Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uURQ7-IXQXCRUFde99nrBMXG-84.roa
File: uURQ7-IXQXCRUFde99nrBMXG-84.roa (raw, json)
Hash identifier: XJvzzDdMWV3dvtdOh3EdHKP1ketLYxuBk7lHeOK26OM=
Subject key identifier: B9:44:50:EF:E2:17:41:70:91:50:57:5E:F7:D9:EB:04:C5:C6:FB:CE
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1A56
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uURQ7-IXQXCRUFde99nrBMXG-84.roa
Signing time: Thu 27 Oct 2022 02:47:34 +0000
ROA not before: Thu 27 Oct 2022 02:47:34 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.168.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6742 (0x1a56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 27 02:47:34 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B94450EFE21741709150575EF7D9EB04C5C6FBCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bf:10:02:19:d2:f4:e3:89:fb:34:f0:19:3d:
11:e4:ff:d4:c9:2a:85:6e:6e:e6:01:29:ac:05:f9:
97:28:09:d6:46:39:2a:e7:f7:17:b8:e4:72:fa:d2:
29:66:b0:57:3f:c7:c0:dc:85:89:88:de:1b:da:c0:
d7:f6:f0:30:bd:cf:84:b6:66:22:df:13:a3:ba:fa:
d4:c6:f2:26:5d:5a:13:95:be:b0:7f:ae:cc:5a:0e:
52:33:e3:54:00:a7:36:7c:3f:19:95:56:73:41:f4:
fe:b6:b1:7f:98:8a:1e:5f:2a:ae:a7:b5:e8:d8:0e:
05:73:3e:f4:ad:f2:a6:db:d2:0e:db:ab:1a:d0:4f:
be:57:c5:80:36:da:ac:b7:61:49:bd:db:ab:59:0d:
56:d0:aa:be:8e:ff:03:c9:70:06:5d:a4:71:db:4d:
2e:6e:63:73:f3:63:7d:b3:de:a9:7e:52:ee:18:cd:
d0:7c:3b:db:5d:29:1c:d2:52:47:c6:19:3d:fc:4d:
40:e1:cb:1d:89:26:9d:96:69:96:8c:a4:29:c7:da:
f3:82:b9:a4:5d:24:58:10:8a:30:d3:a9:92:cc:8e:
89:36:85:05:f0:66:d9:eb:d4:64:20:8a:a1:57:c6:
99:2b:2d:52:8b:6c:4f:3e:3e:76:76:a9:84:3b:09:
16:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:44:50:EF:E2:17:41:70:91:50:57:5E:F7:D9:EB:04:C5:C6:FB:CE
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uURQ7-IXQXCRUFde99nrBMXG-84.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.168.0/21
Signature Algorithm: sha256WithRSAEncryption
4c:94:ea:43:ce:e2:20:07:88:a9:9f:2d:79:a0:31:cd:4f:ef:
e4:bc:45:6f:36:75:ef:a2:e6:ca:64:ff:91:97:40:75:08:ad:
de:72:12:f1:e7:7f:ef:49:ad:73:0b:d9:e7:2c:e6:b2:7c:2f:
8f:b5:d2:76:bc:cb:a4:56:54:db:94:bb:ee:1a:3d:33:23:87:
b5:41:c3:4c:c6:90:7f:d9:87:13:7c:da:83:16:92:27:a1:ed:
70:15:0b:ab:d1:94:5a:da:28:6c:fd:23:a6:0e:dc:0d:90:06:
df:73:90:e2:b5:7b:76:0d:56:3f:55:02:bd:d1:08:48:e7:bf:
24:b2:17:3d:a4:a5:72:0d:fd:da:56:cb:42:fa:91:24:f6:1b:
e8:30:30:7f:4e:50:12:63:8f:8f:c1:e7:10:87:7f:aa:63:b7:
ec:1a:2d:13:87:a4:a1:f6:d2:75:a9:f0:f1:58:0e:2f:87:15:
f8:82:90:6a:ec:d0:e0:52:49:16:b5:b1:0c:96:40:b3:d8:d9:
7a:9f:c4:09:47:d7:d4:38:fb:c8:cb:05:06:eb:2e:04:09:76:
e9:87:16:11:0a:a1:f6:15:ac:33:50:f0:21:78:03:ea:85:1a:
f1:36:95:ec:6a:b8:e8:58:58:33:dc:71:75:95:62:68:c9:fa:
0c:0a:50:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:16 2023 by rpki-client on console-fra.rpki-client.org