Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-QDbczwhFHoKzLMjcczaq-IfMEE.roa
File: -QDbczwhFHoKzLMjcczaq-IfMEE.roa (raw, json)
Hash identifier: cZwlJHZ+y07fOulYv/hdl0fMGQJxSmdJwpFns4mWoVY=
Subject key identifier: F9:00:DB:73:3C:21:14:7A:0A:CC:B3:23:71:CC:DA:AB:E2:1F:30:41
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-QDbczwhFHoKzLMjcczaq-IfMEE.roa
Signing time: Thu 15 Sep 2022 02:35:32 +0000
ROA not before: Thu 15 Sep 2022 02:35:32 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.80.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:32 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F900DB733C21147A0ACCB32371CCDAABE21F3041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a5:d5:46:b2:7f:d5:a3:9e:5e:f7:72:4d:b7:
09:bf:6b:cc:8b:ea:9a:a3:b5:c1:d6:d1:03:fa:a8:
16:3b:8e:ea:6f:00:a6:7b:f8:54:64:de:d6:07:1e:
0f:91:f2:74:60:60:a0:49:ac:d0:51:68:d4:6b:e5:
e8:27:73:4d:18:bc:6b:a3:63:cd:3d:ee:c5:a1:8c:
e1:e4:c9:97:65:e7:68:30:d4:33:59:e8:24:1d:7d:
e6:c1:2f:4d:2b:67:20:05:70:ea:62:50:a8:7d:af:
d1:a3:b6:f9:79:13:88:97:ed:5a:c4:de:b8:f3:0a:
24:e9:7a:3c:e2:ed:c0:c9:8c:7b:0b:43:ae:35:f2:
80:f8:cb:9a:10:25:d5:f2:ed:fe:2c:f7:f6:59:53:
98:08:b5:1f:c8:8a:40:17:2f:48:da:c6:99:54:55:
0a:f3:3a:93:51:95:74:5d:1d:ce:f0:59:a4:ab:12:
a1:47:30:bd:9d:c1:27:8c:20:9c:b1:f3:b3:ad:3f:
21:c6:5f:80:9d:35:78:2e:87:b3:c0:ab:15:1d:1f:
1d:80:ef:0d:41:4a:c3:06:a3:d4:c3:bf:6d:10:61:
f0:72:4a:10:1e:7c:1a:91:09:28:8b:95:09:3c:0d:
da:1c:6b:5d:c3:45:2a:f7:8f:09:9d:f6:d6:c0:da:
bc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:00:DB:73:3C:21:14:7A:0A:CC:B3:23:71:CC:DA:AB:E2:1F:30:41
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-QDbczwhFHoKzLMjcczaq-IfMEE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.80.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:b0:32:bc:85:09:2c:06:8e:64:dd:a4:47:9d:f4:b1:67:ae:
14:4d:23:80:4e:da:6c:ce:85:0b:4f:e3:42:7c:fd:16:87:ea:
61:e7:3d:c9:89:db:f9:f2:72:a1:f2:2a:ec:18:62:d8:87:3c:
4d:5a:55:7a:e9:4f:aa:68:3a:ef:3e:f6:0b:7e:2f:13:e3:99:
1e:24:37:b7:ac:0a:e0:18:24:d6:f1:68:83:fd:e9:2d:b7:93:
5c:ab:99:5c:79:79:cb:7b:5f:72:b7:fc:5b:b0:23:e3:9c:e2:
91:6e:98:0a:2d:34:fa:ad:e8:42:42:9e:a6:7d:da:c6:26:b9:
55:05:6f:44:97:41:ac:09:05:2a:b8:5c:72:c4:a1:f5:41:79:
a4:4a:80:0f:a0:77:9b:4b:ce:2a:83:84:68:8a:ec:a4:e3:a1:
5f:03:bf:5f:5e:c5:ee:29:b8:4e:d6:45:19:e1:1e:72:b3:8d:
ce:7f:7b:e7:55:14:42:c8:9f:e6:a8:8b:e7:13:87:a1:68:b2:
d9:83:a7:22:fd:2d:b0:78:3d:9d:ef:6e:8b:58:9f:7e:f4:13:
c0:81:af:f0:37:21:63:23:32:12:ca:f7:33:13:18:7f:62:37:
b5:52:a9:db:93:fc:be:66:ad:b0:1d:b1:e3:81:e5:74:ed:0a:
1e:30:7d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:44 2023 by rpki-client on console-fra.rpki-client.org