Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/udNv5_9q7YrVHGl4TpN8eJWAGUc.roa
File: udNv5_9q7YrVHGl4TpN8eJWAGUc.roa (raw, json)
Hash identifier: 0LwBnj2mVlCciV7cPnvUvIhNLhA6WHMCs5JONjU8LjY=
Subject key identifier: B9:D3:6F:E7:FF:6A:ED:8A:D5:1C:69:78:4E:93:7C:78:95:80:19:47
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 192F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/udNv5_9q7YrVHGl4TpN8eJWAGUc.roa
Signing time: Sat 22 Oct 2022 06:06:11 +0000
ROA not before: Sat 22 Oct 2022 06:06:11 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.48.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6447 (0x192f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:11 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B9D36FE7FF6AED8AD51C69784E937C7895801947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:80:f5:f0:0d:fd:8f:b7:2b:61:5e:4b:f1:e3:
16:cb:cf:98:f9:eb:17:45:e7:85:ee:d8:c3:59:5b:
70:0d:0a:6f:77:f2:16:d8:75:82:f2:96:c7:5d:44:
68:5d:10:80:6b:67:41:dc:2a:28:c8:61:3b:c1:7c:
c2:d6:50:66:80:f7:f6:65:10:d6:31:ae:ff:93:ca:
01:6d:ae:9f:9a:b3:ec:a2:51:49:9e:0e:0e:45:43:
b0:10:0c:c3:64:ca:9c:93:62:b1:48:d5:3e:3d:30:
e0:4e:dc:b1:ae:db:b8:fc:ee:e8:6e:90:b9:d7:bb:
00:ed:b7:d0:55:e7:5d:71:72:98:f6:f0:19:d3:76:
f7:93:d3:5e:d1:42:6e:37:5c:f3:3e:fc:9d:fd:9d:
e2:db:ed:8c:9c:ba:29:44:64:5d:12:c6:d0:52:e1:
73:fa:bd:64:c6:54:aa:0b:5d:de:fe:e1:55:a6:31:
22:43:37:e3:01:47:b6:17:f7:66:4b:1c:e1:00:a9:
a9:5f:5b:a9:0e:1a:bd:17:8e:6c:9b:53:e3:fe:5e:
10:e2:4c:0a:d9:89:86:d8:57:08:ad:77:cd:54:66:
89:ec:a7:2b:98:93:a4:86:13:1d:08:a5:39:65:38:
d6:5a:76:2e:03:33:f8:bb:cb:0c:53:59:20:58:cb:
df:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D3:6F:E7:FF:6A:ED:8A:D5:1C:69:78:4E:93:7C:78:95:80:19:47
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/udNv5_9q7YrVHGl4TpN8eJWAGUc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.48.0/21
Signature Algorithm: sha256WithRSAEncryption
37:94:c0:92:e4:20:42:bb:bc:f5:da:c5:f3:2d:5a:65:80:84:
4b:4c:46:9c:c6:85:7b:13:46:0d:2d:74:13:8f:39:31:3c:11:
7a:53:0e:88:b3:42:45:47:62:89:94:70:c3:dc:7a:ee:7f:74:
83:4c:fa:e1:47:06:de:16:6a:9d:2e:46:71:3f:cb:9b:6e:5e:
a1:8c:42:dc:59:30:c7:b0:9c:f3:e0:c7:e6:a4:37:9d:1b:61:
92:e7:f4:07:75:cc:ae:b5:56:bf:4b:98:48:90:00:87:f5:2a:
01:0a:83:e2:45:d1:7e:2e:e4:e9:ca:bd:6e:2a:25:ba:0c:2b:
d3:83:83:2a:82:03:65:cb:2f:3e:98:76:e4:03:46:b1:1b:a6:
03:c3:53:87:9b:9f:be:d3:db:d3:dd:83:07:b1:89:5b:69:05:
bc:96:9a:60:2d:b3:41:2a:c9:f8:3f:c4:b0:4c:5b:20:c0:97:
ab:f0:b9:c2:80:5f:03:48:cd:dc:3c:08:d3:f7:c3:08:15:5f:
23:9f:fc:31:b9:f7:c1:d3:4f:a5:13:5a:bc:8e:2b:2a:b4:46:
32:b8:af:dd:27:ce:37:1c:86:c4:47:94:6c:c0:7c:c6:85:79:
50:f4:22:c6:68:e6:bf:df:4d:be:b3:ba:c5:81:76:83:df:03:
78:d1:29:d2
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGS8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjA2MTFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEI5RDM2RkU3RkY2QUVE
OEFENTFDNjk3ODRFOTM3Qzc4OTU4MDE5NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIgPXwDf2PtythXkvx4xbLz5j56xdF54Xu2MNZW3ANCm938hbY
dYLylsddRGhdEIBrZ0HcKijIYTvBfMLWUGaA9/ZlENYxrv+TygFtrp+as+yiUUme
Dg5FQ7AQDMNkypyTYrFI1T49MOBO3LGu27j87uhukLnXuwDtt9BV511xcpj28BnT
dveT017RQm43XPM+/J39neLb7YycuilEZF0SxtBS4XP6vWTGVKoLXd7+4VWmMSJD
N+MBR7YX92ZLHOEAqalfW6kOGr0XjmybU+P+XhDiTArZiYbYVwitd81UZonspyuY
k6SGEx0IpTllONZadi4DM/i7ywxTWSBYy99PAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUudNv5/9q7YrVHGl4TpN8eJWAGUcwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3VkTnY1XzlxN1lyVkhHbDRU
cE44ZUpXQUdVYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
2jAwDQYJKoZIhvcNAQELBQADggEBADeUwJLkIEK7vPXaxfMtWmWAhEtMRpzGhXsT
Rg0tdBOPOTE8EXpTDoizQkVHYomUcMPceu5/dINM+uFHBt4Wap0uRnE/y5tuXqGM
QtxZMMewnPPgx+akN50bYZLn9Ad1zK61Vr9LmEiQAIf1KgEKg+JF0X4u5OnKvW4q
JboMK9ODgyqCA2XLLz6YduQDRrEbpgPDU4ebn77T29PdgwexiVtpBbyWmmAts0Eq
yfg/xLBMWyDAl6vwucKAXwNIzdw8CNP3wwgVXyOf/DG598HTT6UTWryOKyq0RjK4
r90nzjcchsRHlGzAfMaFeVD0IsZo5r/fTb6zusWBdoPfA3jRKdI=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:16 2023 by rpki-client on console-fra.rpki-client.org