA not before: Thu 15 Sep 2022 02:36:05 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.140.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:05 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=ADE997EF22E9D599232F8134D3D076DD2AA7D40D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:53:2c:a8:02:eb:84:6b:73:0f:b1:21:3f:c0:
e8:cf:8c:93:25:48:b4:ce:43:59:1a:ef:5a:02:b6:
ae:e9:50:3e:d9:df:ba:7f:29:60:94:08:d7:d7:03:
45:dc:c8:93:24:af:78:2d:5f:8a:0c:e1:ef:70:a6:
34:2b:86:35:a9:4c:90:ed:c9:5b:a1:45:18:fd:d0:
dc:bf:01:7d:d2:33:3e:55:2a:a0:2e:59:e1:68:a6:
2e:a7:45:21:e8:a8:c5:97:87:43:03:cd:0a:e0:34:
21:fe:e7:b8:40:68:44:dc:e2:f4:57:bd:2c:98:07:
fe:4c:a1:e0:50:ad:e6:67:9a:a0:e2:bd:05:a1:87:
1a:db:8a:b7:7c:92:6c:64:03:a0:ec:0f:e2:d8:a7:
7a:68:ac:a2:6c:fb:0b:92:dc:8a:8b:38:05:93:a3:
ca:cb:c4:5c:fd:13:e1:2f:32:0e:a4:ba:9e:56:95:
df:fb:7a:3d:7f:23:0e:ad:5e:b4:77:e0:dc:83:02:
aa:19:d5:89:15:85:4a:9b:83:9b:53:3d:d5:1a:23:
4c:49:e5:40:35:3e:8f:f0:71:cd:93:45:45:58:e6:
95:5e:d9:bb:8f:00:ec:fd:57:90:a7:9a:13:a0:3f:
41:74:a9:f9:0a:b5:da:42:2f:ab:f0:f8:0a:52:27:
a5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E9:97:EF:22:E9:D5:99:23:2F:81:34:D3:D0:76:DD:2A:A7:D4:0D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/remX7yLp1ZkjL4E009B23Sqn1A0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.140.0/24
Signature Algorithm: sha256WithRSAEncryption
26:06:af:d3:e1:c3:62:81:84:1b:c5:2b:9e:a6:a9:cb:be:a9:
82:40:3b:e0:ce:4b:0d:76:f1:50:1d:4c:45:a6:12:47:d7:ac:
69:1e:32:8c:8d:d2:98:02:67:dd:9b:68:0e:f7:81:09:a8:89:
2d:21:13:2c:c0:19:88:54:e6:4d:33:f9:4a:a8:53:67:8e:e4:
fb:48:4a:7b:54:2f:d4:44:43:a4:e4:38:f2:1c:52:41:0d:c3:
b6:f1:61:70:c1:29:59:f1:f4:87:9d:1e:fa:6d:9d:b1:70:4b:
1b:19:49:7b:9f:13:21:4c:a1:0e:1f:f3:87:1b:52:db:24:b4:
c7:0a:c0:a3:d4:8d:3f:90:86:a3:42:0b:9c:80:84:a8:66:2e:
ca:30:2c:96:52:67:06:c0:c2:88:e6:5a:fd:a4:ea:76:fd:5c:
25:dd:7a:68:26:5d:19:93:6a:3d:34:0c:b8:49:e3:5b:58:38:
db:cf:e9:d4:a0:80:c2:dd:f3:b8:2e:67:21:05:44:92:f0:2e:
06:28:23:48:b0:2c:66:8e:48:5c:ef:dc:04:f1:6e:54:73:29:
1d:2d:19:ab:ad:f0:c2:6f:0a:1f:70:1b:97:32:ce:bb:2f:58:
21:b2:66:a7:01:8a:a4:4c:2d:b9:66:0e:e7:26:74:6a:6d:83:
26:78:e0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:40 2023 by rpki-client on console-ams.rpki-client.org