Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ww25ePi3bxiMsOUw0wRJ0Ay37og.roa
File: ww25ePi3bxiMsOUw0wRJ0Ay37og.roa (raw, json)
Hash identifier: rsQ+dQPou7aToC4xZ2LW8/u4yPG+epO/twe3oGx0IVc=
Subject key identifier: C3:0D:B9:78:F8:B7:6F:18:8C:B0:E5:30:D3:04:49:D0:0C:B7:EE:88
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1ACE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ww25ePi3bxiMsOUw0wRJ0Ay37og.roa
Signing time: Thu 22 Dec 2022 06:13:18 +0000
ROA not before: Thu 22 Dec 2022 06:13:18 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 115.165.192.0/18 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6862 (0x1ace)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Dec 22 06:13:18 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C30DB978F8B76F188CB0E530D30449D00CB7EE88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:83:62:e8:a7:f8:e4:7e:9c:c7:69:1d:e9:62:
c7:c1:23:7b:d0:87:e4:00:ba:9c:80:b2:40:15:74:
42:d3:7e:4d:c2:6c:ae:1a:57:c7:c0:f3:e5:a8:28:
b0:ab:3a:a8:88:75:28:e9:aa:a2:e0:ca:07:37:2f:
06:55:5d:a0:45:4f:06:7c:87:38:85:1d:ac:84:eb:
0a:1d:f9:d2:3f:b4:97:3f:f4:9b:65:cd:76:ad:a8:
11:a2:03:ef:ce:59:b2:c5:49:b1:4d:f0:13:71:81:
99:c9:6f:71:4a:0a:ac:67:66:ce:f5:72:ec:e8:62:
e1:7b:ef:b2:a9:40:be:62:2e:88:56:63:19:f6:d3:
74:d4:b1:ce:db:ed:29:cc:46:1e:58:cf:76:39:ce:
ea:1d:d0:39:9f:2d:25:76:eb:d6:b3:30:b3:b8:d4:
01:8f:6c:fc:d6:ba:93:19:2c:b4:66:d5:86:4f:69:
86:da:24:f8:22:20:77:cd:ce:62:61:89:aa:9d:7a:
b8:dd:ed:3d:3f:97:d9:a7:4a:ca:b4:18:e2:93:a8:
68:a5:41:1f:cb:08:af:63:3f:0f:e8:61:f9:99:2c:
26:f4:b3:c3:c3:32:c0:bb:a3:4a:d1:fe:e4:8e:10:
3c:ce:56:07:9a:7f:01:a6:76:3f:0c:23:f5:fc:c9:
56:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0D:B9:78:F8:B7:6F:18:8C:B0:E5:30:D3:04:49:D0:0C:B7:EE:88
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ww25ePi3bxiMsOUw0wRJ0Ay37og.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.165.192.0/18
Signature Algorithm: sha256WithRSAEncryption
22:c0:c7:45:84:a7:61:a8:d1:d1:a6:7c:4d:ec:cd:49:7b:ef:
df:b6:8f:87:be:3b:eb:5c:cd:12:b8:f9:24:8d:f7:b4:ca:56:
09:94:c9:03:6d:6e:02:36:ba:b4:04:da:c4:c4:f6:43:a2:2a:
c8:68:26:14:68:c9:aa:ee:85:8f:ef:11:02:4e:99:ab:49:6a:
6e:f9:ce:ce:2a:c0:f1:c1:12:01:95:41:9c:e3:03:b8:0f:95:
fd:62:50:10:e0:92:03:0b:91:64:14:e1:c5:02:48:f7:06:90:
02:25:91:ce:c9:c7:0d:1d:09:13:40:b7:1f:d3:5a:41:b0:73:
2c:fa:fa:ce:14:e3:94:1a:8a:b3:ca:c7:75:94:3f:0b:de:48:
03:58:ad:26:f7:d3:8d:da:f7:71:28:37:38:88:a5:fa:90:d2:
7e:1a:17:96:6e:fc:08:bb:60:d7:50:93:a7:63:79:ec:0f:b4:
c2:bf:88:bb:de:c0:46:5c:32:27:42:7b:78:ea:71:4b:90:18:
30:98:60:cb:c4:cc:dc:00:91:dc:cb:ff:c2:d7:53:3d:42:56:
08:37:90:b6:bb:fc:d6:6c:ae:a0:2a:27:44:b0:55:c7:29:5a:
10:7c:dc:71:04:f3:9b:ae:8b:a1:bc:37:3e:b0:e8:45:5c:9a:
10:eb:ba:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:16 2023 by rpki-client on console-fra.rpki-client.org