Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-CQJqYaYybhaYllITH9Zu_HOp9w.roa
File: -CQJqYaYybhaYllITH9Zu_HOp9w.roa (raw, json)
Hash identifier: yu6PLelnDgsmcvDFC0tODzybEebS8idMs2/HoisGZSM=
Subject key identifier: F8:24:09:A9:86:98:C9:B8:5A:62:59:48:4C:7F:59:BB:F1:CE:A7:DC
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 19C6
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-CQJqYaYybhaYllITH9Zu_HOp9w.roa
Signing time: Sat 22 Oct 2022 06:10:52 +0000
ROA not before: Sat 22 Oct 2022 06:10:52 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.159.32.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6598 (0x19c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:10:52 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F82409A98698C9B85A6259484C7F59BBF1CEA7DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d9:b6:30:eb:c5:35:f0:0b:0a:fe:17:28:da:
8d:dc:d7:1f:43:20:be:d0:6d:c2:ae:e9:f7:47:e8:
58:13:b4:08:23:e1:b5:88:09:55:38:de:41:bb:65:
8d:3c:01:32:11:d2:7d:ca:a9:c3:ab:9a:1f:e3:3d:
f6:e2:d9:d3:84:70:15:04:d1:24:4b:ad:84:c0:27:
19:d6:75:23:39:be:04:5c:d0:e5:c4:f9:d8:b4:a3:
7b:24:9a:64:32:2b:db:26:64:8e:f9:0d:60:15:90:
7f:01:27:9e:6a:88:8c:2f:ad:87:5c:39:c8:46:b7:
43:b2:f9:f8:87:1f:39:28:4c:da:0f:2f:40:25:86:
3a:b4:7e:27:51:3d:fc:2c:cd:17:5f:4a:68:2e:1d:
b8:83:2e:ff:69:96:f5:08:49:7b:65:2e:b6:79:bd:
bc:32:c0:27:74:e8:77:75:a9:7f:3e:53:d9:b3:a9:
ad:7d:d0:77:e3:aa:44:e7:78:33:bf:0c:3a:e5:2a:
69:64:54:20:38:d6:ff:3b:48:cd:8a:aa:13:ee:12:
7d:60:c6:bc:e9:1a:29:b4:84:31:ce:28:1b:5a:12:
39:0b:c8:34:b9:4d:ea:5a:f7:ba:c3:99:8a:47:34:
75:1a:5d:bf:63:a8:b0:38:85:ab:83:f1:d1:98:55:
ac:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:24:09:A9:86:98:C9:B8:5A:62:59:48:4C:7F:59:BB:F1:CE:A7:DC
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-CQJqYaYybhaYllITH9Zu_HOp9w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.32.0/19
Signature Algorithm: sha256WithRSAEncryption
70:1e:27:80:a9:22:bb:6b:5d:c1:aa:23:cd:85:c5:51:c1:7e:
bd:f0:f1:69:3c:ae:74:5e:51:e4:7c:12:b6:4b:4f:39:39:91:
e9:61:08:aa:ff:11:7a:ec:e6:b0:e2:7d:02:04:cc:f7:15:a6:
4c:ea:bd:f3:fe:a5:b2:9b:4b:df:b6:35:73:78:cc:0f:37:74:
b4:41:7e:82:9a:29:9a:d7:1e:4a:20:24:8f:2e:ed:ac:56:28:
81:0b:6d:17:c0:fe:1b:4a:87:fa:3e:13:ed:cf:7f:0d:fb:e1:
13:17:79:04:1f:01:bc:98:6b:0e:35:25:3b:52:75:8f:79:53:
fc:48:12:48:55:c6:7d:12:3c:93:62:95:8f:39:02:12:2a:c4:
cf:c5:eb:b1:22:2a:6b:aa:83:35:18:43:18:9e:d6:30:af:49:
4a:6d:bc:0d:fe:ee:16:b8:4a:c8:32:42:c8:5e:ce:a9:67:ea:
a8:5a:88:ef:c0:ed:9b:51:e4:fc:f2:0c:3a:28:2b:27:f0:b5:
88:ec:26:3a:12:bb:32:0d:f1:59:ed:f7:16:70:29:81:68:08:
31:91:d2:2d:39:6e:60:3f:79:29:75:40:bb:23:73:a5:f3:a6:
3d:69:8c:b2:a4:d9:db:6a:5e:fb:7f:36:d6:a3:65:93:ce:5a:
24:e8:65:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:13 2023 by rpki-client on console-fra.rpki-client.org