Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0iTnrJJ2FjA3lYbo-WB2ahqvJ-E.roa
File: 0iTnrJJ2FjA3lYbo-WB2ahqvJ-E.roa (raw, json)
Hash identifier: 7qJ8lCtxRod1qvWB8J6cz5aVOtl/Q33JWR9xL/EUxkQ=
Subject key identifier: D2:24:E7:AC:92:76:16:30:37:95:86:E8:F9:60:76:6A:1A:AF:27:E1
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 18F7
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0iTnrJJ2FjA3lYbo-WB2ahqvJ-E.roa
Signing time: Sat 22 Oct 2022 06:05:56 +0000
ROA not before: Sat 22 Oct 2022 06:05:56 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.124.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6391 (0x18f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:05:56 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D224E7AC92761630379586E8F960766A1AAF27E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:02:17:fd:da:fa:e9:f7:ad:73:96:33:e0:9f:
9f:9e:a4:9e:71:6c:0e:b5:ea:47:da:2a:a6:93:17:
a6:9d:1b:e0:a9:68:0e:67:a6:ae:f1:c0:39:b2:4e:
1b:aa:50:49:2d:11:d2:65:33:1e:8b:1d:de:b9:44:
2c:63:25:01:3c:27:82:1a:bc:1d:2a:09:2a:ce:82:
c5:bc:d5:fc:bd:86:e5:c9:29:6c:5e:3b:0d:56:f8:
c1:64:18:25:fe:72:db:da:8d:38:09:e1:91:86:99:
fd:ca:84:9f:09:05:b3:ed:7c:a6:a5:a6:0e:d1:58:
d5:1b:dd:5a:98:b7:7b:61:39:8e:3c:06:6f:df:7d:
b8:d4:01:3c:c4:a6:99:49:79:98:b4:4a:fe:3f:7d:
7c:ea:c6:ea:24:89:4d:56:98:64:cf:e6:b8:6f:dc:
d2:d2:49:8f:ca:93:dd:ba:11:c5:0a:83:64:ad:4b:
1d:f0:48:64:20:70:63:86:ea:b7:bf:29:4b:a4:50:
f4:25:1f:49:c4:30:03:e1:c1:7b:12:57:c2:8b:38:
b3:06:a1:fd:1f:b7:10:a0:7f:43:c0:a1:65:cb:04:
f0:d1:f7:69:1b:12:c7:ca:53:56:05:91:05:40:59:
22:38:46:fe:ac:59:95:85:b8:47:a8:83:2b:f7:fa:
f3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:24:E7:AC:92:76:16:30:37:95:86:E8:F9:60:76:6A:1A:AF:27:E1
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0iTnrJJ2FjA3lYbo-WB2ahqvJ-E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.124.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:b7:f3:97:6b:be:39:10:60:d2:62:c0:71:8b:d3:13:41:d1:
a2:39:d2:58:0e:ca:9c:b0:dd:e7:b9:b2:8b:0a:c7:94:71:52:
3d:21:ed:0a:d6:68:85:cd:b5:50:5f:d0:cd:b7:23:d8:61:90:
b5:4f:61:d5:e9:03:97:4b:63:38:03:e1:25:1a:64:21:ec:ff:
ba:5c:36:c0:4f:c6:2b:f0:75:8d:92:fb:9d:49:5d:af:6c:4e:
30:58:85:c2:ac:14:bd:03:db:a9:5b:cc:06:5f:88:71:6d:ca:
b5:fe:a1:e2:e7:33:56:03:6e:35:5f:9a:f6:0a:12:3a:82:6b:
b9:85:7e:e5:bf:6f:23:fe:fb:74:fd:59:fd:96:fa:5d:69:79:
99:fa:5d:c9:62:e4:30:3a:19:18:d3:80:be:13:4d:ab:08:ab:
e6:1c:76:34:2d:74:6e:75:96:5c:a4:71:de:0c:70:e4:4c:d9:
42:89:2c:a6:29:5b:e3:2b:e1:c5:e9:69:db:8c:eb:4c:74:7b:
7a:4d:a3:5e:1a:69:a0:91:1e:b6:3c:1d:9d:86:e1:32:9d:7a:
94:87:e9:b1:fd:52:c7:ab:1c:7f:45:0d:f7:b0:f3:ba:58:95:
bd:3e:08:b2:83:f2:ac:6c:3a:c9:c9:2d:cc:50:c4:a2:59:a2:
b7:29:8f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:13 2023 by rpki-client on console-fra.rpki-client.org