Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yj2xNg22Z2tRy5W2jc8BIyi4Pl4.roa
File: yj2xNg22Z2tRy5W2jc8BIyi4Pl4.roa (raw, json)
Hash identifier: GrireV3UBEcqeqWBTGD3ZX/2UAoZ6hoUKcRmZtcUiAc=
Subject key identifier: CA:3D:B1:36:0D:B6:67:6B:51:CB:95:B6:8D:CF:01:23:28:B8:3E:5E
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1990
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yj2xNg22Z2tRy5W2jc8BIyi4Pl4.roa
Signing time: Sat 22 Oct 2022 06:06:42 +0000
ROA not before: Sat 22 Oct 2022 06:06:42 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.144.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6544 (0x1990)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:42 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CA3DB1360DB6676B51CB95B68DCF012328B83E5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:39:e6:84:80:c3:7e:05:02:5a:71:22:33:1b:
67:38:f9:87:1a:08:27:5d:ba:ae:d0:49:6d:77:40:
1d:4a:cd:f1:07:4b:5d:09:d8:1e:1b:b0:51:3b:46:
dd:fe:65:89:9e:d7:18:55:71:0e:58:dc:ac:74:a2:
e7:9b:65:d4:1a:08:35:87:0d:3b:09:c4:e5:ae:8e:
bd:4a:08:9a:4c:90:41:8b:9e:3d:20:af:68:22:49:
86:a2:57:6a:f9:8f:3e:e9:eb:21:bc:15:cb:8f:53:
24:8d:31:3c:50:4a:67:ee:5f:c0:e6:a4:d8:bc:78:
27:31:b4:67:f3:48:da:32:fc:be:19:bb:68:d1:2e:
1d:46:e7:45:63:a3:3e:aa:ee:ff:88:6d:7e:2f:7e:
9b:7d:76:7c:4b:02:c4:0d:07:77:f7:2c:7a:a6:94:
5a:19:64:f2:03:4f:30:43:9e:cd:5c:e3:6a:92:32:
c7:e5:9b:67:61:4b:58:78:3c:92:64:c2:d6:de:80:
be:0d:37:8e:2d:31:7e:67:a7:23:3c:8a:ee:1e:e9:
a7:fd:a7:f0:94:af:72:14:89:1b:10:19:8e:5f:ef:
35:02:f2:c3:ba:9d:1b:b9:c0:15:c3:f8:c9:a6:06:
1d:e6:5d:58:a5:be:66:0a:06:0c:9e:7c:d1:30:e2:
9c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3D:B1:36:0D:B6:67:6B:51:CB:95:B6:8D:CF:01:23:28:B8:3E:5E
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yj2xNg22Z2tRy5W2jc8BIyi4Pl4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.144.0/20
Signature Algorithm: sha256WithRSAEncryption
73:8f:8e:7d:a0:cc:16:34:1c:22:7c:d7:06:bf:37:3f:1b:92:
7d:5b:72:18:b4:5d:22:1a:ac:d0:c2:d4:f9:f0:54:eb:88:34:
a6:8b:36:d9:c5:2d:31:fb:36:19:0b:71:c9:0f:d1:b7:af:d4:
4b:f2:fa:c0:4b:51:de:21:28:c1:0c:7a:9f:81:46:24:20:4d:
1e:75:a5:2b:0e:63:0a:b1:ae:1f:70:4d:8d:9d:a6:64:63:0e:
e9:ad:90:16:90:f9:36:76:91:8d:98:35:1f:a0:71:ff:4f:e3:
19:41:64:ab:e0:21:8d:7b:59:be:fc:7e:95:af:d9:8c:89:59:
dd:e9:be:65:4e:86:ca:90:d9:14:41:30:d7:6e:78:95:bf:62:
e4:c3:2d:73:a8:7e:42:1a:81:6a:10:4c:00:81:e3:5b:af:d4:
2a:01:18:1b:82:40:7e:47:b7:08:3e:71:22:25:ea:77:36:cb:
cd:68:02:9e:0a:af:9a:9c:4b:71:78:1f:cf:03:ce:69:30:b9:
4e:82:93:2c:c5:b9:62:8a:65:dd:fe:a4:dc:6d:2c:53:7f:25:
1e:fc:7a:ac:aa:ef:c4:d5:62:6a:30:f5:92:f2:12:49:6e:8f:
cb:87:74:d5:14:13:f2:a3:94:08:57:2d:8b:a2:8a:85:26:44:
f5:b8:d9:da
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGZAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjA2NDJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKENBM0RCMTM2MERCNjY3
NkI1MUNCOTVCNjhEQ0YwMTIzMjhCODNFNUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQChOeaEgMN+BQJacSIzG2c4+YcaCCdduq7QSW13QB1KzfEHS10J
2B4bsFE7Rt3+ZYme1xhVcQ5Y3Kx0ouebZdQaCDWHDTsJxOWujr1KCJpMkEGLnj0g
r2giSYaiV2r5jz7p6yG8FcuPUySNMTxQSmfuX8DmpNi8eCcxtGfzSNoy/L4Zu2jR
Lh1G50Vjoz6q7v+IbX4vfpt9dnxLAsQNB3f3LHqmlFoZZPIDTzBDns1c42qSMsfl
m2dhS1h4PJJkwtbegL4NN44tMX5npyM8iu4e6af9p/CUr3IUiRsQGY5f7zUC8sO6
nRu5wBXD+MmmBh3mXVilvmYKBgyefNEw4pynAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUyj2xNg22Z2tRy5W2jc8BIyi4Pl4wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3lqMnhOZzIyWjJ0Unk1VzJq
YzhCSXlpNFBsNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAS0
2pAwDQYJKoZIhvcNAQELBQADggEBAHOPjn2gzBY0HCJ81wa/Nz8bkn1bchi0XSIa
rNDC1PnwVOuINKaLNtnFLTH7NhkLcckP0bev1Evy+sBLUd4hKMEMep+BRiQgTR51
pSsOYwqxrh9wTY2dpmRjDumtkBaQ+TZ2kY2YNR+gcf9P4xlBZKvgIY17Wb78fpWv
2YyJWd3pvmVOhsqQ2RRBMNdueJW/YuTDLXOofkIagWoQTACB41uv1CoBGBuCQH5H
twg+cSIl6nc2y81oAp4Kr5qcS3F4H88DzmkwuU6CkyzFuWKKZd3+pNxtLFN/JR78
eqyq78TVYmow9ZLyEkluj8uHdNUUE/KjlAhXLYuiioUmRPW42do=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:16 2023 by rpki-client on console-fra.rpki-client.org